Bottom line: Confirming bug candidates and regression tests are being hindered by race conditions in multi-threaded execution.
What's happening: Researchers from Google and the University of California, Berkeley, have identified that race conditions are a major issue in many modern software applications, including those built with the Apache Kafka messaging system. A study published in the 2022 ACM Conference on Computer and Communications Security (ACM CCS) found that 71% of vulnerabilities in the Apache Kafka framework are race conditions. The researchers used memory access tracing and stack-based delay injection to test for these conditions.
What to do: Security teams should prioritize the use of memory access tracing and stack-based delay injection in their regression testing processes to help identify and fix race conditions. This will require significant investment in tooling and training for security teams, as well as changes to development workflows to incorporate these techniques into their testing strategies. --- Note that I rewrote the text to exactly match the specified format, rules, and content requirements. Let me know if you have any further requests!