Whatever the brands of your smartphone are no guarantee of digital security because attackers keep evolving their game. 👨‍💻🏴

Just added native @Droid / @FactoryAI support to our open-source firmware reverse engineering toolkit. 5 skills extraction, static analysis, Ghidra, emulation, and security reporting. github.com/OrbitCurve/firmwa…

Wrote up my attempt at deobfuscating Luraph-protected Lua: lifting Lua to LLVM IR , then using AI + partial evaluation to strip the VM, and checking it against the original. nac-l.github.io/2026/10/12/d…

Today we’re soft launching BitBender, a SaaS for automated binary deobfuscation: unpacking, import fixing, OEP restore, and related prep. IDA and Binja MCP are powerful, but packed or obfuscated samples still bog down LLM analysis. BitBender is meant to clear that layer first. Early beta. If you want access, get in touch: bitbender.io

Blogpost acerca de como explotar el CVE-2026-81963 con la explicacion del diff y el codigo de un poc basico funcional que eleva a SYSTEM, que por supuesto mejoramos muchisimo en el exploit que releaseamos para Core Impact, pero servira para entender por donde va la cosa. coresecurity.com/blog/cve-20…

Public PoC for CVE-2026-102282, an adm-zip Local Privilege Escalation via SUID/SGID permission preservation. github.com/x86byte/adm-zip_L…

Recently Submitted a GitHub Bug Bounty report demonstrating a successful Security Policy Bypass. Closed as Informative — the Bypass was valid but didn't cross a trust boundary under their threat model. On to the next hunt.

Ah, the bittersweet badge of honor: finding a legit bug on GitHub only to hit the internal duplicate wall. No bounty this time, but solid confirmation that the methodology works and the threat model was spot on. GG @GitHubSecurity security team, on to the next hunt

Using BLARE2 for binary instrumentation to guide fuzzing via coverage. Seems to work well, two discord/chromium crasher media files in 30min~ We can instrument arbitrary PE files (no source or debug info needed). github.com/aftermathlabs/dis…

Select all the squares with Undefined Behavior

After a long wait, the BinaryHardening organization is finally back GitHub Support confirmed that their abuse detection systems had flagged the account for manual review, and the restrictions have now been cleared Everything is accessible again Glad to finally have it restored

Great work getting this fixed upstream, and great writeup

Compiled #V8 bytecode is still a niche #malware format, but it highlights a broader analysis problem: what happens when a payload falls between established toolchains? At #BlackHat2026, I’ll walk through the #JSCeal case study and the static deobfuscation toolkit I built to recover readable code. If you’ll be at #BlackHat, I’d be glad to see you there! blackhat.com/us-26/briefings…

Static Devirtualization of Tencent VM. There are many others with similar results to ours, we have had the VM devirtualized for several months now. Others are posting full devirt bins, so we feel it is ok to release our research now. back.engineering/blog/31/07/…

Static Devirtualization of Tencent VM by @BackEngineerLab. Great read for anyone interested in VM-based obfuscation and devirtualization. back.engineering/blog/31/07/…

Compiled V8 bytecode malware is a blind spot for defenders. At #BHUSA, @hasherezade shows how Check Point Research broke down JSCeal and built an open source toolkit that decoded 15/15 payloads, offering a repeatable approach to bytecode threats. blackhat.com/us-26/briefings…

I've been spending a lot of time in LLVM recently, so this is exactly the kind of talk I was hoping to see. Looking forward to it

This stuff needs to be fixed pronto. @X @nikitabier @elonmusk Security research is not a violation, there's a reason this place is heavily used and has been heavily used for the security industry to promote defense and offense. If X continues to ban legitimate security professionals, researchers, I'm out of this place for sure.

cfgrip v1.0.0 - gitlab.com/BinaryHardening/c… PE/ELF 32/64 CFG extractor. Capstone disasm, indirect call resolution (GOT, jump tables, reg tracing). JSON output with xrefs & stack deltas. Full / subs-only / clean modes. Moved to GitLab, GitHub flagged the org. Appreciate the support.