MH

baby reverser, @bleizack, @securinsa, student @ ESNA • CTF @ret2school_fr • @infosec.exchange

[matteyeux @matteyeux]

Today I am releasing the Binary Ninja Diffing plugin.

It features Control flow graph, disassembly, LLIL, MLIL and HLIL diffing views.

You can Save and restore diffs from the BNDB or json file.

Supports porting function names from one binary to the other

[Back Engineering Labs @BackEngineerLab]

Static Devirtualization of Tencent VM. There are many others with similar results to ours, we have had the VM devirtualized for several months now. Others are posting full devirt bins, so we feel it is ok to release our research now.
https://t.co/0Aog04fEvv

[matteyeux @matteyeux]

I built a Binary Ninja diffing tool that lets you visualize differences directly in Binary Ninja, with support for multiple Intermediate Languages (ILs).

It uses Quarkslab's QBinDiff for the diffing engine, and getting started is as simple as dragging and dropping two binaries.

[MH @JustMissingLeg]

@b1ack0wl Really nice embroidered t-shirt, anyway to get it sent to France, willing to pay for shipping, a love for baguettes you knows…

[Thalium Team @thalium_team]

During #SSTIC 2026, we presented two chains targeting the Philips Hue Bridge. We shared all the details of the HomeKit Accessory Protocol path, and promised a follow-up on the Zigbee one.
Time to turn on the light! Join our expert Maxime for an enlightening dive at #barbhack26 ⚡

[TheRealClarity @imnotclarity]

As promised, DarkSword Kernel Exploit writeup is now live at https://t.co/aji0Xc3JNU
This goes over the root cause, what happens on the Kernel side and how the kernel exploit is implemented.
Hope it helps anyone looking to understand it! :)

[Crackmes.one @CrackmesOne]

We built crackmes-RE: 4,598 crackmes labeled with a flag and/or a runnable verifier script (2,172 have one), plus normalized obfuscation/anti-debugging/protections tags. For benchmarking LLMs' and decompilers' reverse-engineering ability. https://t.co/R9CGvziTUK

[Zerotistic @gegrgtezrze]

When Linux and Your Decompiler Load Different Programs:

Built an ELF where Binary Ninja, Hex-Rays, and Ghidra all decompile a call as read(). It calls write().
The file and https://t.co/eFKZLLhTf4 don't agree on what one relocation says.

Here's how:
https://t.co/orpzRUIk1C

[MH @JustMissingLeg]

@nisedo_ @0xFlint_ Zellij is refreshing UI-wise

[Frida @fridadotre]

🚀 Luma is here.

A new workspace for Frida.

Persistent sessions. Interactive REPL. frida-trace. Collaboration.

Available now for macOS, iOS, Linux, and Windows.

[Maurice Heumann @momo5502]

Sogen now has KVM support. That allows running games at near native speed on Linux, while being completely isolated from the host system.

It's still a bit buggy, but making progress :D

[Hex-Rays SA @HexRaysSA]

IDA 9.4 teasers continue with two new navigation features:
1️⃣ Jump Anywhere is now the default G dialog — search functions, names, types, and segments in one box with live previews.
2️⃣ Pathfinder, a new tool for asking "can this code reach that?" directly from the xref graph.

Read the blog for the full breakdown.
👉 https://t.co/pbuNkptMk9

[Phillip Koskinas @deteccphilippe]

Short 30 page thesis on Vanguard's new on-demand mode, including details on what cheaters have been up to, what we're cooking next, and what vegetables keep me regular.
https://t.co/UcPpMLgQq5

[Hex-Rays SA @HexRaysSA]

IDA 9.4 pre-release teasers continue.

This week: a dramatically improved Dyld Shared Cache workflow. No more loading the entire DSC just to keep cross-references intact. IDA 9.4 brings on-demand loading, fluid navigation, new specialized widgets, and a clean API usable by both humans and agents.

👉 https://t.co/iyibibh4SN

[Hex-Rays SA @HexRaysSA]

⏱️ IDA 9.4 pre-release teasers start now.
First up: wider processor and platform support.

The upcoming release adds a Qualcomm Hexagon module, MCore and C-SKY V1, complete AArch64 SVE/SME, improved TriCore analysis with proper calling conventions, and expanded RISC-V coverage including Hazard3/RP2350 and new vendor extensions.

👉 https://t.co/uNlbm8SAB0

[Binary Wizards @BinaryWizards]

What's new in IDA 9.4 Beta.

(This video also acts as a mini tutorial for some of the new features).

https://t.co/4XSOcKPzmA

@HexRaysSA

[Maurice Heumann @momo5502]

Sogen is starting to get 3d graphics support.

Currently, this uses a software renderer, but next step is GPU paravirtualization.

With the Hyper-V backend, performance is incredible.

This might become a sandboxing environment, e.g. to safely play old, vulnerable games

[Thalium Team @thalium_team]

In October as part of #Pwn2Own Ireland, we identified several bugs that allowed full compromise of the Philips Hue Bridge, the control center of the Hue lighting system. Join us tomorrow as we shed light on them during #SSTIC 2026💡

https://t.co/5rSdUBAzH1

[Maurice Heumann @momo5502]

I added experimental window/UI support to my emulator.

Nothing better than running windows GUI apps in the browser.

[eversinc33 🤍🔪⋆｡˚ ⋆ @eversinc33]

Spent the last 2 weeks working on a devirtualizer for VMProtect 3.5 and learning Remill. Idk yet if I will blog about it, but I at least wanted to publish the code:

https://t.co/GLqKWpOOU7

The approach is different from my last blog, as it lifts the whole x86 code of the VM