Frida 17.21.0
See https://frida.re/news/ for details.
Why it matters: Relevant to APK and IPA analysis, Dynamic instrumentation.
Read the original source →v48.0.5: Release Wasmtime 48.0.5 (#14495)
48.0.5 Released 2026-10-02. Fixed Fixed an issue where artifacts for 48.0.4 didn't get correctly published from CI and a GitHub release for 48.0.4 wasn't made. #14494 48.0.4 Released 2026-10-02. Fixed WASI preview 0 implementation of poll_oneoff circumvents fuel consumption. GHSA-j366-h8gg-77pm Excessive allocated memory on the host when guests don't have s…
Why it matters: Relevant to WebAssembly runtime.
Read the original source →v49.0.2: Release Wasmtime 49.0.2 (#14474)
49.0.2 Released 2026-10-02. Fixed WASI preview 0 implementation of poll_oneoff circumvents fuel consumption. GHSA-j366-h8gg-77pm Excessive allocated memory on the host when guests don't have stdio. GHSA-gqmc-89g8-p25r fd_readdir copies uninitialized struct padding into guest memory. GHSA-96f6-r43r-8c24 Guest can panic host through filesystem timestamp befor…
Why it matters: Relevant to WebAssembly runtime.
Read the original source →Characterizing and Codifying Malware Sophistication
'Sophisticated' is widely used to describe malware, yet it lacks a consistent definition within academic literature. While existing software quality and complexity metrics offer some insight into malware structure, they do not capture the broader adversarial and operational traits that contribute to real-world threat potential. This paper presents a systema…
Why it matters: Relevant to Binary reverse engineering.
Read the original source →v2.4.0 Usability improvements and Unity 6.7 support
What Changed Analyze usability improvements: Analyze now records SerializeReference instances in the new managed_references table. Previously this information was hard to determine without large scale dumping of all the built content. Archive files (e.g. asset bundles) are tracked by relative path so that it is not a conflict if the same name appears twice…
Why it matters: Relevant to Unity engine releases, Unity asset extraction.
Read the original source →v2.3.0 Unity 6.7 support
What's Changed The focus for this release is adding support for Unity 6.7, which is now in Beta. The main changes for Unity 6.7 support: the new "v9" for the Unity Archive format (which will greatly improves patchability when using chunk based compression, e.g. LZ4, LZ4HC). multiple changes to the serialized file format updated version of UnityFileSystemApi…
Why it matters: Relevant to Unity engine releases, Unity asset extraction.
Read the original source →v10.0.1.post1
release version 10.0.1.post1
Why it matters: Relevant to Binary reverse engineering, Decompiler research.
Read the original source →dev/6.1.10815: Bound PE section name expansion and fix limit settings display
Validate string-table offsets and bound section name reads using configurable per-name and aggregate limits. Fall back to header names with one warning when names are invalid or exceed a limit. Allow -1 to disable each limit. Always resolve names of eight bytes or fewer, including .reloc, to preserve relocation handling.
Why it matters: Relevant to Binary reverse engineering, Decompiler research.
Read the original source →dev/6.1.10811: Bound PE section name expansion and fix limit settings display
Validate string-table offsets and bound section name reads using configurable per-name and aggregate limits. Fall back to header names with one warning when names are invalid or exceed a limit. Allow -1 to disable each limit. Always resolve names of eight bytes or fewer, including .reloc, to preserve relocation handling.
Why it matters: Relevant to Binary reverse engineering, Decompiler research.
Read the original source →