TECHNICAL LOG · 2026-09
A dated technical log, one entry a day, newest first. Entries for 2026-07-01 to 2026-10-11 are historical reviews written later and first published from 2026-10-12, not on the day they cover; each shows both the covered date and the real publication date. Later entries are published on their actual dates.
javascript-obfuscator 5.8.1, released 2026-09-30, fixed two obfuscation bugs that changed program semantics, a reminder to test the obfuscated output itself.
Historical technical review (written later) · Covers · First published
Read entryO-MVLL 1.11.0, released 2026-09-29, targets Xcode 27.0 and NDK r29, adds BasicBlockSplit and ShuffleOps passes, and lets annotations select passes.
Historical technical review (written later) · Covers · First published
Read entryOn 2026-09-28 the GitHub Blog described auditing Android app source with an open-source taskflow agent, finding exported-component, deeplink and cookie-domain flaws.
Historical technical review (written later) · Covers · First published
Read entryAn arXiv paper submitted on 2026-09-27 analyzed credential-exposure chains in LLM agent systems and evaluated a vault-mediated boundary that injects authentication outside the model.
Historical technical review (written later) · Covers · First published
Read entryelectron-builder 26.17.0, released 2026-09-26, added an NSIS 'store-asar' mode and fixed differential updates, so the update pipeline's integrity needs retesting.
Historical technical review (written later) · Covers · First published
Read entryFrida 17.19.0, released 2026-09-25, fixed issues on iOS 27 and macOS 27 and improved arm64 handling, showing how short the 'new OS breaks the tools' window is.
Historical technical review (written later) · Covers · First published
Read entryOn 2026-09-24 the Android Developers Blog announced that Android Studio Canary can connect third-party AI coding agents that read and write files and run commands.
Historical technical review (written later) · Covers · First published
Read entryOn 2026-09-23 the .NET blog announced a new Microsoft author-signing certificate for NuGet packages; teams enforcing signer allow lists must add the new fingerprint or hit NU3034.
Historical technical review (written later) · Covers · First published
Read entryLLVM 23.1.2, released 2026-09-22 with 19 commits including AArch64 tail-call fixes, is a reminder that toolchain bumps are security-relevant for compile-time obfuscation.
Historical technical review (written later) · Covers · First published
Read entryMobSF 4.5.3, released 2026-09-21, fixed SSRF, path traversal, zip-bomb and CSRF issues and added a REST API for viewing decompiled Android XML.
Historical technical review (written later) · Covers · First published
Read entryjavascript-obfuscator 5.8.0, released 2026-09-20, can fetch and merge custom presets from its Pro API, so build reproducibility deserves a fresh look.
Historical technical review (written later) · Covers · First published
Read entryAn arXiv paper submitted on 2026-09-19 used seven agents to generate business requirements documents from undocumented enterprise software, showing how the cost of understanding rules is falling.
Historical technical review (written later) · Covers · First published
Read entryAn arXiv paper submitted on 2026-09-18 presented package-level static analysis of CPython 3.10–3.14 bytecode, a reminder that shipping only bytecode does not hide logic.
Historical technical review (written later) · Covers · First published
Read entryAn arXiv paper submitted on 2026-09-17 showed that a non-executed false narrative appended to a binary can noticeably shift the verdicts of LLM-based malware analyzers.
Historical technical review (written later) · Covers · First published
Read entryAn arXiv paper submitted on 2026-09-16 used recompilation as a trusted check so that neural decompiler output matched the target assembly exactly more often.
Historical technical review (written later) · Covers · First published
Read entryElectron 44.4.0 validated privileged scheme names and fixed V8 code caching and a cross-site drag-and-drop check, so desktop apps relying on them should re-test.
Historical technical review (written later) · Covers · First published
Read entryApple released Xcode 27; with an iOS 27 SDK minimum from April 2027, protection steps tied to the toolchain need re-validation well ahead of that date.
Historical technical review (written later) · Covers · First published
Read entryThe paper recovers both the architecture and parameters of ReLU fully connected networks through black-box queries, dropping the known-architecture assumption.
Historical technical review (written later) · Covers · First published
Read entryTesting 22 models on deliberately deceptive contract bytecode, the paper found indirection cut detection by about 20 points, under a single-shot, bytecode-only protocol.
Historical technical review (written later) · Covers · First published
Read entryHieronym combines global, calling and intrinsic context in a generative LLM to name functions in stripped binaries, reporting large gains over prior methods.
Historical technical review (written later) · Covers · First published
Read entryA study of 115 TEE deployments found 91% were not reproducible, a reminder that attesting a binary means little unless you can trace that binary to its source.
Historical technical review (written later) · Covers · First published
Read entryFrida 17.18.0 expanded kernel-side and Barebone agents, a reminder that an app's in-process self-checks may observe from a lower vantage point than the analyst.
Historical technical review (written later) · Covers · First published
Read entryNDK r30 updated Clang and fixed LTO and miscompilation bugs, so native protection pipelines built on LLVM need a fresh baseline.
Historical technical review (written later) · Covers · First published
Read entryKotlin 2.4.20 enabled annotations in JVM metadata by default and added metadata flags, so teams should re-check what metadata their release builds carry.
Historical technical review (written later) · Covers · First published
Read entryradare2 6.2.2 improved typed JNI resolution, Swift metadata recovery and .NET CIL support, making cross-language seams in apps easier to analyze.
Historical technical review (written later) · Covers · First published
Read entryBun v1.4.2 fixed a 1.4.1 bun build renaming regression, a reminder that every code transformation, including obfuscation, needs behavioral tests on its output.
Historical technical review (written later) · Covers · First published
Read entryMagisk v31.0 shipped as a pre-release with Android 17 Zygisk support and a wider DenyList, a reminder that on-device root checks are a contested signal.
Historical technical review (written later) · Covers · First published
Read entryBinary Ninja 6.0 shipped a first-party MCP server for LLM clients, faster analysis, and binary similarity, making LLM-driven analysis a mainstream workflow.
Historical technical review (written later) · Covers · First published
Read entryA paper applied boundary-mutation testing to three secret scanners, found deterministic rule-level misses, and showed a plausible rule fix can silently break other rules.
Historical technical review (written later) · Covers · First published
Read entryReveree scored nine frontier models on 88 CTF reversing tasks stage by stage; failures clustered in comprehension, and memorization coexisted with genuine analysis.
Historical technical review (written later) · Covers · First published
Read entry