PRIMARY SOURCE LIBRARY
Source library
Traceable originals. Licensed reproductions. Clearly separated analysis.
All 151 distinct sources cited by the blog, including 3 reviewed licensed documents available to read here. Other sources currently link to their original and our analysis; no permission to reproduce them in full is claimed.
Licensed reproduction · MIT
Electron: ASAR Archives
www.electronjs.org · Source checked 2026-10-12
Licensed reproduction · CC-BY-4.0
Microsoft: Native AOT deployment overview
learn.microsoft.com · Source checked 2026-10-12
Licensed reproduction · CC-BY-4.0
Microsoft: Prepare libraries for trimming
learn.microsoft.com · Source checked 2026-10-12
Original link · full text not reproduced
.NET Blog: Microsoft is updating its author-signing certificate starting September 23, 2026
devblogs.microsoft.com · Source checked 2026-10-12
Original link · full text not reproduced
Android Developers Blog: Build intelligent Android apps: Cloud and hybrid inference
android-developers.googleblog.com · Source checked 2026-10-12
Original link · full text not reproduced
Android Developers Blog: Build intelligent Android apps: On-device inference
android-developers.googleblog.com · Source checked 2026-10-12
Original link · full text not reproduced
Android Developers Blog: Build your way: Use any AI agent of your choice in Android Studio
android-developers.googleblog.com · Source checked 2026-10-12
Original link · full text not reproduced
Android Developers Blog: Evolving how LLMs are measured for Android: the next era of Android Bench
android-developers.googleblog.com · Source checked 2026-10-12
Original link · full text not reproduced
Android Developers Blog: Tinder cuts app cold starts by 47% with new R8 Configuration Analyzer
android-developers.googleblog.com · Source checked 2026-10-12
Original link · full text not reproduced
Android: About keep rules
developer.android.com · Source checked 2026-10-12
Original link · full text not reproduced
Android: Enable app optimization with R8
developer.android.com · Source checked 2026-10-12
Original link · full text not reproduced
Android: Hardcoded cryptographic secrets
developer.android.com · Source checked 2026-10-12
Original link · full text not reproduced
Android: Sign your app
developer.android.com · Source checked 2026-10-12
Original link · full text not reproduced
Apple App security overview
support.apple.com · Source checked 2026-10-12
Original link · full text not reproduced
Apple Developer News: App Store submissions now open for the latest OS releases
developer.apple.com · Source checked 2026-10-12
Original link · full text not reproduced
Apple Developer News: Upcoming expiration of Developer ID Certification Authority (Sub-CA)
developer.apple.com · Source checked 2026-10-12
Original link · full text not reproduced
Apple Developer: Releases - Xcode 27 (27A266a)
developer.apple.com · Source checked 2026-10-12
Original link · full text not reproduced
Apple Support: About the security content of iOS 26.6.1 and iPadOS 26.6.1
support.apple.com · Source checked 2026-10-12
Original link · full text not reproduced
Apple Support: Apple security releases
support.apple.com · Source checked 2026-10-12
Original link · full text not reproduced
Apple: App code signing process
support.apple.com · Source checked 2026-10-12
Original link · full text not reproduced
Apple: Developer ID certificates
developer.apple.com · Source checked 2026-10-12
Original link · full text not reproduced
Apple: Establishing your app’s integrity
developer.apple.com · Source checked 2026-10-12
Original link · full text not reproduced
arXiv: "They don't care about this": A Systematic Study of TEE Build Reproducibility in the Wild (2609.11411)
arxiv.org · Source checked 2026-10-12
Original link · full text not reproduced
arXiv: A large-scale dataset of Android applications and their SDK dependencies (2607.02627)
arxiv.org · Source checked 2026-10-12
Original link · full text not reproduced
arXiv: A Multi-Month Study of Git Commit Signing
arxiv.org · Source checked 2026-10-12
Original link · full text not reproduced
arXiv: ActReal: System-Level Mobile Agents Challenge Mobile Automation Detection
arxiv.org · Source checked 2026-10-12
Original link · full text not reproduced
arXiv: Agent Harness Distillation: Inference-Time Harness Extraction and Exploitation in Autonomous Multi-Agent Systems (2607.28147)
arxiv.org · Source checked 2026-10-12
Original link · full text not reproduced
arXiv: AgenTag: Attribution of AI Coding Agents from Behavioral Fingerprints (2608.00966)
arxiv.org · Source checked 2026-10-12
Original link · full text not reproduced
arXiv: Agentic Security: A Systematization of Tools, Failure Modes, and Design Laws for LLM-Driven Penetration Testing (2608.21423)
arxiv.org · Source checked 2026-10-12
Original link · full text not reproduced
arXiv: ALIBI: Adversarial Legitimacy Injection in Binary Input against LLM Malware Analyzers (2609.19722)
arxiv.org · Source checked 2026-10-12
Original link · full text not reproduced
arXiv: API Secrets Should Never Become Tokens in the LLM's Vocabulary (2609.33371)
arxiv.org · Source checked 2026-10-12
Original link · full text not reproduced
arXiv: Assessing the Forensic Viability of Android Memory Analysis Across Production Builds (2607.13821)
arxiv.org · Source checked 2026-10-12
Original link · full text not reproduced
arXiv: Behavior Specification-Guided Program Synthesis for Binary Deobfuscation
arxiv.org · Source checked 2026-10-12
Original link · full text not reproduced
arXiv: Boundary-Mutation Testing for Pattern-Based Secret Detection (2609.02983)
arxiv.org · Source checked 2026-10-12
Original link · full text not reproduced
arXiv: CPyGraph: A Version-Aware Static Analysis Framework for Native CPython Bytecode (2609.25083)
arxiv.org · Source checked 2026-10-12
Original link · full text not reproduced
arXiv: Cryptanalytic Extraction of Neural Networks Without Known Architecture Assumption (2609.14379)
arxiv.org · Source checked 2026-10-12
Original link · full text not reproduced
arXiv: Decoupling is a Necessity: Transformation-Agnostic Decompiled Code Recovery under Optimization and Obfuscation
arxiv.org · Source checked 2026-10-12
Original link · full text not reproduced
arXiv: Detection of LLM-assisted Code Plagiarism Using k-gram Software Birthmarks (2607.03014)
arxiv.org · Source checked 2026-10-12
Original link · full text not reproduced
arXiv: Directed Symbolic Execution for Vulnerability Discovery: An LLM-Guided Approach in KLEE (2607.21676)
arxiv.org · Source checked 2026-10-12
Original link · full text not reproduced
arXiv: Echo: Learning-based Matching Decompilation using Trusted Back Translation (2609.18706)
arxiv.org · Source checked 2026-10-12
Original link · full text not reproduced
arXiv: Evaluating Neural Decompilation of Dart AOT Binaries (2607.06125)
arxiv.org · Source checked 2026-10-12
Original link · full text not reproduced
arXiv: From Code to Requirements: Agentic Reverse Engineering of Business Rules at Enterprise Scale (2609.22719)
arxiv.org · Source checked 2026-10-12
Original link · full text not reproduced
arXiv: From Signals to Behaviors: Evidence-Based Android Malware Detection (2607.23272)
arxiv.org · Source checked 2026-10-12
Original link · full text not reproduced
arXiv: Fusing UI Structure & Semantics for Feature-Oriented App Screen Retrieval & Clustering (2608.08880)
arxiv.org · Source checked 2026-10-12
Original link · full text not reproduced
arXiv: Hieronym: Leveraging Hierarchical Multi-Source Information for Function Renaming in Stripped Binary (2609.12457)
arxiv.org · Source checked 2026-10-12
Original link · full text not reproduced
arXiv: Invariant Pretraining for Robust Code Representations (2608.15412)
arxiv.org · Source checked 2026-10-12
Original link · full text not reproduced
arXiv: Modelling Android applications through static analysis and systematic exploratory testing (2608.00228)
arxiv.org · Source checked 2026-10-12
Original link · full text not reproduced
arXiv: NotDec: WebAssembly Decompilation With Inter-Procedural Type Recovery (2608.03286)
arxiv.org · Source checked 2026-10-12
Original link · full text not reproduced
arXiv: PADRAIG: Precise Android Automated Input Generation (2608.00230)
arxiv.org · Source checked 2026-10-12
Original link · full text not reproduced
arXiv: PoCEvolve: Generating Proof-of-Concept Exploits from Security Patches with Vulnerability-Aware Prompt Evolution (2607.22076)
arxiv.org · Source checked 2026-10-12
Original link · full text not reproduced
arXiv: Post-Hoc Attention Steering of Large Language Models for Robust Code Understanding under Obfuscation
arxiv.org · Source checked 2026-10-12
Original link · full text not reproduced
arXiv: Pretraining on Call Graphs: When Binary Analysis Tasks Profit From Context (2608.02084)
arxiv.org · Source checked 2026-10-12
Original link · full text not reproduced
arXiv: Rebuild Dossier: Mechanically-Enforced Specs for Agentic App Rebuilds, and What Model-Tier Failures Reveal
arxiv.org · Source checked 2026-10-12
Original link · full text not reproduced
arXiv: Reveree: Diagnosing LLM Reverse-Engineering Agents (2609.01185)
arxiv.org · Source checked 2026-10-12
Original link · full text not reproduced
arXiv: Semantic-Enhanced Automatic Refinement of Architecture Recovery Results Using LLMs (2607.23774)
arxiv.org · Source checked 2026-10-12
Original link · full text not reproduced
arXiv: Small, Free, and Effective: Orchestrating Open-Weight Small Language Models to Outperform Single LLM for Malware Analysis (2607.20216)
arxiv.org · Source checked 2026-10-12
Original link · full text not reproduced
arXiv: SoK: Are LLMs Reliable at Source Code Recovery? A Taxonomy and Empirical Evaluation (2610.11556)
arxiv.org · Source checked 2026-10-12
Original link · full text not reproduced
arXiv: STILL: Recovering Lowered STL Semantics for LLM-assisted C++ Decompilation
arxiv.org · Source checked 2026-10-12
Original link · full text not reproduced
arXiv: Targeted Counterfactual Fingerprinting for Black-Box LLM Ownership Verification (2608.08195)
arxiv.org · Source checked 2026-10-12
Original link · full text not reproduced
arXiv: The Deception Delta: Adversarial Evaluation of LLM-Based Smart Contract Bytecode Forensics (2609.14098)
arxiv.org · Source checked 2026-10-12
Original link · full text not reproduced
arXiv: The Limits of Query Monitoring against Distributed Model Extraction (2610.13083)
arxiv.org · Source checked 2026-10-12
Original link · full text not reproduced
arXiv: The Next Challenge for Agentic Cybersecurity: A Realistic, Contamination-Free Reverse Engineering Benchmark (2608.11469)
arxiv.org · Source checked 2026-10-12
Original link · full text not reproduced
arXiv: Trusting-Trust Attack against an Entire Linux Distribution through Binary Manipulation (2607.24888)
arxiv.org · Source checked 2026-10-12
Original link · full text not reproduced
arXiv: VR-Themis: A Scalable Framework for Virtual Reality Application Clone Detection (2608.13290)
arxiv.org · Source checked 2026-10-12
Original link · full text not reproduced
arXiv: When Binaries Talk Back: Representation-Confusion Attacks on LLM-Assisted Reverse Engineering (2607.12507)
arxiv.org · Source checked 2026-10-12
Original link · full text not reproduced
arXiv: Workspace Topology as an Attack Vector in Agentic Coding Assistants (2608.14876)
arxiv.org · Source checked 2026-10-12
Original link · full text not reproduced
Binary Ninja: Binary Ninja 6.0 Krypton
binary.ninja · Source checked 2026-10-12
Original link · full text not reproduced
Bun Blog: Bun v1.4.2
bun.sh · Source checked 2026-10-12
Original link · full text not reproduced
Bun Blog: Bun v1.4.3
bun.com · Source checked 2026-10-12
Original link · full text not reproduced
Flutter: Obfuscate Dart code
docs.flutter.dev · Source checked 2026-10-12
Original link · full text not reproduced
Frida official documentation
frida.re · Source checked 2026-10-12
Original link · full text not reproduced
Frida: Frida 17.15.5 Released
frida.re · Source checked 2026-10-12
Original link · full text not reproduced
Frida: Frida 17.16.0 Released
frida.re · Source checked 2026-10-12
Original link · full text not reproduced
Frida: Frida 17.17.0 Released
frida.re · Source checked 2026-10-12
Original link · full text not reproduced
Frida: Frida 17.18.0 Released
frida.re · Source checked 2026-10-12
Original link · full text not reproduced
Frida: Frida 17.19.0 Released
frida.re · Source checked 2026-10-12
Original link · full text not reproduced
Frida: Frida 17.20.0 Released
frida.re · Source checked 2026-10-12
Original link · full text not reproduced
Frida: Frida 17.22.0 Released
frida.re · Source checked 2026-10-12
Original link · full text not reproduced
GitHub Blog: How we found 24 Android vulnerabilities using our open source AI security agent
github.blog · Source checked 2026-10-12
Original link · full text not reproduced
GitHub Changelog: Dependabot alerts on malicious packages across more ecosystems
github.blog · Source checked 2026-10-12
Original link · full text not reproduced
GitHub Changelog: npm publish-time malware scanning and dual-use metadata
github.blog · Source checked 2026-10-12
Original link · full text not reproduced
GitHub Security Advisory: GHSA-fx35-mq7g-6g98 Verification bypass via public key in legacy bundle
github.com · Source checked 2026-10-12
Original link · full text not reproduced
GitHub: anchore/syft release v1.48.0
github.com · Source checked 2026-10-12
Original link · full text not reproduced
GitHub: android/ndk release r30
github.com · Source checked 2026-10-12
Original link · full text not reproduced
GitHub: electron-builder release electron-builder@26.17.0
github.com · Source checked 2026-10-12
Original link · full text not reproduced
GitHub: electron/electron release v44.1.0
github.com · Source checked 2026-10-12
Original link · full text not reproduced
GitHub: electron/electron release v44.4.0
github.com · Source checked 2026-10-12
Original link · full text not reproduced
GitHub: frida release 17.19.0
github.com · Source checked 2026-10-12
Original link · full text not reproduced
GitHub: frida/frida release 17.15.5
github.com · Source checked 2026-10-12
Original link · full text not reproduced
GitHub: frida/frida release 17.16.0
github.com · Source checked 2026-10-12
Original link · full text not reproduced
GitHub: frida/frida release 17.17.0
github.com · Source checked 2026-10-12
Original link · full text not reproduced
GitHub: frida/frida release 17.18.0
github.com · Source checked 2026-10-12
Original link · full text not reproduced
GitHub: frida/frida release 17.20.0
github.com · Source checked 2026-10-12
Original link · full text not reproduced
GitHub: frida/frida release 17.22.0
github.com · Source checked 2026-10-12
Original link · full text not reproduced
GitHub: golang/go release go1.27.0
github.com · Source checked 2026-10-12
Original link · full text not reproduced
GitHub: Guardsquare/proguard release 7.10
github.com · Source checked 2026-10-12
Original link · full text not reproduced
GitHub: iBotPeaches/Apktool release v3.0.3
github.com · Source checked 2026-10-12
Original link · full text not reproduced
GitHub: icsharpcode/ILSpy release ILSpy 11.0 Preview 1
github.com · Source checked 2026-10-12
Original link · full text not reproduced
GitHub: icsharpcode/ILSpy release v11.0
github.com · Source checked 2026-10-12
Original link · full text not reproduced
GitHub: javascript-obfuscator README
github.com · Source checked 2026-10-12
Original link · full text not reproduced
GitHub: javascript-obfuscator release 5.4.5
github.com · Source checked 2026-10-12
Original link · full text not reproduced
GitHub: javascript-obfuscator release 5.4.6
github.com · Source checked 2026-10-12
Original link · full text not reproduced
GitHub: javascript-obfuscator release 5.6.0
github.com · Source checked 2026-10-12
Original link · full text not reproduced
GitHub: javascript-obfuscator release 5.8.0
github.com · Source checked 2026-10-12
Original link · full text not reproduced
GitHub: javascript-obfuscator release 5.8.1
github.com · Source checked 2026-10-12
Original link · full text not reproduced
GitHub: javascript-obfuscator release 5.9.0
github.com · Source checked 2026-10-12
Original link · full text not reproduced
GitHub: javascript-obfuscator/javascript-obfuscator release 5.5.0
github.com · Source checked 2026-10-12
Original link · full text not reproduced
GitHub: JetBrains/kotlin release v2.4.20
github.com · Source checked 2026-10-12
Original link · full text not reproduced
GitHub: joxeankoret/diaphora release 3.4.3
github.com · Source checked 2026-10-12
Original link · full text not reproduced
GitHub: lief-project/LIEF release 1.0.0
github.com · Source checked 2026-10-12
Original link · full text not reproduced
GitHub: llvm-project release llvmorg-23.1.2
github.com · Source checked 2026-10-12
Original link · full text not reproduced
GitHub: llvm/llvm-project release LLVM 23.1.0
github.com · Source checked 2026-10-12
Original link · full text not reproduced
GitHub: llvm/llvm-project release LLVM 23.1.3
github.com · Source checked 2026-10-12
Original link · full text not reproduced
GitHub: llvm/llvm-project release llvmorg-23.1.1
github.com · Source checked 2026-10-12
Original link · full text not reproduced
GitHub: mandiant/GoReSym README (current, undated)
github.com · Source checked 2026-10-12
Original link · full text not reproduced
GitHub: mandiant/GoReSym release v3.4
github.com · Source checked 2026-10-12
Original link · full text not reproduced
GitHub: MobSF release v4.5.3
github.com · Source checked 2026-10-12
Original link · full text not reproduced
GitHub: MobSF/Mobile-Security-Framework-MobSF release v4.5.2
github.com · Source checked 2026-10-12
Original link · full text not reproduced
GitHub: nodejs/node PR #65810 sea: add vfsArchive to serve the assets from a ZIP archive
github.com · Source checked 2026-10-12
Original link · full text not reproduced
GitHub: nodejs/node release v24.18.1
github.com · Source checked 2026-10-12
Original link · full text not reproduced
GitHub: nodejs/node release v26.11.0
github.com · Source checked 2026-10-12
Original link · full text not reproduced
GitHub: O-MVLL release 1.11.0
github.com · Source checked 2026-10-12
Original link · full text not reproduced
GitHub: open-obfuscator/o-mvll release 1.9.0
github.com · Source checked 2026-10-12
Original link · full text not reproduced
GitHub: open-obfuscator/o-mvll release 1.9.1
github.com · Source checked 2026-10-12
Original link · full text not reproduced
GitHub: oven-sh/bun release Bun v1.4.3
github.com · Source checked 2026-10-12
Original link · full text not reproduced
GitHub: oven-sh/bun release bun-v1.4.2
github.com · Source checked 2026-10-12
Original link · full text not reproduced
GitHub: radareorg/radare2 release 6.2.0
github.com · Source checked 2026-10-12
Original link · full text not reproduced
GitHub: radareorg/radare2 release 6.2.2
github.com · Source checked 2026-10-12
Original link · full text not reproduced
GitHub: radareorg/radare2 release 6.2.4
github.com · Source checked 2026-10-12
Original link · full text not reproduced
GitHub: sigstore/cosign release v3.1.3
github.com · Source checked 2026-10-12
Original link · full text not reproduced
GitHub: skylot/jadx release v1.5.6
github.com · Source checked 2026-10-12
Original link · full text not reproduced
GitHub: topjohnwu/Magisk release v31.0
github.com · Source checked 2026-10-12
Original link · full text not reproduced
GitHub: upx/upx milestone 24 (closed items)
github.com · Source checked 2026-10-12
Original link · full text not reproduced
GitHub: upx/upx NEWS at v5.2.1
github.com · Source checked 2026-10-12
Original link · full text not reproduced
GitHub: upx/upx release UPX 5.2.1
github.com · Source checked 2026-10-12
Original link · full text not reproduced
GitHub: Vector35/binaryninja-api release stable/6.0.10601
github.com · Source checked 2026-10-12
Original link · full text not reproduced
Google: Overview of Play Integrity API
developer.android.com · Source checked 2026-10-12
Original link · full text not reproduced
Guardsquare: Compiler vs wrapper
www.guardsquare.com · Source checked 2026-10-12
Original link · full text not reproduced
LIEF documentation: Changelog
lief.re · Source checked 2026-10-12
Original link · full text not reproduced
LLVM Discourse: LLVM 23.1.2 Released!
discourse.llvm.org · Source checked 2026-10-12
Original link · full text not reproduced
LLVM: LLVM 23.1.0 Release Notes
releases.llvm.org · Source checked 2026-10-12
Original link · full text not reproduced
Microsoft: SignTool
learn.microsoft.com · Source checked 2026-10-12
Original link · full text not reproduced
Node.js: Wednesday, July 29, 2026 Security Releases
nodejs.org · Source checked 2026-10-12
Original link · full text not reproduced
npm Docs: npm Dual-Use Content Policy
docs.npmjs.com · Source checked 2026-10-12
Original link · full text not reproduced
O-MVLL official repository
github.com · Source checked 2026-10-12
Original link · full text not reproduced
Obfuscator-LLVM official wiki
github.com · Source checked 2026-10-12
Original link · full text not reproduced
OWASP MASVS-RESILIENCE
mas.owasp.org · Source checked 2026-10-12
Original link · full text not reproduced
OWASP Threat Modeling
community.owasp.org · Source checked 2026-10-12
Original link · full text not reproduced
The Go Programming Language: Go 1.27 Release Notes
go.dev · Source checked 2026-10-12
Original link · full text not reproduced
The Go Programming Language: Release History
go.dev · Source checked 2026-10-12
Original link · full text not reproduced
The Kotlin Blog: Kotlin 2.4.20 Released
blog.jetbrains.com · Source checked 2026-10-12