NEW: Apple launched a new security feature specifically to fight against spyware and zero-day exploit makers. We spoke to a researcher who sells zero-days to the U.S. government, who thinks this will make their life much harder and raise the cost of developing and selling hacking tolls for iPhones.

JOB ALERT: We are recruiting for the newly created role of Information Security Program Manager. Apply by Sept 30. citizenlab.ca/2025/09/job-...

Want to learn reverse engineering? There'll be a free, women*-only BlackHoodie workshop from October 6th to 9th in Paris! Topics: • Linux memory forensics 🕵️‍♀️ (by Sonia) • Web app and mobile app pentesting 🕸️📱 (by Paula) • iOS reversing 🍎 (by me)

WOOT 2025 schedule, all papers are now online open access: usenix.org/conference/w... Talks are recorded, and should be online in a few weeks.

Been working on some interesting mobile security research lately? 📱🔬 Submit it to Black Hat Europe, the CFP deadline is August 11. Speaker honorarium + travel to London 🎡💂🏼‍♀️🏙️ are covered!

My first day with a fancy new title 👩‍🏫🎉

Discounted early bird registration for WOOT '25 is still open until Monday - www.usenix.org/conference/w... - join us in Seattle on Aug 11/12 (right before USENIX Security) for talks and discussions on great cutting-edge offensive security research. Full program at www.usenix.org/conference/w...

Easy, beginner-friendly class teaching how to use Binary Ninja's debugger. Had the pleasure of beta testing it :)

Has anyone noticed/looked at the SPTM/TXM headers in the tahoe KDK?

The Apple Watch has a closed down ecosystem, only compatible with the iPhone. Nils reverse engineered its interfaces to open it up for Android! ✨ WatchWitch ✨ allows using your Apple Watch ⌚ on Android devices, interpreting your health data, answering messages on the Watch & more. (1/2)

Announcing RE//verse 2026! Website is updated with info for sponsors, trainers, speakers, and more importantly, attendees! Are you ready for another year of high quality reverse engineering talks and networking? Join us the first week of March, 2026! re-verse.io

We've released CellGuard 1.6.0, our iOS app, to make use of the iPhone's internal baseband communication. The update enhances support for dual SIM, adds new #C1 packet types, automatic navigation to sysdiagnoses, and more: cellguard.seemoo.de/docs/changel...

Liquid glass :|

Going to the USENIX Security Symposium? Don't forget to also register for WOOT, the papers we selected are amazing 🤩

🔔 It is time to buy your HEXACON ticket! 💸 Discounted tickets are available (while supplies last) for students and professionals who do not receive support from their company. This approach is based on trust, but we may ask for proof. www.hexacon.fr/register/

CoreAudio CVE with some nice patch reverse engineering here: blog.noahhw.dev/posts/cve-20...

how to read a C++ codebase: 1. compile it with DWARF debug info enabled 2. open it in Ghidra 3. look at the C decompilation

Haven't seen this on Bluesky yet: S&P 2027 will take place in Montreal, Canada!

BlackHoodie will be back at @reconmtl.bsky.social this year ☺️ It'll be two days of Breaking Down Binaries: Introduction to Reverse Engineering & Malware Analysis by @bitmaize.bsky.social and Souweera de Souza, registration is now open blackhoodie.re/recon/

Der Entropia lädt euch herzlich zur 23. Gulaschprogrammiernacht #GPN23 mit dem Motto „Hidden Patterns“ ein! Diesmal mit Gulasch-Genusspaket. Die Anmeldung wird am Sonntag, 27. April, um 20 Uhr geöffnet. events.ccc.de/2025/04/25/g...

You asked, we delivered: Binary Ninja 5.0 brings major iOS reversing upgrades! DYLD Shared Cache is now a first-class feature, with up to 18x faster performance and way smarter analysis across the board. binary.ninja/2025/04/23/5...

"do you think reverse engineering is a game??" me:

I boosted several posts about this already, but since people keep asking if I've seen it.... MITRE has announced that its funding for the Common Vulnerabilities and Exposures (CVE) program and related programs, including the Common Weakness Enumeration […] [Original post on infosec.exchange]

I know the folks at Apple are extremely busy not shipping Apple Intelligence, but while you're doing that could you also maybe let me permanently disable video "Reactions?" The last thing I need when I'm talking with my therapist is a freaking heart emoji popping up out of nowhere.

Messenger so secure it can't decrypt my own messages 🔒

The BlackHoodie training at OffensiveCon has a whole of 2 seats left, and we will have a special give-away with this edition :) blackhoodie.re/Offensivecon...

Remember Aaron's talk on iPhone Mirroring at #38c3? He just published a blog post about his findings in threat modelling and researching the security of this new feature, including more details he's only able to talk about now. aaronschlitt.de/threat-model...

Die Union will das Informationsfreiheitsgesetz abschaffen 😳😳😳 Das ist ein Angriff auf den (investigativen) Journalismus und auch auf die Möglichkeit für alle Bürger*innen, Regierungshandeln zu kontrollieren. Das darf nicht passieren. 1/3

Save the date - @blackhoodie.bsky.social is partnering with @offensivecon.bsky.social this year to bring a BlackHoodie training to Berlin! Students will learn how to place compiler backdoors in innocent code. Mark your calendars for May 15th! Registration opens tomorrow, space is very limited ☺️

The lovely folk of @wearetroopers.bsky.social are hosting @blackhoodie.bsky.social for another two days of training, brought to you by Cora, Anso and @Car0line_Le about malware, OSINT and reverse engineering 😊 Registration is now open blackhoodie.re/Troopers2025/

Reviewer 2 just rejected your latest offensive security paper? Or didn't submit it anywhere yet? There's still more than a day left to (re)submit to USENIX WOOT '25 and get reviews from a community who will appreciate all those clever hacks, weird bugs 👾 and fun exploits! woot25.usenix.hotcrp.com

Espressif’s response: https://www.espressif.com/en/news/response_esp32_bluetooth

Great article about Apple's 🍎 Exclaves & Conclaves that provides a high-level overview and then dives into technical details implemented in XNU 👀 randomaugustine.medium.com/on-apple-exc...

Have some hackademic research you'd love to see published as a paper? Submit it to WOOT 📝 Looking forward to your submissions!

Tarlogic found a "backdoor" im the ESP32 chips: bleepingcomputer.com/news/security/undocumented-commands-found-in-bluetooth-chip-used-by-a-billion-devices 
Broadcom & Cypress chips have the same HCI "backdoor" allowing to write to the Bluetooth chip's RAM. This feature is used for firmware patches.

Three Bulgarians were sentenced for spying for Russia in the UK today. This is one of their chats - using IMSI catchers to spy on Ukrainians in the German military base

🔔NEW: Apple threat notification 🔔 Apple have just sent new notifications to individual's targeted by highly-invasive mobile spyware! Reach out to our team at @Amnesty's Security Lab or trusted experts if you received this critical warning www.amnesty.org/en/latest/ne...

Being an exploit dev in 2025 allows you to write JavaScript professionally without having to use React, Node.js, or any library at all, really—there’s something beautiful about that

Really enjoyed speaking at the inaugural edition of @re-verse.io! You can find Tomasz' and my slides on tricks with SIMs and interposers here: tinyurl.com/reverse25-si...

NEW: Google fixed three zero-day vulnerabilities in Android that were used by authorities to unlock phones with Cellebrite forensic tools. The fixes come after Amnesty alerted Google, following the analysis of a Serbian student protester's phone. techcrunch.com/2025/02/28/r...

I gave a day 1 closing keynote at DistrictCon yesterday. Surprisingly, it was a security talk about memory safety. Slides are here: docs.google.com/presentation...

"Why do we need to provide our fingerprints for entering Disney World?" - "It's not a fingerprint. It's a photo of your finger, converted to a number, which is then linked to your ticket." 🫠

I’ve been using WhatsApp comfortably without giving it access to my contacts for months thanks to this iOS shortcut https://www.icloud.com/shortcuts/31128db4caa6465d99400c48d20bfd09 I click it, choose who I want to interact with and pass that number to WhatsApp. No need to share my address book.

Last chance to book my iOS 📱 reversing training at RE//verse! I've updated various training contents and added new exercises, which will help you understanding even more system internals 🔬

Unrestrict the restricted mode for USB on iPhone. A first analysis @citizenlab.ca #CVE-2025-24200 👉 blog.quarkslab.com/first-analys...

USENIX WOOT '25 submissions are due March 11. One month to go - still plenty of time to write a paper about your latest fun offensive security research! Or if you want more guidance to get a paper into shape, up-and-coming track deadline is March 4. CfP at www.usenix.org/conference/w...

Update your iPhones.. again! iOS 18.3.1 out today with a fix for an ITW USB restricted mode bypass (via Accessibility) support.apple.com/en-us/122174

Crap crap crap. www.washingtonpost.com/technology/2...

Since apparently being a nice person is illegal in the US now, it’s time to pull out my most popular blog post ever. It’s called “survival tips for women in tech”, but I’m told it works for all genders and in countless industries. patricia.no/2018/09/06/s...

Static analysis for iOS apps just got smarter! Florian Magin & Angelo DeLuca reveal a Ghidra plugin leveraging heuristics & approximations to tackle Objective-C & Swift challenges. Don’t miss this dive into iOS research. https://re-verse.sessionize.com/session/784068 #REverse2025 #SRE #Decompilation