We’re excited to announce the launch of malops.io , a platform built by analysts, for analysts and it’s completely free. You can join and enjoin with our frist challenge about RokRat Loader.

Don’t miss Cindy Xiao’s talk on Reconstructing Rust Types from RE//verse 2025 if you’re dealing with Rust in your day to day. It’s one worth adding to your watchlist: youtu.be/SGLX7g2a-gw?fe…

The 12th Annual Flare-On Challenge kicks off Sept 26 at 8PM EST! Reverse engineering pros, from Windows to Web3 (with a YARA twist), it's your time to shine. 🏆 Get ready → bit.ly/4ofb5g8 #FlareOn12

I have released the first half of "Binary Exploitation 101", a beginner-friendly guide to binary exploitation. You can learn from classic buffer overflow to ret2dlresolve through CTF-like challenges. I am working on the second half now. Stay tuned🔥 r1ru.github.io/categories/bin…

A reoccurring question I keep seeing in my DMs (also during this #flareon12) is "hey I tried [insert LLM model] but it didn't work. Now what?". It's unsettling to me. If (security) people can't think or do research themselves anymore, I think we're gonna have a problem.

I've definitely gotten a lot more bald after challenge 9. This year's challenges felt a lot more like competitive programming. #flareon12

40% off all individual courses on Trainsec! Limited time early Black Friday! trainsec.net/cybersecurity-…

Christmas came early this year? Thanks Mandiant (part of Google Cloud)! #flareon12 (Was trying to post last night, but Cloudflare...)

another day, another post about fake BTS. so here is about how fake Base Transceiver Stations (BTS) operate:

where's the credit to the original author? not cool posting other people's content & removing the author's name that he puts right at the front, that's disgusting. You should be ashamed of yourself. linkedin.com/posts/izzmier_…

I'm not really a cat (nor photography) person. But this one came up to me and I couldn't help but stop and take some pics for those who can appreciate it 😀

my dad was one of the malaysians who got scammed back around 2018. until today, he’s STILL fighting this case in court. it destroyed a lot of families here, especially when BTC was still new and people didn’t fully understand the risks.

There’s a spike in WhatsApp account takeover attempts happening in Malaysia lately. Please be extra careful. keep your WhatsApp secure: • Enable Two-Step Verification : Settings → Account → Two-step verification → Enable. Use a strong 6-digit PIN.

i built an entire x86 CPU emulator in CSS (no javascript) you can write programs in C, compile them to x86 machine code with GCC, and run them inside CSS

x.com/i/article/2027…

I have kids. I work in AI every day. And honestly? I have no idea what their careers will look like in 15 years. But I know what will carry them through. First, and this might sound unromantic: make money and save it for them. We can debate educational philosophy all day, but

The FLARE team now freely distributes its quality reverse engineering and malware analysis educational content at github.com/mandiant/flare…. Launched with: - Malware Analysis Crash Course - Go Reversing Reference - Intro to TTD

Catalog of Windows APIs abused by malware github.com/danafaye/Windo…

Finally! Meeting the legend Earl Marcus after 25++ years. Pic taken with his phone. More legendary meetups to come!

When practicing on a VM crackme recently, I created a devirtualizer which lifts the virtual machine to LLVM to defeat the protection. LLVM-based devirtualisation is a lot of fun and I wrote down my experience and lessons learned on my blog: eversinc33.com/2026/05/07/llv…