💾 IT Security Tools

GitHub: 1.10.8

Couple of trivial bug fixes

Arti 2.5.1 released

Arti is our ongoing project to create a next-generation Tor implementation in Rust. We're happy to announce the latest release, Arti 2.5.1.

GitHub: v2.35.6

What's Changed Fix UI form parsing that created invalid FuzzerJob entries by @dylanjew in #5381 Ensure files are always closed after use by @aakallam…

GitHub: 2.35.6: [Metrics] Add preemption metrics and accumulation logic (#5396)

b/538558303 Note: this PR is chained with #5394 Problem When a preemption occurs, we were only recording the duration of the active fuzzing round as…

GitHub: v0.390.0

What's Changed Add typed requirement source API by @JamieMagee in #15705 Reland "Cargo: handle crates locked at multiple versions" (#15638) by…

GitHub: release: v0.73.0 [main] (#11012)

Co-authored-by: repo-trivy-write-33ed3c[bot]

Special macOS Firewall: Safe Sideloading of the EIFT Extraction Agent

Elcomsoft iOS Forensic Toolkit begins low-level extraction by sideloading the extraction agent, and the agent will not run until the phone has…

Snowflake Volunteer, an Android app to help people bypass censorship

Bypassing censorship comes down to two challenges: disguising internet traffic from censors while making an open network easy to reach.

GitHub: OnionHop 3.7.7

Fixes the Logs page exporting an incomplete log. Fixed Export and Copy could write an incomplete log.

Overview of Content Published in July

Here is an overview of content I published in July: SANS ISC Diary entries: Wireshark 4.6.7 Released zipdump.py: Metadata Encoding

When the iCloud Backup Is the Only Copy Left

An iCloud backup is often the only surviving copy of data no longer on the device.

GitHub: Wazuh v4.14.7

Manager Removed Removed deprecated wazuh-dbd daemon and database_output configuration.

GitHub: coverity-w31-4.14.8

Merge pull request #38059 from wazuh/fix/37526-error-1720-installing-…

GitHub: 6.5.0

GitHub: 3.2.0-20260729

Download the…

Locked In or Locked Out? Unlocking ZIP, RAR, PDF, and Microsoft Office Passwords

There is a whole industry selling software to protect data: full-disk encryption, rights management, key servers, the works.

GitHub: Release v1.172.0

1.172.0 - 2026-07-28 ### Added Added support for the OpenTofu .tofu file extension. Because OpenTofu uses the same HCL grammar as Terraform, .

How to recover deleted data from your iPhone

You accidentally deleted an important file from your iPhone, panicked, and hit the web looking for a way to get it back.

GitHub: v0.389.0

What's Changed Rescue errors in metadata_cascades_for_dep to prevent PR message loss by @yeikel in #14905 Bump sigstore from 4.1.0 to 4.1.

GitHub: v1.8.0-rc1

Bot detection with CrowdSec WAF This release brings a major change to the CrowdSec WAF: a bot detection feature.

Microsoft Office Passwords: What Comes Off in Seconds, What Takes Longer, and Why

Microsoft Office has protected documents with passwords since Word 2.0 in 1991, and for most of that history the protection was weaker than stated.

GitHub: OnionHop 3.7.6

Fixes saved bridges being labelled with the wrong transport in the library. Fixed Saved bridges showed the wrong transport.

6.4.146

python: v1.0.0

1.0.0 (2026-07-24) Stable release. The package surface has been stable for a long time; 1.0.0 makes that explicit.

javascript: v1.0.0

1.0.0 (2026-07-24) Stable release. The package surface has been stable for a long time; 1.0.0 makes that explicit.

v3.96.0

What's Changed [INS-355] Added Hashicorp vault token detector by @MuneebUllahKhan222 in #4819 Tighten JiraToken v1 verification by @shahzadhaider1 in…

Why Digital Forensic Reports Don’t Survive Cross-Examination

A forensic report is not a summary of finished work. It’s a claim that has to survive someone trying to take it apart, and most reports aren’t built…

v2.35.5

What's Changed [NDB PERMISSION_DENIED error] Fix trusty stacktrace on ANDROID_EMULATOR by @IvanBM18 in #5375 Fix engine fuzzers blobstore downloads…

v2.35.4

What's Changed symbolizer: Fix args for the default symbolizer by @g-ortuno in #5379 Full Changelog: v2.35.3...v2.35.4

v2.35.3

What's Changed Gracefully handle invalid ghost fuzzer configurations by @dylanjew in #5380 [Adroid v4 API] Add Android Build API V4 REST client and…

6.4.145

v2.35.2

What's Changed Remove .exe on targets before appending .runtime_deps by @notvictorl in #5372 symbolizer: Temporarily increase llvm-symbolizer cache…

The RAR Mystery: Breaking RAR4 and RAR5 Encryption

RAR encryption has an unusual reputation: in more than twenty years there has been no practical attack against the cipher, no implementation flaw…

New Alpha Release: Tor Browser 16.0a9

Tor Browser 16.0a9 is now available from the Tor Browser download page and also from our distribution directory.

New Release: Tails 7.10

New features New shutdown procedure Tails now uses the standard shutdown procedure from GNOME.

Tails 7.10

New features New shutdown procedure Tails now uses the standard shutdown procedure from GNOME.