Some grill pans spend their days at the back of a cabinet, too heavy to bother with and too uneven to trust. Then there are the ones that earn a place on the stove every single time. The Compact Modular Grill Plate belongs to the second category. Built with a three-layer steel construction that spreads heat evenly across its entire surface, it closes the gap between a proper kitchen sear and a campfire meal, without making you choose between the two.

What makes it worth owning is the adaptability. Handles swap out depending on the situation. The plate runs on campfires, gas burners, and induction stoves without modification. When cooking is done, the whole setup packs flat, small enough to fit in a bag without reorganizing everything around it. That level of flexibility does not happen by accident. It is the result of a design that actually solves the problem rather than merely describing it.

Click Here to Buy Now: $100.00

Even Heat, Everywhere

The three-layer steel plate is where the performance begins. Single-layer pans burn where the flame sits and fade everywhere else, which is how a good cut of meat ends up patchy and dry in the wrong places. The layered construction here distributes heat uniformly from the edge to the center, keeping the temperature consistent across the entire cooking surface. The result is a better sear, better moisture retention, and food that actually tastes the way it should. Compatible with campfires, gas burners, and induction stoves, it performs just as well in a small apartment kitchen as it does over an open fire on uneven ground.

Modular, Compact, Actually Practical

Most portable cookware treats portability as a footnote. The Compact Modular Grill Plate starts there. The handle system swaps out depending on the setting, so the plate adjusts to whatever the cook needs rather than the other way around. Remove the handles for cleaning, and pack everything flat for travel. There is a specific kind of satisfaction in gear designed to disappear when you are done with it, and this plate earns that cleanly. It comes in a Basic set and a Special set for those who want more to work with from the start.

What We Like

• Three-layer heat distribution: a properly engineered cooking surface that keeps temperature uniform for consistent sears and better moisture retention from edge to center
• Multiple heat source compatibility: campfire, gas, and induction in one plate with no adapters and no compromise between settings
• Swappable handle design: takes seconds to change and genuinely adapts the plate to whatever situation the cook is working in
• Compact pack-down: flat storage with handles removed; the kind of practical detail that determines whether gear actually makes the trip

What We Dislike

• No surface treatment specified: the product does not clarify whether the cooking surface has a non-stick finish, which matters for cooking delicate proteins and for cleanup expectations
• Limited set configuration: Basic and Special cover the range well, but there is no option to add a single accessory without committing to a full set upgrade

The Cookware That Goes Where You Go

The Compact Modular Grill Plate was built for cooking that happens outside the ideal. An unpredictable campfire. A countertop induction burner in a small space. A situation where the cookware needs to adapt before you do. It handles all three without changing what it is, which is a rarer quality in portable cookware than it should be.

If what you are currently cooking with makes the meal harder than it needs to be, this is the straightforward fix. Pick up the Basic or Special set and take the guesswork out of the next meal.

The post This Compact Grill Plate Cooks a Perfect Steak Over Any Heat Source & Packs Flat When You’re Done first appeared on Yanko Design.

Summer 2026 is a different kind of season for EDC. The carry conversation has matured past keychain gimmicks and bulk-heavy multitools into something sharper; gear that’s actually thought through, built from aerospace-grade materials, and designed with the same care as the objects that live on your desk. These five pieces represent the best of where that shift has landed: practical without being boring, minimal without being precious.

Whether you’re navigating festival crowds, weekend camping trips, or the daily urban grind, the right loadout isn’t about carrying more — it’s about carrying smarter. Each of the picks below earned its spot not through spec sheets alone, but through intentional design choices that make the experience of using them genuinely different. These are the five pieces worth making room for this summer.

1. Cubik Knife

Gravity-powered deployment sounds more cinematic than practical — until you hold the Cubik. Designed by IF and machined from aerospace-grade titanium, this pocket knife opens with a button-flick and the natural pull of gravity: no springs, no mechanisms to fail, no audible snap. At 2.6 inches long, 0.98 inches wide, and just 0.2 inches thick, it slips into a pocket and disappears. The Cubik looks more like a designer flash drive than a knife, which is exactly the point — and what makes it so easy to live with every single day.

The blade runs a standard trapezoid utility format — the same geometry used to slice linoleum, roofing materials, acrylic, and thin sheet metals. When one edge dulls, flip it; when both are spent, swap it. That interchangeable format turns a consumable item into something genuinely sustainable over time. A deep-carry titanium clip keeps it flush to the pocket edge, and a tungsten carbide glass-breaker on the rear makes it a legitimate lifesaver when it counts. At $59 with five replacement blades included, it’s one of the most sensibly priced titanium tools in the category.

What we like

• Gravity-flick deployment is spring-free, meaning zero moving parts to fail over time
• Swappable trapezoid blades make the Cubik cost-effective and sustainable for long-term carry

What we dislike

• The utility blade format won’t appeal to collectors who prefer a dedicated knife steel
• Gravity deployment requires a deliberate wrist flick that takes a brief learning curve

2. 8-in-1 EDC Scissors

Most EDC scissors ask you to accept a compromise — either you get a folding design that sacrifices cutting power, or you get a rigid tool that’s too bulky to pocket. The 8-in-1 EDC Scissors from Eiger Design, available through the Yanko Design Shop, sidesteps both problems. Made in Japan and compact enough to sit in a palm at just 13 centimeters (5.1 inches) closed, it packs scissors, a knife, a lid opener, a can opener, a cap opener, a bottle opener, a shell splitter, and a degasser into a single carry-ready object.

The scissors themselves are the real story — full-strength blades that don’t rely on a collapsible pivot to achieve their compact profile, which means they cut with conviction through materials that foldable scissors would snag or mangle. The remaining seven functions are genuine, not ornamental. For summer specifically — camping weekends, beach cookouts, farmers market errands, festival packing — this is the kind of tool that earns its weight early and keeps earning it. At $53 through the YD Shop, it’s the most versatile item on this list per dollar spent.

Click Here to Buy Now: $59.00

What we like

• Eight independent tools in a 5.1-inch, palm-sized package that’s genuinely comfortable to carry daily
• Made-in-Japan manufacturing brings real precision to both the scissors and every secondary tool

What we dislike

• The scissors-first form factor means the secondary tools can feel secondary in actual day-to-day use
• Not the right call if you’re shopping for a dedicated cutting tool rather than a multitool

3. NoxTi

NoxTi is the kind of object that makes you reassess what belongs on your keychain. Designed by Xedge and built from Grade 5 titanium, it measures just 45mm and weighs 10.7 grams. The core of the piece is a tritium vial — a sealed, self-luminous insert that glows continuously for 25 years without batteries, charging, or any external power source. Quartz glass protects the vial from impact, and the titanium housing supports interchangeable vial options alongside a glass-breaker tip at the rear, making it far more than a novelty.

In practical terms, NoxTi solves a problem most EDC setups don’t realize they have: passive orientation in the dark. When your keychain is at the bottom of a bag, buried in a jacket pocket, or left on a nightstand, the glow orients you without reaching for your phone. That always-on, zero-input utility is a design philosophy most gear claims but rarely delivers.

What we like

• Tritium vial delivers 25 years of passive, battery-free illumination with no maintenance required
• Grade 5 titanium housing and quartz vial protection make it exceptionally durable for keychain life

What we dislike

• At 45mm, it’s compact but will add noticeable length to an already-loaded keychain setup
• Tritium vials are radioactive (safely contained, but a consideration for buyers who prefer chemical-free carry)

4. HYZER

Exceed Designs doesn’t do anything conventionally, and the HYZER is the clearest proof of that. At its core, it’s a hatchet — but calling it that undersells the engineering. The handle is fully skeletonized and CNC-machined from a solid block of 6AL-4V Grade 5 titanium, available in two lengths: a full-size 9.75 inches or a compact 8.15 inches. The head runs on an infinitely modular nested system that lets you swap cutting formats without replacing the handle — a level of adaptability that no conventional hatchet even attempts.

For summer carry — backcountry hiking, basecamp setups, or serious van-life configurations — the HYZER changes the math on what a hatchet needs to be. The D2 steel axe head delivers serious chopping performance, while the titanium handle keeps the tool lighter than any steel-handled competitor in its class. The stonewashed finish gives it a visual identity that’s unmistakably premium without being precious about it.

What we like

• The modular nested head system allows the HYZER to adapt to different cutting and splitting configurations
• Full skeletonized Grade 5 titanium achieves meaningful weight savings without compromising structural integrity

What we dislike

• The premium titanium and D2 material combination places this at a significantly higher price point than most seasonal carries
• Two-handed hatchet operation demands dedicated pack space that the other four items on this list don’t require

5. BlackoutBeam Tactical Flashlight

A 2,300-lumen output in a tactical flashlight isn’t rare in 2026 — but a 2,300-lumen flashlight that looks like it belongs at a design exhibition rather than a military surplus store is still genuinely hard to find. The BlackoutBeam, available through the Yanko Design Shop at $90, pairs that blinding output with an industrial aesthetic that wears well whether it’s clipped to a backpack or sitting on a shelf. The 300-meter throw distance cuts through darkness with clinical precision, and the IP68 waterproof rating ensures it performs regardless of what summer throws at it.

Five operational modes — including strobe and pinpoint — give the BlackoutBeam tactical flexibility that goes well beyond on-off cycling. The 0.2-second instant-on response is the detail that separates tools built for designers from tools built for actual use: in a power outage, a trail emergency, or any situation where you need light immediately, that activation speed matters in a way that a spec sheet can’t fully communicate. With longer days turning into late evenings outdoors and camping season running hot, the case for a serious flashlight in your summer kit has never been more straightforward.

Click Here to Buy Now: $89.00

What we like

• 2,300-lumen output with a 300-meter throw distance puts it firmly in professional-grade territory
• A 0.2-second instant-on response time makes it genuinely dependable when the situation demands it

What we dislike

• The tactical aesthetic reads as aggressive for carry setups that lean toward minimalist or everyday styling

The Best Loadout Is the One You Actually Think About

What these five pieces share isn’t material or price point…it’s intention. Every one of them was designed by someone who cared enough to solve the actual problem rather than approximate a solution. That’s the standard worth holding EDC to in 2026, and it’s becoming a higher bar to clear as the category matures and the market fills with near-misses. The best loadout is never the one with the most gear. It’s the one with the right gear.

Summer tends to be the season when carry gets edited down; lighter layers mean fewer pockets, and heat means less patience for bulk. These five designs all pass that test. They’re compact enough to disappear when you want them to and capable enough to matter when you don’t. Whether you pick up one or all five, the upgrade from whatever you’re carrying now is real.

The post Forget Your Old Loadout — 5 EDC Essentials Built for Summer 2026 first appeared on Yanko Design.

More than 30 WordPress plugins were shut down after a supply-chain backdoor compromised thousands of sites through the Essential Plugin portfolio.

The post Malicious WordPress Plugins with Backdoors Compromise Thousands of Websites appeared first on TechRepublic.

What if the door you walk through every day was grown from fungi? Danish mycelium company Rebound and architecture studio Det Levende Hus have partnered to create what they claim is the world’s first mass-produced interior door with a core cultivated from fungal mycelium. Currently in the prototype phase, the door is part of a broader collection of bio-based interior and sliding doors designed for modern living spaces, and it may quietly redefine what architectural materials can be.

The concept is straightforward but radical. Rebound cultivates the fast-growing root structure of fungi inside a mould, producing a rigid, lightweight panel with natural sound-absorbing qualities. That mycelium core is then enclosed within a timber frame built from reclaimed and surplus wood, including offcuts sourced from Danish flooring manufacturer Dinesen, meaning the door carries minimal material waste from start to finish.

Designer: Rebound & Det Levende Hus

Rebound co-founder Jon Strunge sees this as a direct challenge to the construction industry’s dependence on slow-growing hardwoods. “We wanted to demonstrate how regenerative, high-performance mycelium-based materials open opportunities for new, innovative, and scalable building components,” he said. The growing process takes roughly two weeks and is designed to scale industrially, making these doors a production-ready proposition rather than a one-off experiment.

What makes the design particularly noteworthy is its adaptability. Colour and surface texture can be altered during the growing process itself, removing the need for post-production finishing. The current prototype presents a smooth, silky surface, but the material can shift in tone and can also be finished with a layer of clay for a warmer, earthier aesthetic.

Structural performance was equally prioritised. A bio-based layer incorporated during the growing process stiffens the door and improves fire resistance, a bio-welding method that adds reinforcement without glue or additional manufacturing stages. The door was also designed to comply with current building standards for private homes, particularly around fire and moisture resistance, making it a credible candidate for real construction.

The first real-world application will be at Kaerhytten, a low-impact housing project in Ramloese, Denmark, designed by architect Jens Martin Suzuki-Højrup, scheduled for completion in 2026. The prototype also features a door handle by architect Bjarne Hammer for Danish brand Randi, the Moom handle cast from recycled seashells, adding a tactile detail that mirrors the door’s material ethos. Looking ahead, Rebound and Det Levende Hus are expanding into mycelium-based acoustic wall panels and ceilings. As Suzuki-Højrup put it, “It’s about how natural materials can transform our experience of space, visually, acoustically, even emotionally.”

The post Meet the World’s First Door Grown From Fungi, Not Cut From Wood first appeared on Yanko Design.

The line between work and home has blurred into an architectural dialogue. Today’s hybrid living isn’t about working from the kitchen counter but about rethinking how domestic spaces support productivity and calm. Designers now aim to create environments that balance efficiency with ease, where furniture performs multiple roles without sacrificing elegance or comfort.

For high-net-worth homeowners, this shift is about investing in experiences that enhance their lifestyle and property value. Portable chairs and adaptive workstations have evolved into design essentials, dynamic and ergonomic, fluid enough to move with the rhythms of daily life, redefining how we live and work within our spaces.

1. Ergonomic Intelligence and Wellness Value

The strength of any portable workspace lies in its ergonomic foundation. Temporary, low-quality setups often lead to long-term strain and reduced focus. True wellness ROI comes from minimizing physical fatigue through design that supports the body’s rhythm, integrating temperature-responsive materials, balanced support, and kinetic flexibility rather than relying on surface aesthetics alone.

When selecting furniture, prioritize chairs with dynamic lumbar support and workstations with seamless height adjustment. The ideal setup becomes a biophilic cocoon, comforting, adaptive, and attuned to your natural movement, ensuring that even during long digital sessions, productivity and physical harmony remain perfectly aligned.

The Sayl concept chair by Charley reflects the changing ways we live, work, and play. As homes have evolved into hybrid offices, gyms, social spaces, and relaxation zones, our furniture needs have changed too. Charley even considers the hours we spend gaming or binge-watching, recognizing that chairs today must support multiple activities while remaining comfortable and functional. Designed by Herman Miller, the Sayl chair combines high-end design with practical usability, allowing users to maximize their space without sacrificing luxury or ergonomics.

The chair’s muted grey tones ensure it blends effortlessly into any interior, while bright orange accents draw attention to pivotal touchpoints, making it intuitive to use. A foot pedal mechanism allows the chair to collapse easily, providing a convenient, space-saving solution for modern homes. In the post-pandemic era, furniture design has shifted towards modular, flexible, multifunctional, and compact solutions. The Sayl chair embodies all these qualities, offering a versatile, stylish, and practical seating option for today’s hybrid lifestyle.

2. Aesthetic Integrity and Material Authenticity

Every portable unit should carry a strong aesthetic value that complements its architectural surroundings. Materials must feel genuine and timeless, like solid wood, brushed metal, and high-performance textiles that reveal craftsmanship rather than conceal it. This honesty of composition creates visual depth and emotional connection, reinforcing the idea that beauty lies in authenticity, not imitation.

The design should remain sculptural yet understated, integrating seamlessly into curated interiors. Its finish must align with the home’s palette, allowing it to coexist gracefully within the space. When not in use, it should rest as a quiet architectural accent rather than a workplace intrusion.

Working from home has spared many from long commutes and office distractions, yet it has also made work feel more solitary. Sitting by the same wall each day, even in a well-designed home office, can feel disconnected from the world beyond virtual meetings. While folding furniture remains popular for its space-saving benefits, stackable, all-weather alternatives are emerging as a smarter choice. Industrial designer Gökçe Nafak introduces the uuma, a portable table-and-chair combo designed as a single stackable unit that transitions effortlessly between indoor and outdoor settings.

Perfect for those who enjoy working in the garden, on the balcony, or in flexible spaces, the uuma blends convenience with creativity. Made from fibreglass, it is lightweight, durable, and sustainable. Its modular design features a height-adjustable metal frame and detachable parts that assemble easily. The chair transforms into a table within moments, offering comfort, portability, and style in three vibrant, modern colors.

3. Spatial Flow and Footprint Efficiency

The effectiveness of any modern workstation depends on how well it manages spatial flow. In compact urban homes, every inch counts, making footprint reduction a key design priority. A thoughtfully designed system should retract or fold away seamlessly, minimizing its physical presence while supporting the need for adaptable, multi-functional living spaces that evolve throughout the day.

Mobility and refinement define its usability. Tables and desks should transition effortlessly from work to leisure, enabling a quick shift from boardroom mode to family dining. Silent, non-marking wheels and intuitive movement reflect superior engineering and respect for interior balance.

In a shared workspace like WeWork, or a peaceful spot under a tree, flexibility defines modern work culture. Industrial designer Matan Rechter responded to this shift with Shelly, a personal outdoor workspace that combines privacy, shade, and portability for those who prefer working outside. Inspired by the remote work movement, Shelly was designed to bring focus and comfort to outdoor environments like public parks.

Its name comes from its shell-like canopy that folds in and out with ease. Built from lightweight aluminium profiles and durable Cordura fabric, Shelly shields users and electronics from harsh UV rays. The canopy’s retractable design, reminiscent of an armadillo’s shell, provides instant shade and convenience. Compact and portable, Shelly transforms outdoor work into a comfortable, productive, and stylish experience anywhere, anytime.

4. Technological Integration and Power Autonomy

A modern hybrid workstation should function as a self-sufficient ecosystem, anticipating digital needs without visual clutter. True design intelligence lies in seamless connectivity, like built-in charging, concealed wiring, and intuitive access that keeps the workspace both elegant and efficient. Power autonomy ensures independence from fixed outlets, supporting the growing demand for mobility and flexibility in home environments.

Features such as integrated induction charging pads, hidden cable channels, and optional battery packs transform furniture into an adaptive tool. These enhancements merge aesthetics with performance, allowing users to remain connected, productive, and untethered within any architectural setting.

Another standout example is Worknic, a portable desk developed through the Samsung Design Membership program, sponsored by Samsung Electronics. Designed for flexibility, Worknic allows users to set up a functional workspace anywhere, whether in a home, park, or even on the beach, giving them the freedom to change their environment whenever needed.

The desk is built on wheels, making it easy to move and position in the ideal spot. Once in place, it unfolds to reveal a worktable, stands, and a built-in power source, while a pull-out stool completes the setup. Although details about battery life, weight, and additional features are limited, the concept prioritizes mobility, convenience, and adaptability. Worknic offers a creative solution for those who want a portable, fully equipped office that keeps productivity and inspiration in balance.

5. Design Resilience and Longevity Investment

For discerning homeowners, longevity defines true value. A well-crafted workstation should possess design resilience, built to endure daily use while retaining its original elegance and performance. This durability ensures a higher return on investment, setting it apart from fast furniture options that quickly lose both form and function.

Choosing established design houses and proven construction techniques guarantees structural integrity and timeless appeal. A five-to-ten-year warranty offers assurance that the piece is not just a purchase but a long-term architectural companion, blending endurance with refined craftsmanship for years of dependable, sophisticated use.

For those constantly on the move, finding a comfortable place to rest or work can be challenging. Cities often lack public resting areas beyond cafés and restaurants, making it tempting to carry a portable chair, though the idea quickly loses appeal due to its bulk and inconvenience. Recognising this need, designer Tejash Raj created the OmniSeat, a compact and ergonomic seating concept designed for people who stay productive while travelling, commuting, or working outdoors.

The OmniSeat features a lightweight frame, built-in storage, and device holders, all folding neatly into a slim form that fits in a backpack or attaches to a bike rack. A detachable tray accommodates laptops or tablets, with cable clips to keep cords tidy. Combining portability, comfort, and function, the OmniSeat offers a glimpse into the future of mobile workspaces.

The high-design portable workstation redefines the boundaries of work and home, merging productivity with tranquillity. It transforms interiors into fluid, balanced spaces where focus meets ease. Its true value lies in the freedom to work anywhere, capturing sunlight, inspiration, and connection without sacrificing comfort or creativity.

The post 5 Portable Work Setups That Work Outdoors, in Parks And Even Beaches first appeared on Yanko Design.

Track Trailer, the name behind the famous Tvan off-road camper trailers, needs little introduction. It has been powering the overlanding experience in Australia and worldwide for a good part of four decades now. Over the years, we have seen some interesting variants of the Tvan, which has now reached the MK6. The sixth iteration in the successful portfolio, Tvan MK6 Model, retains the same aluminum body, which runs in the bloodline, but is more spacious and even more comfortable.

As the appearance suggests, the new Tvan MK6 is available in four variants and is almost identical to its predecessors. What changes are the interior space and the headroom, which make the MK6 a different entrant in the same effective branding of the world’s toughest off-roading trailer.

Designer: Track Trailer

Track Trailer first tried reworking the interior space with the MK5 model. It was done staying within the confines of the Tvan styling: no pop-up roof attachment, but a slight raise in roof height. With the MK6, the company has also stayed true to its design ideology. It has only increased headroom, stretched the neck forward, and pushed the sides of the trailer outward to increase the interior space by up to 20%.

The expansion to the trailer permits more natural light inside the cabin, which is constructed using an aluminum sandwich-panel construction. Moreover, the MK6 features a durable chassis based on an advanced suspension system that enables it to roll comfortably on rugged terrains and off-road destinations. With its ruggedness assured, the camping trailer is ideal for all types of adventures, which is facilitated by its quick setup and clever storage designed throughout its exterior and also on the inside.

MK6 measures 16-foot-long and 6.3 feet wide, the trailer has an interesting storage cabinet in the extended nose up front, comprising a pantry and up to 95 liters fridge/freezer. Slightly further back is the slide-out kitchen with a three-burner gas stove, a full-size sink connected to a 108L fresh water tank, and a storage drawer topped with a prep area.

The most interesting part of the MK6 camping trailer is the rear hatch design. It features Track Trailer’s patented Skyward Lift Up Deck, which combines the hatch and the hard-floor deck. The electric lock system allows the two to lift up in unison for quick and direct access into the living space of the trailer. Just when you need it, a tent can be attached to the trailer to increase the living quarters.

Inside is a double bed surrounded by large windows and overhead and sidewall storage. LED lighting and dual roof hatches complete the design. Since the MK6 is available in four variants, each is designed differently for off-the-grid living. The entry-level Inspire features a 125Ah lithium battery that draws energy from a 200W rooftop solar panel, while a 350W inverter takes care of the power backup. Firetail accommodates a pair of 125Ah batteries, a 2000W inverter, and some premium features in the kitchen.

Tvan MK6 Murranji adds a 200W solar panel to the Firetail setup, but leaves out the inverter. The top-of-the-line, Lightning, on the other hand, comes with a 500Ah battery. It features a 2,000W inverter and a 360W solar panel to complete its all-electric setup. Each of these models can have further upgrades with add-ons like awnings and more. MK6 starts at AU$69,900 (approximately $50,000) with the mentioned amenities.

The post Track Trailer reinvents Tvan, one of the toughest off-roading trailers with roomier MK6 model first appeared on Yanko Design.

TwoFace est un outil développé par Synacktiv qui permet de créer des binaires Linux ayant 2 comportements bien distincts. Un comportement parfaitement inoffensif qui s’active dans 99% des cas et un comportement malveillant qui ne se déclenche que sur une machine ciblée spécifiquement pour l’occasion.

Comme ça, votre sandbox verra toujours la version “propre” parce qu’elle n’aura pas le bon UUID de partition.

D’après la doc de Synacktiv, voici comment ça fonctionne : Vous avez deux binaires en fait… Y’en a un qui est inoffensif et un autre malveillant. TwoFace les fusionne alors en un seul exécutable. Ainsi, au moment du build, le binaire malveillant est chiffré avec une clé dérivée depuis l’UUID des partitions disque de la machine cible. Cet UUID est unique, difficile à deviner, et stable dans le temps ce qui est parfait pour identifier une machine spécifique.

Ensuite au lancement, quand le binaire s’exécute, il extrait l’UUID du disque de la machine. Pour ce faire, il utilise HKDF (Hash-based Key Derivation Function) pour générer une clé de déchiffrement depuis cet UUID et tente de déchiffrer le binaire malveillant caché. Si le déchiffrement réussit (parce que l’UUID match), il exécute le binaire malveillant. Par contre, si ça échoue (parce que l’UUID ne correspond pas), il exécute le binaire inoffensif.

Le projet est écrit en Rust et c’est open source ! Et c’est une belle démo (PoC) d’un problème que tous ceux qui font de l’analyse de binaires ont. En effet, d’ordinaire, pour révéler le vrai comportement d’un malware on l’exécute dans une sandbox et on peut ainsi observer en toute sécurité ce qu’il fait, les fichiers qu’il crées, les connexions réseau qu’il établit etc…

Mais avec TwoFace ça casse cette façon de faire. Et c’est pareil pour les antivirus qui verront toujours la version inoffensive tant que l’UUID ne correspond pas.

Techniquement, TwoFace utilise memfd_create() pour exécuter le binaire déchiffré en mémoire, sans toucher au disque, ce qui veut dire zéro trace sur le système de fichiers. Le binaire malveillant apparaît directement en RAM, s’exécute, puis disparaît. Et si vous utilisez io_uring pour l’écriture mémoire, il n’y a même pas de trace syscall visible via strace.

Et ça, c’est la version basique car le document de Synacktiv mentionne également d’autres techniques avancées possibles comme du déchiffrement dynamique page par page du binaire ELF, des mécanismes anti-debugging, des chained loaders multi-niveaux…etc…

Le parallèle avec la backdoor XZ Utils backdoor est très instructif car celle-ci a failli compromettre des millions de serveurs Linux parce qu’un seul mainteneur a poussé du code malveillant dans une lib compressée. Elle a alors été découverte parce qu’un dev a remarqué un ralentissement SSH bizarre et a creusé… Et TwoFace montre qu’on peut faire encore pire sans toucher à la supply chain.

Pas besoin de corrompre un mainteneur de projet, de pousser un commit suspect chez Github. Là suffit d’écrire du code parfaitement propre, de le compilez avec TwoFace pour une machine spécifique, et de le déployez. Le code source sera alors auditable ainsi que le binaire mais l’audit ne révèlera rien parce qu’il se fera dans un environnement qui n’aura pas le bon UUID.

Après, techniquement, une défense existe. Vous pouvez par exemple détecter les appels à memfd_create(), monitorer les exécutions en mémoire, tracer les déchiffrements crypto à la volée…etc., mais ça demande du monitoring profond, avec un coût performance non-négligeable. Et ça suppose aussi que vous savez ce que vous cherchez…

Bref, si ça vous intéresse, c’est dispo sur GitHub !

Si vous faites partie des 97% de dev à grosses lunettes qui utilisent des assistants IA comme GitHub Copilot, Windsurf ou Cursor, ce que vous allez lire va probablement flinguer votre journée…

Et oui parce que si vous pensiez que votre assistant IA préféré était votre meilleur atout pour coder, sachez que des chercheurs en sécurité viennent de découvrir qu’en réalité, tous ces outils pourraient se comporter en cheval de Troie placé directement dans votre IDE. Et le plus flippant c’est que vous ne verriez absolument rien venir, même en scrutant le code ligne par ligne.