This update significantly improves objective-C instrumentation, adds new detection for insecure data storage and Regex DoS, and ships multiple bug fixes.

📦 Detection & Knowledge Base

• Improve dynamic instrumentation for objective-C and persist collected stack traces in the Analysis Dynamic section.
• Added detection capabilities to identify insecure data storage practices in iOS applications. This includes identifying the use of potentially vulnerable storage mechanisms such as UserDefaults and UIPasteboard.
• Added detection for Regular Expression Denial of Service (ReDoS) vulnerabilities. This new feature identifies sinks that use user input to create regular expressions, which can lead to potential ReDoS attacks.
• Refined all KB recommendations to be actionable, so now we have a step-by-step process to solve vulnerabilities.

  

Frontend Enhancement

• Added table of contents to Blogs:

  

• Added highlighting to the Tips section:

  

• Added a button to download all PCAP files at once as a ZIP archive:

  

• Show graph edge & node labels in a card:

  

🐞 Bug Fixes

• Fixed the generation of rules for iOS to take init function into consideration.