Industry 4.0 / IIoT​

Challenges

Industry 4.0, with IIoT, 3D printing, robotics and CPS, is transforming manufacturing technologies through increased automation and connectivity. Open systems pose new risks, requiring integrated cybersecurity from the outset to prevent potential threats.

Our solution and benefits

Moabi provides cybersecurity analyses to evaluate and test new systems and equipment, enabling manufacturers to compare suppliers and demand high levels of security right from the selection process.

Results

Protect Industry 4.0 with consistent, sustainable security audits, based on key metrics to ensure continuous improvement.

Article, News & Post

Recent Blog & Post

Explore our articles for ideas, tips and perspectives on innovation and cybersecurity – perhaps you’ll find the inspiration or answers you’re looking for.

TechDef06: MOABI addressing the defence sector’s technological needs

On 22 September 2026, MOABI took part in the first edition of TechDef06, organised at the Parc Phoenix in Nice on the initiative of the Alpes-Maritimes Departmental Military Delegation.And this was no ordinary technology fair. TechDef06 was conceived as a meeting place for two worlds that have much to learn from one another: on the one hand, the armed forces and their operational needs; on the other, the companies, start-ups, researchers and institutional players developing the technologies capable of meeting those needs.For this inaugural event, 40 exhibitors and 250 participants came together with a shared objective: to align the technologies developed in our region with the needs of the armed forces. MOABI was among the companies selected to showcase their technology.For us, this selection is particularly significant. It demonstrates the value that cybersecurity and software analysis technologies can bring to environments where control, trust and technological sovereignty are essential. Showcase the technology, don’t just talk about it Jonathan Brossard and Khalil were there to represent MOABI and, above all, to demonstrate in practice what our technology is capable of. Throughout the day, they were able to engage directly with military personnel, industry representatives and various stakeholders interested in our approach, as well as carrying out several demonstrations of the platform. These discussions provided an opportunity to address very practical issues. Modern systems rely on increasingly complex software chains. Proprietary software, open-source components, firmware, embedded systems and technologies from multiple suppliers can coexist within the same environment. In the defence sector, one question therefore becomes particularly important: how can the security of a software component be effectively verified when its source code is not necessarily available? It is precisely this type of issue that MOABI is working on. In an environment as demanding as the defence sector, trust in a supplier remains essential. But trust alone is not always enough. It must also be possible to verify. Discover a whole ecosystem centred on the needs of the defence sector TechDef06 also provided an opportunity to reconnect with a large part of our local ecosystem: technology companies, researchers, academics and institutions with whom we regularly engage in dialogue in Sophia Antipolis and on the Côte d’Azur.The technology park was particularly well represented, with 22 companies and stakeholders from the Sophia Antipolis ecosystem among the exhibitors. This diversity was, in fact, one of the highlights of the day. Cybersecurity, embedded artificial intelligence, Earth observation, communications, autonomous navigation, drones and 3D reconstruction: the technologies on display spanned a wide range of fields, yet all shared a common thread – their application to the operational needs of the defence sector.This is also what makes this type of event particularly valuable for a deep-tech company. A technology may be excellent in a laboratory or impressive during a demonstration. But it is only by engaging with those who might actually use it that one understands the constraints it will have to meet.Discussions with the military personnel present were therefore particularly interesting, allowing us to compare our vision of software security with their specific challenges and operating environments. From research to operational requirements This close relationship between research, industry and end-users is particularly important in the defence sector.Indeed, DMD06 describes TechDef06 as a forum designed to build bridges between those who develop technologies and those who will be able to apply them to meet operational needs.This philosophy resonates with us particularly strongly. MOABI emerged from advanced work in cybersecurity, reverse engineering and vulnerability analysis. But research only has a real impact when it can move beyond the laboratory, be commercialised and address concrete challenges.Being able to present our technology directly to representatives of the armed forces, gather their feedback and discuss their constraints is therefore a particularly interesting step. Our selection for this first edition of TechDef06 obviously does not mean that our technology has been adopted or validated by the Armed Forces.It is, however, an encouraging sign: the issues we are working on resonate with stakeholders in the defence sector. And for a company working on the security of software, systems and their supply chain, this is a discussion we wish to continue. A successful first edition, under the Nice sunshine Finally, it’s hard to talk about this day without mentioning the setting.TechDef06 took place at the Parc Phoenix in Nice, an outstanding garden that is home to over 2,500 plant species and a large wildlife area.A rather unusual setting in which to discuss cyber security, sovereignty, drones and defence technologies. A very beautiful setting, then. Very hot, too. But Jonathan and Khalil survived the Nice sunshine and, above all, came away having made numerous connections, had interesting technical discussions and established several contacts with whom to continue their exchanges. We would like to thank the Alpes-Maritimes Departmental Military Delegation and all the organisers for selecting MOABI and for this first edition of TechDef06.Thank you also to the military personnel, industry representatives, researchers, partners and institutional stakeholders who came to discover our technology and engage with our team. The defence of tomorrow will also be software-driven. And when a system becomes dependent on software, being able to understand and verify that software becomes a strategic issue. It is precisely in this area that we wish to continue contributing our expertise.

Read More »

DEF CON 34: Jonathan Brossard presents his work on automated vulnerability discovery

DEF CON holds a special place in the world of cybersecurity. For over thirty years, the conference has brought together security researchers, hackers, engineers and offensive security specialists in Las Vegas to present their discoveries, tools and work to a particularly discerning international community. Being selected to present one’s research there is therefore a significant honour. This year, Jonathan “endrazine” Brossard, CTO of MOABI, was once again a speaker at DEF CON, delivering a talk on his latest work: Witchcraft Solver: Automated 0-day Discovery in Stripped Binaries. Start with a binary and automatically scan for vulnerabilities The problem that Witchcraft Solver tackles is simple to describe, but considerably more difficult to solve. Let’s take a compiled piece of software for which we do not have the source code. The symbols have been stripped and no specific environment has been set up to facilitate its analysis. How can we automatically search for vulnerabilities in this software and proceed until we obtain a proof of concept? This is precisely the aim of the work presented by Jonathan at DEF CON. Witchcraft Solver offers an automated pipeline combining several advanced cybersecurity research techniques. The binary is first transformed to enable its analysis in an intermediate LLVM representation. An initial analysis then reduces the number of relevant targets before several formal verification engines are run in parallel. The results obtained are then fed into directed fuzzing and concolic execution techniques to compare potential vulnerabilities with the programme’s actual behaviour and move towards concrete proofs of concept. The challenge is therefore not simply to detect an anomaly. It is to gradually narrow the gap between an unknown binary and the demonstration that vulnerable behaviour actually exists. Comparing research with real-world software Another important aspect of the work presented concerns its application to environments representative of real-world industrial settings. According to the results presented by Jonathan, the multi-architecture approach studied was tested against a corpus of 39,364 production ELF binaries and supports various architectures, including ARM64, ARMv7, RISC-V and s390x. The pipeline was also tested against a known vulnerability in libjpeg-turbo, CVE-2023-2804. In the experiment presented, the use of SymQEMU enabled the first crash to be achieved within 25 minutes from a stripped binary, without access to the source code. This work thus explores a particularly important question for security research: to what extent can we automate tasks that have historically been the preserve of experts with advanced skills in reverse engineering and vulnerability analysis ? An issue that goes far beyond academic research This issue also has a clear industrial dimension. Modern digital products are made up of numerous components. Proprietary software, open-source libraries, firmware, third-party components and vendor-specific developments coexist within systems whose complexity is constantly increasing. And the company that uses or integrates these components does not necessarily have access to their source code. Yet it must be able to assess their security. This issue becomes particularly important in industrial, embedded or mission-critical environments, where certain equipment may remain in production for many years and incorporate components from multiple suppliers. Analysing the software as it is actually delivered therefore becomes essential. This is also what makes research into binary analysis particularly interesting: it allows researchers to work directly on the final artefact, without necessarily relying on the development environment that produced it. A particularly significant return to DEF CON This talk forms part of a long-standing relationship between Jonathan Brossard and DEF CON. Jonathan previously presented his research on BitLocker and TrueCrypt in 2008, Rakshasa in 2012, and his work on the Witchcraft Compiler Collection in 2016. His return in 2026 with Witchcraft Solver thus continues nearly twenty years of contributions and work in the fields of offensive security, reverse engineering and vulnerability research. His career has also seen him present his research at several major international conferences in both the industry and academic sectors, including Black Hat, CCC, HITB, IEEE, USENIX and ACM. He is currently completing a PhD on reverse engineering at CNAM, where he has also taught for several years. For MOABI, seeing our CTO return to present his research at DEF CON is naturally a source of great pride. But beyond individual recognition, this presentation above all illustrates a conviction: developing advanced cybersecurity technologies requires maintaining a close link between research, experimentation and real-world industrial challenges. Gaining a deep understanding of software, exploring new methods of analysis, automating what once seemed difficult to automate, and sharing the results with the international community are all part of this approach. Research must not remain confined to laboratories or conferences.It really comes into its own when it gradually enables us to tackle specific security issues. Having attended in 2008, 2012 and 2016, Jonathan Brossard was back at DEF CON in 2026. This time, he posed a particularly ambitious question: to what extent can we automate the search for vulnerabilities when all we have is the binary ?

Read More »