From the lab
Zero-days, intelligence, and open-source detections — the output of a lab that never stops probing. Everything we can safely publish, in one place.
A remotely reachable, pre-authentication memory-corruption chain in a widely deployed edge appliance — from first crash to reliable RCE, responsibly disclosed and patched worldwide.
Our living map of active ransomware crews — their infrastructure, affiliates, and the tooling they rotate through — and how we turn it into decisions-grade intelligence.
Detection logic distilled from hundreds of real intrusions — the behaviors that actually catch operators, released open-source for defenders everywhere.