Desk · Labs & reverse engineering

Research

Technical deep dives, reproducible tests, and tool evaluations.

Articles: 177
Topics: 20
Page: 10 / 23

Technical dossier infographic detailing the Copy2Pwn CVE-2024-38213 Windows SmartScreen Mark of the Web bypass vulnerability, showing affected components, exploit mechanisms, and attack flow.

stableResearch Cve 2024 38213

Inside Copy2Pwn: The Windows SmartScreen Zero-Day Exploited by DarkGate

Explore CVE-2024-38213 (Copy2Pwn), the Windows SmartScreen zero-day bypass exploited by DarkGate via WebDAV UNC shares, plus detection and mitigation rules.

Aug 29 · 6 min

Threat dossier infographic detailing CVE-2024-6800 in GitHub Enterprise Server, showing a 9.5 CVSS score, SAML signature wrapping attack vector, and affected versions.

stableResearch Cve 2024 6800

Critical SAML Signature Wrapping Flaw Exposes GitHub Enterprise Server to Unauthenticated Admin Takeover

A critical SAML flaw (CVE-2024-6800, CVSS 9.5) lets attackers gain admin access on GitHub Enterprise Server. Learn the exploitation mechanism and patch steps.

Aug 29 · 7 min

Conceptual 3D architectural illustration depicting hybrid linear recurrence and static parameter offloading in modern open-weight AI models.

stableResearch Qwen 3 8 Flash Next

Qwen 3.8 Flash Next vs DeepSeek V4 Flash Benchmarks: Inside Alibaba’s 6B-Active Architecture and the Shift in Open-Weight Economics

Alibaba’s Qwen3.8-Flash-Next beats DeepSeek-V4-Flash on SWE-bench Pro with 6B active parameters. Explore full benchmarks, architecture, and enterprise TCO.

Aug 29 · 6 min

Technical compliance dossier outlining NIS2 and Commission Implementing Regulation 2024/2690 reporting limits, core architectural domains, and critical notification timeframes.

stableResearch Nis2 Directive

Engineering NIS2: Implementing Technical Controls Under EU Regulation 2024/2690

Master NIS2 technical controls under EU Regulation 2024/2690. Explore DevSecOps architectures, incident reporting pipelines, and compliance audit readiness.

Aug 29 · 7 min

Technical dossier infographic comparing GLM-5.3-Flash against DeepSeek V4 across intelligence benchmarks, active parameter counts, and API token economics.

stableResearch Glm 5 3 Flash

GLM 5.3 Flash vs DeepSeek V4 Flash: Benchmarks, Architecture, and Pricing Compared

Compare GLM 5.3 Flash vs DeepSeek V4 Flash across benchmarks, architecture, and API pricing. Explore agent performance, KV cache gains, and cost savings.

Aug 29 · 7 min

Architectural breakdown diagram showing the 3:1 linear-to-sparse hybrid attention layout, four-branch residual highway, and 2048-token context indexer shared by GLM-5.3-Flash and Qwen3.8-Flash-Next.

stableResearch Qwen3 8 Flash

Qwen3.8 Flash vs GLM 5.3 Flash: Twin Releases Cement the 3:1 Hybrid Architecture Era

Explore how Alibaba's Qwen3.8-Flash-Next and Z.ai's GLM-5.3-Flash cement the 3:1 linear-recurrent hybrid architecture era for ultra-long context AI inference.

Aug 29 · 7 min

Threat intelligence dossier detailing CVE-2024-38200 NTLM coercion mechanics, key protocol metrics, and Active Directory defense layers.

stableResearch Cve 2024 38200

Neutralizing NTLM Coercion: Architectural Strategies for CVE-2024-38200 and Active Directory Defense

Neutralize NTLM coercion and CVE-2024-38200 with architectural Active Directory defenses, perimeter egress filtering, EPA, and phased NTLM deprecation.

Aug 29 · 8 min

Threat intelligence dossier diagram illustrating Citrine Sleet's exploit chain from Chrome V8 type confusion CVE-2024-7971 to Windows kernel exploit CVE-2024-38106 and in-memory FudModule rootkit deployment.

stableResearch Citrine Sleet

Inside Citrine Sleet’s Zero-Day Chain: Chrome V8 to Kernel Rootkit

Discover how Citrine Sleet chained a Chrome V8 zero-day with a Windows kernel exploit to deploy the stealthy FudModule rootkit and blind endpoint defenses.

Aug 29 · 7 min