Desk · Labs & reverse engineering

Research

Technical deep dives, reproducible tests, and tool evaluations.

Articles: 177
Topics: 20
Page: 11 / 23

Threat intelligence dossier detailing SonicWall CVE-2024-40766 vulnerability metrics, Akira ransomware attack vector, affected SSLVPN components, and key forensic event IDs.

stableResearch Sonicwall Cve 2024 40766

Akira Ransomware Exploits Critical SonicWall Flaw: Why Firmware Updates Alone Fail

SonicWall CVE-2024-40766 patches alone won't stop Akira ransomware. Learn how attackers bypass MFA, exploit LDAP defaults, and how to properly secure SSLVPN.

Aug 29 · 7 min

Threat intelligence dossier detailing Jenkins vulnerability CVE-2024-23897 with CVSS 9.8 metrics, args4j file-read mechanics, and RansomEXX supply chain disruption.

stableResearch Cve 2024 23897

Critical Jenkins Flaw Weaponized for Ransomware: How CVE-2024-23897 Threatens CI/CD Infrastructure

Jenkins flaw CVE-2024-23897 is being actively exploited for ransomware and RCE. Learn how to secure your CI/CD infrastructure and mitigate this critical bug.

Aug 29 · 6 min

Threat intelligence dossier outlining CVE-2024-39717 in Versa Director, detailing Volt Typhoon exploitation mechanics, VersaMem in-memory webshell, and carrier blast radius.

stableResearch Cve 2024 39717

Chinese State Hackers Breach Telecom SD-WAN Management Systems via Versa Zero-Day

Chinese state hackers exploit a Versa Networks zero-day (CVE-2024-39717) to breach telecom SD-WANs with VersaMem webshells. Discover root cause and fixes.

Aug 29 · 6 min

Threat dossier poster comparing SolarWinds Web Help Desk vulnerabilities CVE-2024-28986 and CVE-2024-28987 with severity scores, target endpoints, and remediation timelines.

stableResearch Solarwinds Web Help Desk

SolarWinds Web Help Desk Flaws: Technical Analysis, Triage, and Defense

Analyze critical SolarWinds Web Help Desk vulnerabilities (CVE-2024-28986 & CVE-2024-28987). Learn triage steps, detection rules, and hardening playbooks.

Aug 22 · 7 min

Architectural infographic illustrating post-quantum cryptographic standards FIPS 203, 204, and 205, hybrid TLS 1.3 key exchange flows, and regulatory compliance deprecation milestones.

stableResearch Post Quantum Cryptography

Post-Quantum Migration Blueprint: Engineering Networks for NIST FIPS 203–205

Prepare enterprise networks for NIST post-quantum standards FIPS 203-205. Master hybrid TLS 1.3 configs, packet fragmentation fixes, and 3-year PQC roadmaps.

Aug 22 · 7 min

Architectural breakdown of Valkey multi-threaded engine showing parallel I/O threads, lock-free ring buffer, main execution core, and async background workers alongside throughput and latency stats.

stableResearch Valkey Architecture

Valkey Architecture & Benchmarks: Zero-Downtime SRE Migration Runbook

Discover Valkey architecture, 1.3M+ RPS benchmarks, and a zero-downtime SRE migration runbook from Redis 7.2 with production tuning and performance tips.

Aug 22 · 7 min

Threat dossier diagram for CVE-2024-7594 detailing the Vault SSH empty principals vulnerability, CVSS 8.8 score, affected versions, and privilege escalation path to root host access.

stableResearch Cve 2024 7594

HashiCorp Vault Flaw (CVE-2024-7594) Allowed Root Host Takeover via Blank SSH Certificates

HashiCorp Vault flaw CVE-2024-7594 lets attackers gain root SSH access via blank certificates. Learn root cause analysis, detection scripts, and remediation.

Aug 22 · 6 min

Threat intelligence dossier detailing the Palo Alto Networks Expedition exploit chain, CVSS scores, affected assets, and credential rotation workflow.

stableResearch Palo Alto Networks Expedition

Critical Flaws in Palo Alto Networks Expedition Expose Enterprise Firewalls to Takeover

Critical vulnerabilities in Palo Alto Networks Expedition expose core firewalls to hijack. Learn the exploit chains, forensic triage, and mitigation steps.

Aug 22 · 6 min