Security research articles

Oct 19, 2026 / Research

Redis: from TLS reuse to RCE

How a TLS ticket crosses the Redis cluster boundary, exposes an internal secret, and opens a separate UAF chain.

Read article ↗

Jul 28, 2026 / Research

Printing Infinite Money on the Cosmos Blockchain

A uint256 underflow in cosmos blockchain

Read article ↗

May 11, 2026 / Research

Exploiting LangSmith: LangGhost RCE (CVE-2026-45134)

Inside LangGhost (CVE-2026-45134): how untrusted LangSmith Hub prompts enable credential theft and remote code execution, and how the fix works.

Read article ↗

Apr 24, 2026 / Reverse engineering

Reverse Engineering AnyDesk

Reverse engineering AnyDesk 9.7.0: unpacking its Windows binary, tracing DPAPI and Frida hooks, and analyzing the AnyNet protocol and password hashing.

Read article ↗

Dec 27, 2025 / Research

My thoughts on MongoBleed (CVE-2025-14847)

A technical analysis of MongoBleed (CVE-2025-14847): how MongoDB's compressed wire protocol exposes heap memory, affected versions, and remediation.

Read article ↗