Research & Intelligence
Technical publications from our research and advisory practice.
Technical breakdown of CVE-2026-24061, the critical GNU telnetd authentication bypass that grants instant root access. Root cause analysis, exploitation code, protocol details, and detection signatures.
Dissecting MongoBleed — the Heartbleed-class vulnerability in MongoDB's zlib compression layer that leaks heap memory to unauthenticated attackers. Wire protocol analysis, exploitation code, and detection rules.
Full exploitation walkthrough for CVE-2025-32463, the sudo chroot vulnerability that lets local users escalate to root through malicious NSS library loading. Exploit code, detection rules, and remediation.