Category desk

Research

Technical deep dives, reproducible tests, and tool evaluations.

Ternary Bonsai 2 27B architecture diagram showing Hadamard rotation and ternary quantization flow from Qwen3.8 to packed GGUF PTQ1_0.

Ternary Bonsai 2 27B: Architecture, Benchmark Reality, and Runtime Limits

Prism ML’s Ternary Bonsai 2 27B compresses Qwen3.8 into 5.9GB at 1.76 bits per weight. Here is how the math works and what independent testing reveals.

Threat dossier chart detailing Microsoft Defender's ShieldCrash arbitrary file read flaw, outlining the vulnerability progression across CVE-2026-50656 and CVE-2026-69414, affected Cloud Files components, and operational boundaries.

Microsoft Defender Zero Day Research

Microsoft Defender Zero-Day 'ShieldCrash' Exposes Arbitrary File Read Flaw

Unpatched Microsoft Defender zero-day ShieldCrash allows arbitrary file read as SYSTEM, bypassing recent patches. Learn technical details and mitigations.

Threat intelligence dossier outlining the MikroTrick RouterOS exploit chain, highlighting CVE-2026-67276 and CVE-2026-86060, attack telemetry metrics, and root escalation stages.

Mikrotik Routeros Research

MikroTik RouterOS Exploited: MikroTrick Chain Bypasses SSH Authentication

The critical MikroTrick exploit chain bypasses MikroTik RouterOS SSH auth to grant root access. Learn the threat mechanics, IoCs, and remediation protocols.

Threat intelligence dossier diagram summarizing the BlueMoon turnkey exploit kit, illustrating the three-stage vulnerability chain from Chrome V8 memory corruption to Windows kernel elevation, alongside threat actor adoption telemetry and key operational dates.

Bluemoon Exploit Kit Research

BlueMoon Exploit Kit Chains Chrome Patch-Gap Flaws and Windows Kernel Zero-Day Across State Espionage Campaigns

State espionage groups deploy BlueMoon exploit kit, chaining Chrome patch-gap bugs and Windows kernel zero-days for zero-interaction remote code execution.

Threat intelligence dossier showing attack metrics and progression for the PaperCut CVE-2026-81578 and CVE-2026-82078 zero-day campaign, compromising 440 servers across 395 organizations.

Papercut Zero Day Research

PaperCut Zero-Day Swarm: Exploiting CVE-2026-81578 and CVE-2026-82078 for Rapid Active Directory Compromise

Autonomous AI agents exploit PaperCut zero-days CVE-2026-81578 and CVE-2026-82078 for rapid Domain Admin takeover. Discover crucial indicators and fixes.

Threat dossier outlining CVE-2026-84869 with CVSS 9.9 metrics, affected client versions prior to 26.6.5, CISA KEV timeline, and guest-to-host lateral execution diagram.

Connectwise Screenconnect Research

ConnectWise Patches Critical ScreenConnect Flaw CVE-2026-84869 Exploited in Reverse Host Hijacking Attacks

ConnectWise patches critical CVSS 9.9 ScreenConnect flaw CVE-2026-84869, exploited in-the-wild to hijack technician machines via reverse endpoint attacks.

Conceptual illustration of a Jenkins-style CI/CD controller at the center of a software factory, with pipeline lines to code, cloud, and artifacts and a cracked supply-chain link on one plugin package

Mlx Research

MLX vs llama.cpp on Apple Silicon: Which Local LLM Runtime to Actually Use

One is a portable inference engine, the other an array framework that also trains — and that single difference settles almost every practical question.

Dossier-style briefing poster summarizing the July 2026 Accenture Azure DevOps breach: roughly 35 GB stolen, ~87 applications and 56 environment credential files exposed, with cascade paths from provider ADO to client tenants via PATs, storage keys and committed secrets.

Prompt Caching Research

Prompt Caching Explained: Cutting Agent Costs Without Touching the Model

Your agent re-sends the same long prefix on every step and pays to recompute it. Here is the KV mechanism, the ordering rule it forces, and the break-even math.