Margin Research Blog
Musings, insight, and hot takes on Security, Research, and Technology from the Margin Research team.
Introducing the Half-Day: 0-Day in the Age of AI
You are entering a world somewhere between 0 and 1. It is a world that feels unsettling, strange, and new. There are often hallucinations. Bugs are flying everywhere. Are you in the twilight zone? No. You are working in offensive cybersecurity in 2026. The future of the offensive cybersecurity marketplace
Analyzing Iranian-Russian UAV Touchpoints and Innovation
As the US-Iran conflict oscillates between combat and ceasefire, urgent questions persist about how Russian technology, knowledge, talent, infrastructure, and other capabilities and resources are supporting Iranian unmanned aerial vehicle (UAV) activity—and vice versa. Media investigations and open-source research have well-publicized the many touchpoints between the
Unpacking Russian-Iranian Private-Sector Cyber Connections
Reuters reported on April 7 that Ukraine is claiming that Russia is supplying Iran with “cyber support,” citing alleged interactions between Russian cybercriminal hackers and Iranian hacker groups. The Russian government denied the report on April 8. This arrives on the heels of several other claims related to supposed Russian-
Better Analyzing Foreign Adversary Threats to Open-Source Software
Global contributions to open-source software (OSS) add tremendous value: for years, they have forged connections between developers around the world, enabled dispersed and specialized talent to build better software for users, and collectively helped ensure that OSS remains available, updated, and relevant for users everywhere. Having more eyeballs on
The PLA Goes Back to School: Mapping New Developments in China’s Military Cyber Education System
It’s September, which means beginning the ritual of back-to-school season. That ritual doesn’t just apply to kids with backpacks—military cadets across the world are heading back into classrooms too. In China, cyber-track cadets are heading into classrooms that don’t look quite like last
Margin Research Bug Bounty Program
Margin Research is pleased to announce the launch of its bug bounty program. Specifically Margin is putting a bounty on spotted lanternflies (pictured below). Spotted lanternflies are an invasive species that feed on crops including grapes, stone fruit, and soybeans. Enter to win exclusive Margin Research Bug Bounty Program merch
Cyber Militias Redux: Or, "Why Your Boss Might Also Be Your Platoon Leader in China"
Recently, Margin published a piece on China’s cyber militias and how they fit into their broader defense strategy. It’s gotten a very positive reception overall, but there’s one question that’s come up more than once, both in chats I’ve had and in other corners of
The Fake IT Worker Triangle: Pyongyang, Moscow, and Beijing
As North Korea sends thousands of troops to Russia, to aid with Russia’s full-on war on Ukraine, there is a concerning development in relations between Russia, North Korea, and China—Russia and China’s role in North Korean operations against Western tech firms. CoinDesk published a story on
You Can’t Spell WebRTC without RCE - Part 3
This is the third and final part of our blog post series on Signal and iOS exploitation via the insertion of synthetic vulnerabilities. Part one explored Signal and WebRTC, detailing the injected vulnerabilities and the process of adding them. In part two we leverage these vulnerabilities to exfiltrate the Signal
