Margin Research

You are entering a world somewhere between 0 and 1. It is a world that feels unsettling, strange, and new. There are often hallucinations. Bugs are flying everywhere. Are you in the twilight zone? No. You are working in offensive cybersecurity in 2026.The

As the US-Iran conflict oscillates between combat and ceasefire, urgent questions persist about how Russian technology, knowledge, talent, infrastructure, and other capabilities and resources are supporting Iranian unmanned aerial vehicle (UAV) activity-a

Reuters reported on April 7 that Ukraine is claiming that Russia is supplying Iran with "cyber support," citing alleged interactions between Russian cybercriminal hackers and Iranian hacker groups. The Russian government denied the report on April 8.This

Global contributions to open-source software (OSS) add tremendous value: for years, they have forged connections between developers around the world, enabled dispersed and specialized talent to build better software for users, and collectively helped ensu

It's September, which means beginning the ritual of back-to-school season. That ritual doesn't just apply to kids with backpacks-military cadets across the world are heading back into classrooms too. In China, cyber-track cadets are heading into classroom

Margin Research is pleased to announce the launch of its bug bounty program. Specifically Margin is putting a bounty on spotted lanternflies (pictured below). Spotted lanternflies are an invasive species that feed on crops including grapes, stone fruit, a

Recently, Margin published a piece on China's cyber militias and how they fit into their broader defense strategy. It's gotten a very positive reception overall, but there's one question that's come up more than once, both in chats I've had and in other c

This report examines how China's cybersecurity industry fields reserve and militia units in support of the PLA and national mobilization system.

As North Korea sends thousands of troops to Russia, to aid with Russia's full-on war on Ukraine, there is a concerning development in relations between Russia, North Korea, and China-Russia and China's role in North Korean operations against Western tech

This is the third and final part of our blog post series on Signal and iOS exploitation via the insertion of synthetic vulnerabilities.Part one explored Signal and WebRTC, detailing the injected vulnerabilities and the process of adding them. In part two