Skip to content

Curiosity

Someone finds it eventually.

Everything we find gets written up here in full, then pulled apart with everyone in the Discord, where the corrections usually arrive first.

Read the LabHire us
Generated Egnworks banner describing the MikroTrick RouterOS SSH vulnerability chain

Security

MikroTrick Hijacks MikroTik Routers Over SSH

MikroTrick chains two RouterOS SSH flaws for unauthenticated administrator access. Reproduce the broken RSA check safely, then patch and investigate.

Jacob Strix

A dark Egnworks security banner representing a repository API escaping into the GitLab server filesystem.

Security

GitLab CVE-2026-85706 Exposes Server Files

GitLab fixed 18 vulnerabilities, led by an unauthenticated CVSS 10.0 file-read flaw, GraphQL credential exposure, and an Advanced Search RCE.

Jacob Strix

A dark Egnworks banner representing a static page shell loading while dynamic content streams in.

Frontend Architecture

Partial Prerendering Blends Static and Dynamic

A deep technical guide to Partial Prerendering, covering the cacheComponents flag, the use cache directive, cacheLife profiles and prerender thresholds, cacheTag invalidation, connection() for request time rendering, and how the static shell is assembled.

Jacob Val

A dark Egnworks banner representing one element anchoring itself to another using CSS.

Frontend Architecture

CSS Anchor Positioning for Popovers and Tooltips

A deep technical guide to the CSS Anchor Positioning API, covering anchor-name, position-anchor, the anchor() and anchor-size() functions, position-area, custom fallback positions with @position-try, position-visibility, browser support, and a complete dropdown example.

Jacob Val

A dark Egnworks banner representing a compiler analyzing a React component tree.

Frontend Architecture

React Compiler and the End of Manual Memoization

A practical guide to the React Compiler, the build time tool that automatically memoizes components and values so developers no longer need to hand write useMemo, useCallback, or React.memo. Covers how it works, adoption strategy, and current limitations.

Jacob Val

A dark Egnworks banner representing malicious instructions taking control of an AI coding agent.

Reverse Engineering

DUSTMAKER Malware Hijacks AI Coding Agents

Reverse engineer how DUSTMAKER turns trusted AI coding files and CI workflows into execution, credential theft, persistence, and propagation paths.

Jacob Strix

Community

Think we got it wrong?

Most of what ends up here started as an argument in there. Lurking counts as attending.

Join the Discord

Elsewhere