CVEs
→ AI vulnerability research agent Q2 RESULTS
Beyond language.
Into the flaw.
AI-powered vulnerability research. Exploring Windows, Linux, macOS and complex software systems, from the first lead to a validated finding.
Explore our results ↓01 / RESULTS
Research measured
in real impact.
Recognized by Microsoft Security Response Center. Research spanning Windows, Linux and macOS.
02 / SELECTED RESEARCH
From finding
to evidence.
A growing archive of validated vulnerability research. Detailed material is released when disclosure conditions permit.
200+ assigned CVEs—and counting. We’re building an agent that turns AI capability into real security impact.
SECURITY UPDATES
↗
86 Windows CVEs reported by Diffract fixed in October.
Microsoft’s October 2026 security updates fixed 86 Windows CVEs reported by the Diffract team.
Microsoft October 2026 release notes ↗UPCOMING TALK
↗
Speaking at OffensiveCon Tokyo 2026.
Yunpeng Tian and wgg will present “Breaking NTFS at Scale: From an Unmapped Attack Surface to SYSTEM” at OffensiveCon Tokyo, held on October 27–28.
SECURITY UPDATES
↗
80 Windows CVEs reported by Diffract fixed in September.
Microsoft’s September 2026 security updates fixed 80 Windows CVEs reported by the Diffract team, accounting for 11.1% of all Windows vulnerabilities fixed that month.
Microsoft September 2026 release notes ↗04 / RESEARCH SERVICES
Research you can
put to work.
Get access to selected findings from our research archive, with the technical depth needed to validate exposure and improve defenses.
Vulnerability reports
Root-cause analysis, affected components, attack surface, impact, and remediation guidance from our past research.
- Technical analysis
- Impact assessment
- Mitigation notes
Proof-of-concept
Private validation material and reproducible test cases for authorized security assessment and defensive research.
- Reproduction steps
- PoC code
- Validation support
Research consulting
Direct collaboration on vulnerability triage, patch analysis, attack-surface review, and detection opportunities.
- Research briefings
- Patch analysis
- Custom requests
PRIVATE RESEARCH ACCESS
Discuss your request ↗
Looking for a report or PoC?
Tell us what product, CVE, or research area you are investigating.
05 / THE TEAM
Built by researchers.
Vulnerability research across operating systems, kernels, and complex software attack surfaces.
Yunpeng TianPh.D. student · Co-founder↗
- Ph.D. student @ The Hong Kong Polytechnic University
- System security · Windows internals · vulnerability discovery
- MSRC Most Valuable Researcher
- Papers at CCS · NDSS · USENIX Security
Qinrun DaiPh.D. student · Co-founder↗
- Ph.D. student @ University of Colorado Boulder
- Windows and Samsung security · vulnerability research
- MSRC Most Valuable Researcher
- Samsung Security Hall of Fame
wggWindows Security Researcher
- Windows internals · macOS security · vulnerability discovery
- MSRC Most Valuable Researcher
npc0voKernel Security Researcher
- Android and Windows kernel security
- Discovered dozens of Windows vulnerabilities