New Update Introducing RxCloud CyberLab

🧾RxCloud CyberLab – Update Changelog

📅Date: 2026-04-06
🛠Maintenance duration: 2h30



🖥️ RxCloud Dashboard

Version: 0.0.4.7_Stable

1cVCnyU.png


n1kKjsQ.png

➤ Added
  • Users can now delete their generated reports
  • Confirmation step added before deletion

➤ Improvements
  • Enhanced RxBot Assistant:
    • Added guidance for downloading previous submissions
    • Added instructions for deleting generated reports


📄 RxLab Reports

➤ New Features
  • Added new Process Chain section in PDF reports
  • Introduced analytical phase-based reading:
    • Drop Phase
    • Execution Phase
    • Persistence Phase
    • Reputation Phase
  • New JSON fields:
    • attack_phases
    • process_analysis.process_chain
    • process_analysis.process_chain_count

➤ Improvements
  • Major improvement in analyst readability with more narrative report structure
  • Added compact mode for Process Chain to reduce visual noise on large sessions
  • Added PDF bookmark for quick access to Process Chain section

➤ Fixes
  • Fixed YARA false positives on legitimate system artifacts (e.g., Defender mpengine.dll)
  • YARA matches related to Microsoft/Defender context are now downgraded to informational-only in analyst view
  • Raw data remains available for expert investigation and traceability

➤ JSON / Data Model
  • Enhanced YARA section with analyst-focused fields:
    • analyst_matches
    • analyst_matches_count
    • analyst_high_confidence_count
    • analyst_suspicious_count
    • analyst_informational_count
    • analyst_filtered_count
    • analyst_filtered_reasons
  • Backward compatibility maintained with existing fields


🧬 ReverseLab VMs
  • Minor optimizations

🧪 PentestLab VMs
  • Minor optimizations

🛡️ RxCloud Firewall (pfSense)
  • Slight hardening of VLAN rules for VMs

🖥️ RxCloud Guacamole
  • Minor optimizations (latency caused by VM not fully initialized improved)


📝 Notes
  • VM video recording feature still in development
  • Ongoing work to reduce VirtualBox detection by malware
 
  • Like
  • +Reputation
Reactions: simmerskool, harlan4096 and Shadowra
🧾RxCloud CyberLab – Update Changelog

📅Date: 2026-04-07
🛠Maintenance duration: 4h00



🖥️ RxCloud Dashboard

Version: 0.0.4.8_Stable

A6NhH9c.png


rn8qNYo.png


2mDxDwp.png


➤ Added
  • Users can now delete submitted samples from My Submissions
  • New Analyst Notes section:
    • View notes collected from VM sessions
    • Download note files
    • Delete personal notes

➤ Improvements
  • Upload Sample section is now fully locked when:
    • No active slot
    • VM is not yet ready during allocation


🤖 RxLab Agent – Analyst Notes System

➤ Added
  • New secure Analyst Notes channel for VM sessions
  • Notes are collected only from:
    • C:\RxLab\Notes
  • Automatic notes folder lifecycle:
    • Created when slot becomes active
    • Cleaned/reset when session ends
  • Notes exported as sidecar during end-of-session upload

➤ Security
  • Strict file allowlist: .txt and .log only
  • Filename validation: [a-zA-Z0-9._-] (max 64 chars)
  • Limits enforced:
    • Max 10 files
    • Max 512 KB per file
    • Max 5 MB total
  • Content validation (fail-closed):
    • Rejects binary/null-byte content
    • Accepts only UTF-8 / ASCII / UTF-16 (with BOM handling)
    • Invalid files ignored (never executed)
  • Notes rendered as plain text only (no HTML interpretation)

➤ Fixed
  • Improved agent behavior on temporary network/API failures:
    • Agent no longer switches to Idle on transient errors
    • Prevents accidental note reset/purge while RDP session is still active


📄 RxLab Reports

  • Reports now consume optional .notes.json files
  • Per-session notes generated:
    • session_notes_<timestamp>_<kind>_<vm>.txt
  • Notes are archived alongside telemetry artifacts (core/meta/notes)
  • Ingestion pipeline updated to preserve valid .notes.json files


📝 Notes
  • VM video recording feature is still in development
  • Ongoing work to reduce VirtualBox detection by malware
 
  • Like
Reactions: simmerskool and harlan4096
📢 RxCloud CyberLab – Infrastructure Scaling Update

Hi everyone,

Over the past few days, I’ve been observing a significant increase in activity on RxCloud CyberLab. At peak times, all VM slots are fully occupied, with users actively waiting in queue.

This is honestly amazing to see — and also a clear signal that the platform is being actively used for real-world analysis.

Because of this, I’m currently evaluating infrastructure upgrades to support the growing demand, including:
  • Additional VM capacity
  • Faster storage (NVMe-based infrastructure)
  • Improved allocation performance
The goal is to keep RxCloud fully accessible while maintaining a smooth and responsive experience for everyone.

Thanks again for all the support and feedback — this is just the beginning.

👾 Welcome to the Arena
— RoxasDev
 
  • Like
  • +Reputation
Reactions: simmerskool, harlan4096 and Shadowra
🧾RxCloud CyberLab – Update Changelog

📅Date: 2026-04-14
🛠Maintenance duration: 12h30


🖥️ RxCloud Dashboard
Version: 0.0.4.9_Stable

  • Upload size increased — users can now upload ZIP files up to 512 MB


🤖 RxLab Agent – Runtime Randomization & Evasion (Major Upgrade)

➤ Added
  • New randomized Session Runtime mode activated when a slot becomes active
  • Ephemeral workspace created under:
    • C:\ProgramData\<random>\
  • Runtime binaries copied and randomly renamed before execution (Agent, Service, dependencies)
  • Dynamic session.json generated (paths, session_id, logs, tools, etc.)
  • Dedicated session subfolders:
    • Deposit
    • Notes
    • logs
    • tools\yara
  • Automatic update of Desktop shortcuts (Notes, RxLab Deposit)

➤ Changed
  • Clear separation of modes:
    • Maintenance → C:\RxLab (stable base)
    • Active Session → randomized runtime workspace
  • Session logs now written to runtime workspace (...\logs\core.log)

➤ Security / Evasion Hardening
  • Stable instance (C:\RxLab) stops after runtime handoff (no dual collectors)
  • C:\RxLab is hidden/moved during active session to reduce sandbox footprint
  • Runtime treated as internal tooling to reduce telemetry noise

➤ Reliability
  • Runtime handshake mechanism (runtime.ready)
  • Clean rollback on runtime failure
  • Workspace resume after reboot via active session pointer
  • Runtime service maintains RunOnce on active runtime path

➤ Fixed
  • Fixed bootstrap loop issue (runtime handshake timeout caused by SingleInstance mode)
  • Multi-instance runtime now supported
  • Prevents concurrent stable relaunch when runtime session is active

➤ Compatibility
  • No behavior change when no slot is active (maintenance/updater mode preserved)
  • Designed for snapshot/restore environments (ephemeral sessions)


📄 RxLab Reports

  • Improved Process Chain telemetry consumption
  • Improved artifact rendering
  • Enhanced Execution Chain analysis (parent → child → drop → relaunch)
  • Improved Attack Phases telemetry processing


🧬 ReverseLab VMs
  • Applied latest Microsoft security updates
  • Updated reverse engineering tools
  • Updated third-party software
  • VM optimization and VDI compaction

🧪 PentestLab VMs
  • Applied latest Microsoft security updates
  • Updated third-party software
  • VM optimization and VDI compaction


📝 Notes
  • VM video recording feature still under development
  • Ongoing work to reduce VirtualBox detection by malware
 
  • Like
Reactions: simmerskool and harlan4096
🧾RxCloud CyberLab – Dashboard Update Changelog

📅Date: 2026-04-15
🛠Maintenance duration: 1h30


🖥️ RxCloud Dashboard

Version: 0.0.5.0_Stable

bKC2V36.png
csYOMKw.png
lD7SK63.png

➤ Improvements
  • Enhanced graphical interface with a more premium visual rendering
  • Improved upload progress UI for ZIP files, now fully aligned with the Dashboard design language
  • Added multiple animations across the Dashboard for a smoother and more engaging user experience
  • Reworked cards and overall layout for a cleaner and more modern design

➤ Added
  • After uploading a ZIP file, the deployed filename inside the VM is now returned and displayed in the Dashboard
 
  • Like
Reactions: simmerskool and harlan4096
RoxasDev said:
🚀 RxCloud CyberLab

czcQIEi.png

Website RxCloud CyberLab

nCy8Zk2.png


p2tTDTl.png


8hLfOY6.png


2CWpbTm.png

The first 100% free & open sandbox for malware researchers !

Tired of the limitations of Hybrid Analysis, Any.Run, or other closed platforms?
RxCloud CyberLab is here to break the rules.

Built from scratch by a single developer in Alsace 🇫🇷, RxCloud CyberLab offers:

• 🖥️ Dedicated Windows 10 LTSC VMs (ReverseLab & PentestLab)
• 🔒 Full isolation via pfSense firewall (traffic logged & monitored)
• 🌍 Outbound traffic routed through an encrypted VPN in Luxembourg (dedicated IPs never exposed, malware traffic fully logged)
• ⚡ Instant access through Guacamole (HTML5 RDP, no software required)
• ⏱️ Time-limited slots (30 min per user, fair use guaranteed)
• 📊 Automatic monitoring of CPU, RAM, network & storage
• 📑 Final PDF report with logs, behavior, and IoCs
• ✅ Access granted only to verified malware hunters, AV testers, and security researchers

​

Available Labs
• 🧩 ReverseLab → Pre-loaded with tools for reverse engineering & malware tracking
• 🛡️ PentestLab → Clean VM where you can install the AV of your choice and put it to the test

⚠️ Current Capacity
For now, the dedicated server has a small configuration:
  • Maximum 2 VMs running simultaneously → 1 ReverseLab + 1 PentestLab
  • If the project gains traction, a larger server will be deployed to support more parallel sessions

⚠️ Alpha Version Disclaimer
RxCloud CyberLab is currently in Alpha.
Bugs, glitches, or temporary downtime may occur.
Feedback and bug reports are highly encouraged to help improve the platform.

​

How to apply?

  1. Fill out the request form with:
    • A valid email address
    • Proof of your background (GitHub profile, MalwareTips, blog, or research samples)
  2. Each request is manually reviewed.
  3. If approved, you’ll receive your credentials by email.
​

Philosophy

Unlike other services, RxCloud CyberLab will always stay free & open.
No marketing, no hidden agenda – just a tool for the community, by the community.
Click to expand...
Could you share the VM; I could run it locally thus no resource usage on your part.
 
  • Like
Reactions: simmerskool and RoxasDev
cartaphilus said:
Could you share the VM; I could run it locally thus no resource usage on your part.
Click to expand...

Hello,

Thanks for your interest, I really appreciate it 🙂

At the moment, the lab environment isn’t designed to be distributed as standalone VMs, as it relies on a controlled infrastructure (isolation, orchestration, telemetry pipeline, etc.).

The goal of RxCloud CyberLab is precisely to provide a ready-to-use environment accessible directly through the browser, without requiring any local setup.

That said, I understand the use case — I may explore lightweight or offline-compatible options in the future.
 
  • Like
  • +Reputation
Reactions: simmerskool, cartaphilus and harlan4096
🧾RxCloud CyberLab – Update Changelog

📅Date: 2026-04-18
🛠Maintenance duration: 4h30


🤖 RxLab Agent

➤ Added
  • Integrated new RxNeural YARA rulesets (highconfidence, behavior, static, memory, allow)
  • Support for allow rules to cleanly downgrade/exclude signals without breaking global scoring
  • Enhanced YARA telemetry export:
    • matches
    • severity
    • tags
    • score_delta
    • counters
    • errors
  • Internal tooling noise filter to prevent YARA self-execution artifacts from polluting analysis

➤ Improved
  • New in-VM user window: "Download sample..." when a sample is fetched from the Dashboard
  • Live download progress display:
    • Percentage
    • Downloaded / total size
    • Estimated speed
    • ETA (remaining time)
  • UX positioning: bottom-left popup (above MainAgent)
  • Explicit end states: success / error with clean auto-close

➤ Fixed
  • Improved randomized runtime robustness:
    • Dependencies (.dll / .xml) are now correctly copied into the session workspace
  • Better tolerance to missing UI resources during startup (reduced visual load failures)


🧬 ReverseLab VMs
  • Updated third-party software
  • Updated reverse engineering tools

🧪 PentestLab VMs
  • Updated third-party software

🖥️ RxCloud Guacamole
  • Applied latest Debian security updates
  • Updated Docker components

🛡️ RxCloud Firewall (pfSense)
  • Purged logs older than 180 days


📝 Notes
  • VM video recording feature still under development (ongoing resource optimization)
  • VirtualBox detection evasion is progressing well (currently in testing phase)
 
  • Like
  • +Reputation
Reactions: Gandalf_The_Grey, simmerskool, Shadowra and 1 other person
💠 RxCloud Atlas — Behavioral Intelligence Layer

“Turning raw telemetry into actionable intelligence.”

📢 Introduction

After building RxCloud CyberLab, I wanted to go further than just running samples in a sandbox.

RxCloud Atlas is the next step: a behavioral intelligence layer that transforms raw sandbox telemetry into structured, visual, and explainable insights.

This is not just another report viewer — it’s an attempt to understand behavior, not just log it.

🧩 What is RxCloud Atlas?

RxCloud Atlas processes telemetry from sandbox sessions (core.log) and builds:

• Behavioral clusters
• Relationship graphs
• Trend analysis
• Risk scoring
• Explainable execution flows

Everything is derived from real execution data.

🌐 Two Analysis Scopes

🔹 Public Atlas (Anonymized)
• Aggregated intelligence across all sessions
• No sensitive data
• Global behavior trends
• Cluster topology and relationships

🕵🏻‍♂️ Private Atlas (User-scoped)
• Full session visibility
• Real file paths, registry keys, process names
• Detailed execution chains
• Session comparisons and artifacts

⚛ Core Features

📊 Behavioral Clustering
Automatically groups similar behaviors into clusters (dropper, loader, injector, etc.)

🗺 Intelligence Map
Interactive graph showing:
• Nodes (process, file, registry, DNS, etc.)
• Relationships
• Execution structure

🔍 Multi-level Visualization
• Overview → clean & readable
• Analyst → detailed
• Raw → full telemetry

📈 Trends & Metrics
• Risk evolution over time
• Behavior family distribution
• Signal density & activity

🧾 Explain Engine (WIP)
Transforms raw events into:
• Clear explanations
• Behavior interpretation
• Risk reasoning

⚙️ Technical Approach

Instead of parsing logs at runtime:

• A dedicated compiler processes sessions in background
• Data is transformed into optimized JSON datasets
• Frontend only consumes pre-computed intelligence

→ Result: faster, scalable, and cleaner architecture

🎯 Philosophy

I wanted to build the kind of tool I would have loved to use:

• Fast
• Visual
• Meaningful
• Not overloaded with noise
• Focused on behavior understanding

🚧 Status

RxCloud Atlas is currently in active development.

Features are being iterated continuously, especially:
• Graph readability
• Explain Engine
• Behavioral correlation

💬 Feedback

I’d love to hear your thoughts, ideas, or criticisms.

This project is evolving fast, and community feedback is extremely valuable.

📸 Preview

brave_qoLDo8pbbt.png

brave_V6Xl26P7Bz.png

brave_hfjrpxpZ2m.png

brave_XaBqrbeC2V.png

brave_YZsuFI1Kco.png

brave_iJJ7sYFpVu.png

3dikVvF.png

iDqoNxc.png

IYiEy3O.png

bU5Xypy.png

jBexf3s.png

YMO6LvU.png

— RoxasDev
 
  • Like
Reactions: simmerskool, Gandalf_The_Grey and harlan4096
🧾RxCloud CyberLab – Update Changelog

📅Date: 2026-04-22
🛠Maintenance duration: 30 minutes


✨ Hotfix — RxLab Reports

  • Fixed a PDF/JSON build crash caused by malformed YARA matched_target values (mixed metadata + path) during analyst normalization
  • Hardened YARA target handling with safe path extraction and non-throwing filename resolution
  • Added per-match fault isolation in YARA analyst normalization:
    • A single invalid match no longer breaks the entire report generation
  • Improved diagnostics with detailed context for YARA normalization exceptions
  • Result: Reports now build successfully even when YARA match targets contain non-standard path strings
 
  • Like
Reactions: simmerskool, Gandalf_The_Grey and harlan4096
🧾RxCloud CyberLab – Update Changelog

📅Date: 2026-04-28
🛠Maintenance duration: 3h


🖥️ RxCloud Dashboard

Version: 0.0.5.2_Stable

TQd6YTa.png
K2T847S.png
6PAaK8Q.png

➤ Added — New Badges System Expansion
  • Behavior Analyst — JSON reports with multiple suspicious behavioral signals
  • Process Hunter — JSON reports with many relevant processes or process chains
  • Persistence Finder — JSON reports indicating confirmed/suspected persistence (startup/registry traces)
  • Deep Analysis — Full JSON reports with multiple analyzed layers and extensive timeline events
  • Rapid Response — users who upload multiple samples quickly after VM readiness
  • Ransomware Explorer — JSON reports containing ransomware-related indicators
  • Loader Tracker — JSON reports with loader/dropper/injection/payload indicators
  • Stealer Hunter — JSON reports containing stealer/credentials/browser/wallet indicators
  • DNS Watcher — JSON reports with high DNS activity or domain IoCs
  • C2 Tracker — JSON reports with C2/beaconing or suspicious network activity
  • Stealth Operator — JSON reports with evasion/injection/unhooking/AMSI indicators
  • Arena Master — highly active user with many completed sessions across ReverseLab and PentestLab
  • RxCloud Legend — long-term heavy usage (sessions, uploads, reports, multiple badges earned)
  • Slot Sniper — users who obtain multiple slots very quickly after request
  • Ghost — manual/curated badge

QQZxYtl.jpeg


🖥️ RxCloud Guacamole
  • Performance improvements

🌐 RxCloud Atlas
  • Performance improvements

🛡️ RxCloud Firewall (pfSense)
  • Performance improvements


📝 Notes
  • VM video recording feature still under development (ongoing resource optimization)
  • VirtualBox detection evasion is progressing well (currently in testing phase)
 
  • Like
Reactions: simmerskool and harlan4096
🧾RxCloud CyberLab – Update Changelog

📅Date: 2026-04-29
🛠Maintenance duration: 4h30


🤖 RxLab Agent

  • Major improvement in telemetry delivery reliability at end-of-session
  • Introduced a more robust retry system for temporary network / FTP failures
  • Improved delivery state confirmations (start, success, failure)
  • Reduced risk of report loss during session termination under unstable network conditions
  • Improved Analyst Notes export with more reliable success/failure detection
  • Fixed a rare parsing error caused by certain system events (non-blocking)
  • Reduced internal agent noise in collected telemetry
  • Disabled antivirus watchers outside PentestLab to avoid unnecessary logs in ReverseLab
  • Improved internal logging for better diagnostics without exposing sensitive information
  • Stabilized collection and submission pipeline for more deterministic behavior at session end


🌐 RxCloud Atlas — Private Intelligence Upgrade

50LLAAT.png

Y69871a.png

shyad2a.png

duHLCxy.png

PvTCcDZ.png

➤ New Features
  • New Private Atlas experience centered on the selected session
  • Clearer, progressive and analysis-oriented private map
  • Added enriched Explain Engine
  • Added Execution Narrative to understand behavioral chains
  • Added Key Findings for quick insight extraction
  • Added visual Risk Indicator
  • Artifact prioritization levels: HIGH / MEDIUM / LOW / NOISE

➤ UX Improvements
  • Low-relevance elements are now hidden by default
  • Optional mode to display noise / low-signal artifacts
  • Improved visual prioritization of relevant elements
  • Important nodes stand out more clearly in the map
  • Node details are more structured and actionable
  • Session artifacts are better organized to reduce visual clutter

➤ Analytical Accuracy
  • Better alignment between Atlas and CyberLab analysis reports
  • Reduced over-interpretation of noisy activity
  • Clearer distinction between registry activity and confirmed persistence
  • Improved prioritization of suspicious elements, payloads, detection signals and execution chains

➤ Performance
  • Increased use of precomputed / derived data
  • Reduced heavy processing at page load
  • Smoother navigation across private views

➤ Privacy
  • Strong separation between public anonymized data and private user views
  • Public views expose only aggregated / anonymized / derived data
  • Private details remain strictly scoped to authenticated users and their sessions


📝 Notes
  • VM video recording feature still under development (ongoing resource optimization)
  • VirtualBox detection evasion is progressing well (currently in testing phase)
 
  • Like
  • Applause
Reactions: simmerskool, harlan4096 and Shadowra
🧾RxCloud CyberLab – Update Changelog

📅Date: 2026-05-01
🛠Maintenance duration: Several hours


🤖 RxLab Agent — Resilience & Fallback System (Major Upgrade)

  • Introduced a local telemetry fallback to improve report recovery when network connectivity is degraded or interrupted (anti-VM sabotage by malware)
  • Improved end-of-session trigger to export data earlier before VM shutdown/reset
  • Automatic prioritization of local channel when end-of-session signal is already available locally
  • More reliable export of session artifacts:
    • Logs
    • Metadata
    • Analyst Notes
  • Added a session manifest for integrity verification of exported files
  • Safer file writing (temporary files → validated final commit)
  • Reduced unnecessary delays when primary network channel is unavailable
  • Improved internal logging to clearly distinguish success, failure, and fallback paths
  • Preserved normal pipeline behavior (no change when primary export works correctly)
  • Backend-side monitoring added to process fallback exports only after full validation
  • Protection mechanism added against unauthorized files in local fallback storage
  • Fixed an issue where the agent could spend too much time on network retries before using fallback


⛉ RxCloud WatchGuard

  • New module actively monitoring backend infrastructure
  • Prevents unauthorized or unsigned files from being executed or stored


🧬 ReverseLab VMs
  • Reduced VirtualBox detection by malware

🧪 PentestLab VMs
  • Reduced VirtualBox detection by malware


🛡️ RxCloud Firewall (pfSense)
  • Added new rules for Alpine fallback and local fallback segmentation


📝 Notes
  • VM video recording feature is still under development
 
  • Like
  • +Reputation
Reactions: Shadowra, simmerskool and harlan4096
🧾RxCloud CyberLab – Update Changelog

📅Date: 2026-05-04
🛠Maintenance duration: 3h30



🤖 RxLab Agent — Session Resilience Improvements

  • Improved automatic recovery after VM reboot during an active session
  • Fixed an issue where the randomized session runtime did not restart automatically after reboot
  • Strengthened session watchdog to correctly restore the active runtime
  • Improved temporary session persistence for the duration of the slot
  • Added automatic recovery mechanism when the session relay starts without full context
  • Improved continuity of logs, Analyst Notes, and telemetry after reboot during a session


🧬 ReverseLab VMs
  • Updated third-party software
  • Updated reverse engineering tools

🧪 PentestLab VMs
  • Updated third-party software


🖥️ RxCloud Guacamole
  • Applied latest Debian package updates
  • Security patch applied for:
    • CVE-2026-31431 (Copy Fail)
    • Local privilege escalation (user → root) via AF_ALG + splice syscall

🛡️ RxCloud Alpine Fallback (Local Telemetry)
  • Applied latest Linux package updates
  • Security patch applied for:
    • CVE-2026-31431 (Copy Fail)


📝 Notes
  • VM video recording feature is still under development
 
  • Like
Reactions: simmerskool and harlan4096
🧾RxCloud CyberLab – Dashboard Update Changelog

📅Date: 2026-05-05
🛠Maintenance duration: 30 minutes


🖥️ RxCloud Dashboard

Version: 0.0.5.3_Stable

Hyq8jFv.png

➤ Added
  • Introduced AI-ready report export for private reports
  • Private reports now include a compact Download menu
  • Download menu options:
    • Download JSON
    • AI Export
  • AI Export generates a local LLM-ready analysis prompt from the report JSON
  • No external AI API calls are made during export (fully local generation)

➤ Improvements
  • Improved private report action layout for a cleaner Dashboard experience
  • Added RxCloud Atlas introduction to RxBot Guided Tour
  • RxBot now explains how Atlas helps visualize:
    • Telemetry relationships
    • Execution chains
    • Suspicious nodes
  • Improved overall API performance


📝 Notes
  • VM video recording feature still under development
  • Roadmap defined for scaling RxCloud CyberLab:
    • New dedicated server deployment
    • More VM capacity
    • Upcoming Linux VM support
 
  • Like
Reactions: simmerskool and harlan4096
🧾RxCloud CyberLab – Update Changelog

📅Date: 2026-05-06
🛠Maintenance duration: 2h30


🤖 RxLab Agent

  • Improved reliability after VM reboot during an active session
  • Fixed a rare case where telemetry export could fail to trigger at end-of-session
  • Improved automatic recovery of the active session runtime after reboot
  • Strengthened end-of-session mechanism to reduce report loss risks
  • Improved internal technical logs for easier diagnostics without exposing sensitive information


🔔 RxLab Notify

  • Minor stability adjustments


🛡️ Back End Security Hardening

  • Hardened logout flow to prevent forced logout via external links or images
  • Dashboard and Atlas logout now use protected POST-only flow
  • Private reports debug mode no longer exposes internal server information in production
  • Strengthened machine authentication for VM deposit APIs
  • Deposit check, download and ACK endpoints now consistently reject unauthorized machine requests
  • Password reset tokens are no longer stored in clear text
  • Email verification tokens are no longer stored in clear text
  • Reset and verification links remain functional while token storage is now hash-based
  • Improved token comparison using safer server-side verification


📝 Notes
  • VM video recording feature is still under development
 
  • Like
Reactions: simmerskool and harlan4096
🧾RxCloud CyberLab – Update Changelog

📅Date: 2026-05-08
🛠Maintenance duration: 3h30


🖥️ RxCloud Dashboard

Version: 0.0.5.5_Stable

2iwPcX2.png
fmHtyCu.png

➤ Added
  • Added Live VM Preview for active lab sessions
  • VM Preview now opens as a movable floating panel
  • Preview automatically appears when a lab session becomes ready
  • Preview automatically disappears when no active slot is available
  • Added VM recovered notifications inside the internal VM monitoring panel

➤ Improvements
  • Improved preview refresh behavior:
    • Previous frame remains visible until the next frame is fully ready
  • Added safer preview handling to prevent broken or partial images during refresh
  • Improved backend safety around VM preview generation and caching
  • Minor UI polish for the session preview experience


📝 Notes
  • VM video recording will become available once RxCloud CyberLab scales further
  • A dedicated video encoding worker is already planned in the roadmap
  • Core architecture is already in place and local tests are successful
 
  • Like
Reactions: harlan4096 and simmerskool
🧾RxCloud CyberLab – Update Changelog

📅Date: 2026-05-11
🛠Maintenance duration: 2h30


🖥️ RxCloud Dashboard

Version: 0.0.5.6_Stable

KrX5zuq.png

IraJXTs.png

➤ Profile Improvements
  • Improved badge display inside the Profile modal
  • Only the first 6 badges are shown by default for a cleaner layout
  • Added View more / View less controls to expand or collapse additional badges

➤ RxBot Assistant — Major Upgrade
  • RxBot is now an interactive local assistant for RxCloud CyberLab
  • Users can now ask questions directly from the Dashboard
  • Added quick suggestions for:
    • ReverseLab
    • Atlas
    • Reports
    • AI Export
    • Analyst Notes
  • Responses are limited strictly to RxCloud CyberLab topics
  • Added a local knowledge base for platform guidance
  • No external AI/API calls are used
  • Improved chat-style UI with local “thinking” feedback
  • Guided Tour button remains available and unchanged


📝 Notes
  • Roadmap update:
    • Deployment of a second dedicated server is still under study and in progress
 
  • Like
Reactions: simmerskool and harlan4096
Hello everyone !

Today, RxCloud CyberLab has officially reached 200+ users! 🥳

What started as a personal cybersecurity project has grown into a real community of analysts, reverse engineers, malware researchers and curious security enthusiasts from around the world.

I honestly didn’t expect the platform to grow this fast, and I want to sincerely thank everyone who:
  • tested the platform,
  • reported bugs,
  • shared feedback,
  • submitted samples,
  • suggested ideas,
  • and supported the project since the beginning.
RxCloud CyberLab continues to evolve step by step with new improvements, smarter analysis features, better reports, Atlas intelligence features and many ideas still planned for the future.

The goal remains the same:
Provide accessible, real-world malware analysis and cybersecurity research environments directly from the cloud.

Thank you again to all 200+ users for being part of this adventure ❤️

- RoxasDev
 
  • Like
  • Applause
  • +Reputation
Reactions: Behold Eck, Shadowra and harlan4096
RoxasDev said:
Hello everyone !

Today, RxCloud CyberLab has officially reached 200+ users! 🥳

What started as a personal cybersecurity project has grown into a real community of analysts, reverse engineers, malware researchers and curious security enthusiasts from around the world.

I honestly didn’t expect the platform to grow this fast, and I want to sincerely thank everyone who:
  • tested the platform,
  • reported bugs,
  • shared feedback,
  • submitted samples,
  • suggested ideas,
  • and supported the project since the beginning.
RxCloud CyberLab continues to evolve step by step with new improvements, smarter analysis features, better reports, Atlas intelligence features and many ideas still planned for the future.

The goal remains the same:
Provide accessible, real-world malware analysis and cybersecurity research environments directly from the cloud.

Thank you again to all 200+ users for being part of this adventure ❤️

- RoxasDev
Click to expand...
-1 you didn't let me in iirc :confused:
 
  • Like
Reactions: RoxasDev

You may also like...