New Update Introducing RxCloud CyberLab

[RoxasDev]

RxCloud CyberLab – Update Changelog

Date: 2026-09-20
🛠 Maintenance duration: 24 hours

---

RxCloud Dashboard

Version: 2.0.2 / Anniversary_Stable

• Improved overall RxCloud CyberLab platform performance
• Optimized graphical rendering for Intel and AMD integrated GPUs
• Improved performance on older generations of Intel and AMD graphics hardware
• Reduced graphical overhead on lower-end systems while preserving the Anniversary Update visual experience

---

CoreLab Controller

• Significantly improved VM allocation performance
• Resolved a recent performance issue that could cause VM allocations to take approximately 60 seconds
• VM allocation is now processed significantly faster
• Improved the robustness and reliability of the slot scheduler
• Optimized internal slot processing and orchestration

---

RxCloud Firewall – PfSense

• Updated firewall rules to support the new RxGeo Egress infrastructure
• Adjusted network policies for dynamic VM egress routing

---

Apache Guacamole

• Applied the latest available security updates
• Performed post-update service validation

---

Introducing RxGeo Egress

Spoiler: Preview

RxGeo Egress is now available across Windows, Linux and Android lab environments.

RxGeo Egress allows researchers to change the outbound network location of their virtual machine in real time by selecting another country from the available egress locations.

The feature is integrated directly into RxLab Agent and does not require restarting the VM or the active lab session.

RxLab Agent – Windows

• Added full RxGeo Egress support
• Egress locations can be changed in real time directly from the RxLab Agent interface
• The RxGeo Egress controls are available in the lower-left area of the agent interface

RxLab Agent – Linux

• Added full RxGeo Egress support
• Added a dedicated RxGeo Egress network shortcut to the desktop
• The shortcut opens the local RxGeo Egress management interface
• Researchers can select and change the VM's outbound country directly from this interface

RxLab Agent – Android

• Added full RxGeo Egress support
• RxGeo Egress can be accessed by opening RxLab Agent from the Android notification area
• Researchers can select another available outbound country directly from the agent interface

Egress Health & Automatic Failover

• Proxy health and latency can be monitored directly from all three RxLab Agent interfaces
• RxLab Agent continuously verifies the availability of the selected egress proxy
• If the proxy becomes unavailable, RxLab Agent automatically disconnects it
• The VM automatically falls back to its direct network route to prevent network timeouts and loss of connectivity
• Changing the VM egress location does not interrupt the active Guacamole session, as Guacamole connectivity uses a separate network path

---

RxLab Agent Telemetry

• Improved telemetry collection robustness across Windows, Linux and Android agents
• Fixed rare edge cases where telemetry events could fail to reach the RxCloud infrastructure
• Improved overall telemetry reliability during active research sessions

---

Notes

• This update introduces RxGeo Egress, expanding the networking capabilities available directly inside RxCloud CyberLab virtual machines
• The next update will focus on the RxCloud CyberLab Android application
• Research and development will also continue on the upcoming ResearchLab environment

 

[RoxasDev]

RxCloud CyberLab – Dashboard Update Changelog

Date: 2026-09-24
🛠 Maintenance duration: 60 minutes

---

RxCloud Dashboard

Version: 2.0.3_Anniversary_Stable

Spoiler: Preview

Visual Improvements

• Improved the overall visual consistency of the Dashboard
• Refined several interface elements to better match the Anniversary visual identity
• Replaced remaining interface emojis with dedicated SVG icons
• Improved visual consistency across Dashboard components and controls

Performance & Stability

• Optimized overall Dashboard performance
• Improved frontend responsiveness
• Strengthened frontend robustness and reliability
• Applied additional optimizations to improve the overall user experience

---

Notes

• This update focuses primarily on visual refinements to the Dashboard and the overall RxCloud CyberLab platform
• These improvements continue the visual and technical refinement of the Anniversary Update experience

 

[RoxasDev]

RxCloud CyberLab — What's Coming Next?​

Big things are happening behind the scenes at RxCloud CyberLab!

We're excited to share a development update featuring two major projects: RxRemote and our upcoming ResearchLab environment.

Introducing RxRemote — Internal Beta​

Spoiler: Preview

We're currently developing RxRemote, our own remote desktop solution designed to eventually replace Apache Guacamole across the RxCloud CyberLab platform.

RxRemote has officially entered internal beta testing, and our first tests have successfully demonstrated remote desktop streaming and interactive control directly through a web browser!

Features and Development Goals​

• Native RDP Integration: A custom architecture powered by FreeRDP.
• Performance Optimization: Reduced CPU usage, lower bandwidth consumption, and improved responsiveness.
• Dynamic Resolution: Change your virtual machine's display resolution directly from the WebClient without reconnecting, whenever supported.
• Android Multitouch Support: Touchscreen and multitouch interaction for our Android virtual laboratories.
• Modern WebClient: A responsive interface designed for desktop and mobile devices.
• Secure Session Management: Secure authentication and integration with our existing infrastructure.
• VM Recording: Planned support for recording virtual machine sessions.

Our current development priorities include improving stability, optimizing performance, implementing dynamic resolution management, and expanding remote interaction capabilities.

Apache Guacamole will remain available until RxRemote is thoroughly tested and ready for production.

---

ResearchLab — A New Laboratory Environment!​

And that's not all!

We're also preparing an entirely new laboratory environment: RxCloud ResearchLab.

ResearchLab is designed to provide researchers with disposable, isolated virtual workstations for malware investigation, threat intelligence, OSINT, and security research.

Node4 — Ordered and Being Prepared!​

Our new dedicated server, Node4, has officially been ordered and is currently being prepared for the upcoming ResearchLab infrastructure.

We're planning to provide both Windows and Linux research environments.

Upcoming ResearchLab Features​

• Isolated Research Workstations: Dedicated disposable virtual machines for security research.
• Windows and Linux Environments: Different operating systems to support a variety of research workflows.
• RxLab Agent — ResearchLab Mode: A dedicated operating mode for our existing Windows and Linux agents.
• Secure Clipboard Gateway: A controlled clipboard mechanism specifically designed for ResearchLab, allowing researchers to transfer permitted text securely without enabling unrestricted clipboard sharing.
• Research Tools: Workstations designed to facilitate investigations using platforms such as VirusTotal, ANY.RUN, Hybrid Analysis, and other security research resources.

ResearchLab will complement our existing laboratories rather than replace them.

---

Current Development Status​

RxRemote: Internal beta testing. Core remote desktop functionality is operational, with stability and performance improvements underway.

Android Multitouch: Planned as part of RxRemote's expanded interaction capabilities.

Secure Clipboard Gateway: Planned specifically for ResearchLab, with security and isolation as key design requirements.

Node4: Ordered and currently being prepared.

RxLab Agent ResearchLab Mode: Upcoming development for Windows and Linux.

These features are still under development, and some details may change as testing progresses.

There is currently no confirmed public release date.

Our mission remains unchanged: providing a free, accessible, and powerful cybersecurity research platform.

More development updates are coming soon!

Welcome to the Arena.

— RoxasDev | RxCloud CyberLab

 

[RoxasDev]

RxCloud CyberLab – Update Changelog

Date: 2026-10-01
🛠 Maintenance duration: 60 minutes

---

RxLab Agent Linux – HOTFIX

• Fixed an edge case where Linux Agent telemetry could fail to report entirely, or could be reported incorrectly or incompletely
• Strengthened the telemetry fallback mechanism to improve reliability when the primary collection path encounters an issue
• Improved overall telemetry reporting robustness on Linux environments

---

Notes

• This hotfix specifically addresses a telemetry reporting issue affecting RxLab Agent on Linux
• No changes were made to the Windows or Android agents as part of this maintenance

 

[RoxasDev]

500 Users

Another milestone reached.

RxCloud CyberLab has officially welcomed its 500th registered user.

The platform keeps growing, the infrastructure keeps evolving, and the roadmap certainly isn't getting any shorter.

Thank you for continuing to use, test, and challenge the platform.

500 reached. Next chapter loading.

Welcome to the Arena.

— RoxasDev
RxCloud CyberLab

 

[RoxasDev]

RxCloud CyberLab – Security Update Changelog

Date: 2026-10-02
🛠 Maintenance duration: 60 minutes

---

Apache Infrastructure & Nodes

• Updated Apache HTTP Server to 2.4.69 across the affected RxCloud infrastructure
• Applied the latest Apache security fixes addressing multiple CVEs
• Updated PHP to the latest deployed version
• Applied the latest associated runtime and package updates
• Performed post-update compatibility and regression testing
• No regressions detected following the upgrade

Apache 2.4.69 Security Update

Apache HTTP Server 2.4.69 includes multiple security fixes and additional hardening improvements affecting several components and modules.

Official Apache 2.4.69 changelog:

https://downloads.apache.org/httpd/CHANGES_2.4.69

---

Notes

• This maintenance release primarily focuses on infrastructure security
• The affected RxCloud services and nodes were validated after deployment
• All services are operating normally following the security update

 

[RoxasDev]

RxCloud CyberLab – Update Changelog

Date: 2026-10-12
🛠 Maintenance duration: 3h30
Dashboard version: 2.0.4 / Anniversary_Stable

---

Introducing RxRemote – Native Remote Desktop Experience

We are excited to introduce RxRemote, a new native remote access solution developed specifically for RxCloud CyberLab.

RxRemote replaces the previous Apache Guacamole-based remote access system with a dedicated architecture designed to provide greater control, improved integration, and a more seamless remote desktop experience directly from your browser.

Spoiler: Preview

Native Remote Desktop Engine

• Introduced a dedicated remote access architecture powered by native protocol workers
• Added RDP support for Windows and Linux virtual machines
• Added VNC support for compatible virtual machines, including Android environments
• Remote desktop access is available directly through the RxCloud web interface without additional client software

Enhanced Remote Experience

• Redesigned the remote desktop interface with a modern, responsive layout
• Added dynamic resolution management for supported RDP sessions
• Added multiple display modes and fullscreen support
• Improved keyboard and mouse interactions
• Introduced dedicated remote controls and real-time session telemetry

Secure Clipboard

• Introduced manual, policy-controlled clipboard transfers
• Added the ability to send text directly to a virtual machine
• Added support for retrieving text from compatible virtual machines and copying it to the local clipboard
• Added bidirectional clipboard support for Windows RDP and Linux XRDP
• Introduced configurable clipboard permissions and transfer size limits
• Added a dedicated floating clipboard panel integrated into Remote Controls

Native Session Recording

• Introduced a dedicated native session recording pipeline
• Added H.264 video encoding with MP4 containers
• Recording supports resolutions up to 1080p at 15 FPS
• Implemented an independent recording architecture integrated into RxRemote

Security & Session Management

• Introduced a dedicated Gateway and Worker architecture
• Implemented controlled session initialization and lifecycle management
• Added certificate fingerprint verification for RDP connections
• Introduced administrative policies for clipboard access and remote session features
• Integrated RxRemote with existing RxCloud CyberLab infrastructure and security mechanisms

Administration & Monitoring

• Added dedicated RxRemote administration and configuration capabilities
• Introduced session telemetry and connection status indicators
• Improved diagnostic logging and session monitoring
• Centralized remote access configuration and management

RxRemote Notes

• RxRemote represents a major evolution of remote access within RxCloud CyberLab
• The new native architecture replaces the previous Guacamole-based implementation and establishes a foundation for future improvements
• Feature availability may vary depending on the virtual machine operating system, remote protocol and administrative configuration

---

RxCloud Dashboard

Version: 2.0.4 / Anniversary_Stable

• Updated Dashboard APIs to support the new RxRemote architecture
• Integrated RxRemote into the Dashboard remote access experience
• Adapted remote session interactions and controls to the new native infrastructure

---

CoreLab Controller

• Updated CoreLab Controller to support RxRemote integration
• Added management of remote session tokens
• Integrated real-time communication with RxRemote Gateway and Workers
• Adapted session orchestration to the new native remote access architecture

---

RxCloud Firewall – PfSense

• Updated firewall rules to support RxRemote connectivity and infrastructure communication

---

Apache Guacamole – Retirement

• The Apache Guacamole virtual machine has been shut down
• All remote lab sessions now use the native RxRemote system
• RxRemote officially replaces Guacamole as the remote access solution for RxCloud CyberLab

---

Hypervisors

• Updated the hypervisors to the latest available version of Oracle VirtualBox

---

Lab Virtual Machines

Windows ReverseLab

• Updated the reverse engineering software stack
• Updated third-party applications

Windows PentestLab

• Updated third-party applications

Linux ReverseLab – REMnux

• Updated the reverse engineering software stack
• Updated third-party applications

Kali Linux

• Updated third-party applications

Ubuntu PentestLab

• Updated third-party applications

---

What's Next? – ResearchLab

• The next major update will focus on integrating ResearchLab, a new type of research environment within RxCloud CyberLab
• More information about ResearchLab will be shared as development progresses

---

With RxRemote, RxCloud CyberLab moves beyond its previous third-party remote desktop solution and introduces a native system developed specifically for the platform.

Goodbye Guacamole. Welcome RxRemote.

Welcome to the next generation of remote access in RxCloud CyberLab.

 

[RoxasDev]

RxCloud CyberLab – Infrastructure & Network Stability Update​

Date: October 13, 2026

A new infrastructure maintenance update has been completed across the RxCloud CyberLab Node cluster.

Network Connectivity Improvements​

During the deployment and troubleshooting of Node4, an underlying WireGuard routing configuration issue was identified that also affected existing Nodes.

This issue could cause intermittent connectivity failures when virtual machines attempted to reach certain external IP addresses, websites, or Linux package repositories.

Fixes & Improvements​

• WireGuard Routing: Corrected IPv4 AllowedIPs configurations to ensure complete destination coverage through MEGA VPN tunnels.
• Linux VM Connectivity: Resolved intermittent issues affecting access to Linux package repositories and external services.
• Node2, Node3 & Node4: Restored consistent connectivity across previously unreachable destinations.
• Firewall Infrastructure: Updated and synchronized network configurations across the Node cluster.
• Network Reliability: Improved the consistency of outbound connectivity for virtual machines using the VPN infrastructure.

Result​

The affected connectivity issues have been resolved, and the updated firewall configurations are ready for backup.

This maintenance update improves the overall reliability of the RxCloud CyberLab infrastructure and provides a more consistent networking experience across virtual machines.

Welcome to the Arena.

— RoxasDev
RxCloud CyberLab

 

[RoxasDev]

🛈 RxCloud CyberLab — Something BIG Is Coming!​

Hey everyone!

A major update for RxCloud CyberLab is currently in development, and this one is going to bring some significant improvements across the entire platform!

Here's a sneak peek at what's coming:

Introducing ResearchLab
A brand-new research environment designed for advanced cybersecurity investigations, with dedicated Windows and Linux virtual machines.

RxCloud Atlas — Major Improvements
Our intelligence and forensic analysis platform is being extensively refined, with clearer evidence attribution, improved visualizations, and more detailed insights into session activity.

Completely Reworked PDF & JSON Reports
More accurate forensic analysis, better structured evidence, improved malware behavior reporting, clearer process timelines, and significantly improved PDF readability and performance.

Enhanced Windows, Linux & Android Agents
Improvements to telemetry collection, event correlation, detection accuracy, and forensic evidence handling.

Smarter Analysis Across CyberLab Environments
We're also working toward more specialized analysis for malware research, antivirus protection testing, Linux environments, penetration testing activities, and Android APK analysis.

And that's not all! Several additional improvements are being prepared behind the scenes.

A lot of development, testing, and forensic validation is going into this update to make RxCloud CyberLab more powerful, accurate, and useful for security researchers.

No release date to announce just yet — development and validation are still underway.

Stay tuned!

RoxasDev
RxCloud CyberLab

 

[RoxasDev]

[Security Advisory] RxCloud CyberLab – Scheduled Emergency Maintenance​

Hello everyone,

We would like to inform the community that RxCloud CyberLab is scheduling emergency security maintenance following the disclosure of two critical vulnerabilities affecting PHP.

Our infrastructure currently operates on PHP 8.5.11, and we are closely monitoring the official PHP security announcements for the release of the corresponding patches.

Maintenance objectives:

• Deploy the latest PHP security fixes as soon as they become available.
• Verify the security and compatibility of our infrastructure.
• Perform post-update validation of all critical platform services.
• Ensure the continued stability and reliability of RxCloud CyberLab.

Temporary service interruptions may occur during the maintenance window.

At this stage, this is a precautionary security measure, and we have no confirmed indication that our infrastructure has been compromised.

We take infrastructure security seriously and will provide further updates as the situation develops.

Thank you for your patience and understanding.

RoxasDev
RxCloud CyberLab

 

[RoxasDev]

RxCloud CyberLab — Infrastructure Maintenance Completed

Hello everyone!

We have successfully completed another infrastructure maintenance session for RxCloud CyberLab.

This update includes the deployment of PHP 8.5.12 across the relevant Windows server environments, covering the platform's backend infrastructure and associated services.

The maintenance was primarily focused on:

• Updating PHP runtime environments.
• Maintaining compatibility across backend components.
• Keeping the infrastructure up to date.
• Preparing the platform for future improvements.

The maintenance is now complete, and normal operations have resumed.

Thank you for your continued support!

RoxasDev
RxCloud CyberLab

 

[RoxasDev]

RxCloud CyberLab – Major Platform Update

Introducing ResearchLab & Enhanced Forensic Intelligence

Date: October 24, 2026
Maintenance duration: Several hours

---

Introducing ResearchLab – Ephemeral Forensic Workstations

We are excited to introduce ResearchLab, a dedicated forensic research environment integrated into RxCloud CyberLab.

ResearchLab provides temporary, cloud-hosted workstations designed for cybersecurity investigations, static analysis, digital forensics, and threat intelligence research.

Spoiler: Preview

Dedicated Research Infrastructure

ResearchLab operates on Node4, hosted by OVHcloud in Roubaix, France.

The infrastructure includes four dedicated virtual machines:

• 2 × Windows 11 forensic workstations
• 2 × Kubuntu 26.04 workstations with KDE Plasma 6
• Browser-based access through RxRemote, without additional remote desktop software

Dedicated Forensic Collection

ResearchLab introduces an independent evidence collection and processing workflow, separate from traditional malware analysis and antivirus testing environments.

Supported capabilities include:

• File-system activity observations
• Sample imports and artifact metadata
• Static analysis results
• Browser history research
• Session lifecycle information
• Collection gaps and error reporting
• RxGeo network context

The collection architecture distinguishes observed evidence from technical context and incomplete or unavailable data.

---

Introducing Atlas Research

A dedicated Research Lab workspace is now available within Private Atlas.

Forensic Investigation Dashboard

The new investigation interface includes:

• Overview: Session activity and evidence composition
• Timeline: Chronological research observations
• Samples & Artifacts: Imported files and associated evidence
• Observations: Collected research activity
• Browser & RxGeo: Browser research and network context
• Collection Quality: Evidence gaps and collection limitations
• Reports: Access to research reporting

Evidence Transparency & Attribution

Atlas Research clearly distinguishes between:

• Observed activity
• Static analysis results
• Technical context
• Partial or unavailable collection

Browser history records retain their attribution and supporting evidence.

RxGeo context is presented separately from verified network activity to avoid unsupported conclusions about actual network connections.

Collection Quality Monitoring

Research sessions provide improved visibility into evidence completeness, collection gaps, errors, and partial observations.

This allows researchers to understand which information was collected and which findings remain uncertain.

---

Enhanced Reports & Atlas Intelligence

The existing analysis laboratories also benefit from improvements to evidence processing, reporting, and Atlas intelligence.

Supported environments:

• ReverseLab – Windows
• ReverseLab – Linux
• ReverseLab – Kali Linux, where applicable
• PentestLab – Windows
• PentestLab – Ubuntu/Linux
• Android Lab

Improvements:

• More consistent laboratory evidence processing
• Better organization of investigation data
• Clearer evidence attribution
• Improved handling of incomplete observations
• Greater consistency between generated reports and Atlas intelligence
• More reliable presentation of technical findings

ResearchLab maintains its own dedicated investigation pipeline rather than operating as another traditional Lab-Aware profile.

---

RxRemote Integration

• Integrated ResearchLab workstations with the existing RxRemote infrastructure
• Enabled browser-based remote access to supported forensic workstations
• Provided supported session controls, display management, and session telemetry

---

ResearchLab Reliability Improvements

• Improved resilience against temporary API communication failures
• Transient connectivity issues no longer automatically cause permanent collector termination
• Evidence collection remains subject to valid session allocation and authorization

---

Infrastructure & Hypervisor Updates

• Applied the latest Microsoft security KB updates to the hypervisors
• Updated Oracle VirtualBox to the latest available release

---

Notes

This major release introduces a new forensic research environment while improving investigation workflows across the existing RxCloud CyberLab laboratories.

RxCloud CyberLab continues to evolve into a unified platform for malware analysis, security testing, digital forensics, and cybersecurity research.

ResearchLab. Investigate beyond the sandbox.

 

[RoxasDev]

RxCloud CyberLab – Update Changelog

RxLab Reports – Forensic PDF Redesign & Enhanced Analyst Experience

Date: October 24, 2026
Maintenance duration: 1h30

---

RxLab Reports – Complete PDF Redesign

Spoiler: Preview

We are introducing a complete visual redesign of RxLab Reports, bringing a cleaner, more professional presentation to forensic PDF reports across RxCloud CyberLab.

• Redesigned forensic PDF reports with a modern, consistent visual identity
• Introduced a new first-page layout with improved typography and refined cybersecurity-themed styling
• Improved document structure, spacing, table alignment, and overall readability
• Applied the redesigned reporting experience across supported ReverseLab, PentestLab, and AndroidLab profiles

Executive Summary & Risk Indicators

• Introduced dedicated visual indicators for Risk Score, Classification, Threat Level, and Confidence
• Redesigned verdict presentation with a highlighted executive summary panel
• Improved the visual hierarchy of critical analysis findings

Key Metrics & Reputation Analysis

• Redesigned metric cards with clearer status indicators and improved spacing
• Improved metric descriptions for faster interpretation
• Enhanced the presentation of reputation information and supporting analysis results

Session Details & Forensic Coverage

• Integrated laboratory session information directly into the first page to reduce unnecessary empty space
• Improved the presentation of VM information, laboratory type, platform, agent version, and session timestamps
• Introduced a compact forensic evidence overview when supported by available session data and page space

---

PDF Layout, Pagination & Navigation

Improved Document Layout

• Refined typography, table alignment, column widths, and visual consistency
• Improved automatic page breaks and repeated table headers across multiple pages
• Reduced orphaned headings and improved readability in extensive forensic tables

Table of Contents & Internal Navigation

• Rebuilt the table of contents with updated page references and clearer section hierarchy
• Improved internal PDF links and bookmarks for faster navigation
• Refined process analysis section headers and navigation throughout detailed forensic appendices

Expert Appendix & Process Analysis

• Improved process identification within detailed forensic appendices
• Introduced clearer visual separation between individual process activity blocks
• Improved navigation through extensive process analysis results

Android Reports – Bookmark Fix

• Fixed an issue where Android report PDF bookmarks could fail to navigate to their corresponding sections

---

Compatibility & Data Integrity

• Applied the redesigned PDF experience across supported ReverseLab, PentestLab, and AndroidLab reporting profiles
• Preserved existing forensic evidence, analysis results, risk scores, and report data
• Maintained compatibility with existing reporting workflows

---

Notes

• This update focuses exclusively on PDF presentation, pagination, navigation, and analyst experience
• Existing detection engines, scoring logic, and JSON report formats remain unchanged
• The redesign improves how forensic findings are presented without modifying the underlying analysis results

RxLab Reports – Clearer evidence. Better navigation. A more professional forensic experience.

 

[RoxasDev]

RxCloud CyberLab – Update Changelog

Date: October 26, 2026
Maintenance duration: 60 minutes

RxRemote – Improved Mouse Cursor Experience & Reliability

---

RxRemote – Native Mouse Cursor Support

This update introduces improved mouse cursor handling within RxRemote, providing a more natural and responsive remote desktop experience when interacting with Windows and Linux virtual machines.

Dynamic Mouse Cursors

• Introduced native support for dynamic mouse cursor shapes in Windows and Linux remote sessions
• Improved cursor behavior to better reflect the actions and interface elements of the remote operating system
• Enhanced overall mouse interaction for a more seamless remote desktop experience

Improved Window Resizing

• Resize arrows now appear correctly when hovering over window edges and corners
• Improved cursor feedback when resizing windows within remote desktop sessions

Enhanced Cursor Interactions

• Improved cursor rendering for text selection and text input areas
• Clickable links now display the appropriate pointer cursor
• Loading indicators and other contextual cursor shapes are displayed correctly
• Improved consistency between native operating system cursor behavior and the browser-based remote interface

Enhanced Display Compatibility

• Improved cursor positioning and visibility across different screen resolutions
• Enhanced compatibility with supported display modes
• Refined cursor behavior during remote desktop interactions

---

Secure Clipboard – Windows 11 ResearchLab Fix

• Fixed an issue affecting Secure Clipboard functionality in Windows 11 ResearchLab sessions
• Improved clipboard compatibility and reliability within the RxRemote environment

---

Stability & Reliability Improvements

• Applied additional compatibility improvements for remote desktop sessions
• Enhanced overall RxRemote reliability
• Improved consistency of mouse interactions across supported virtual machine environments

---

Notes

• This update focuses on mouse cursor handling, remote desktop usability, Secure Clipboard compatibility, and session reliability
• The update is currently undergoing final testing before deployment
• Deployment will follow once the final validation phase is complete

 

[RoxasDev]

RxCloud CyberLab – Update Changelog

Date: October 27, 2026
Maintenance duration: 60 minutes

---

RxAtlas – Complete Behavior Map Redesign

Spoiler: Preview

We are introducing a complete interface redesign of My Private Behavior Map within My Intelligence.

The updated experience provides a more intuitive, modular, and responsive workspace for exploring forensic evidence, analyzing relationships, and investigating behavioral activity.

Redesigned Graph Workspace

• Completely redesigned the interactive graph workspace with a modern, analyst-focused interface
• Improved navigation, node selection, and contextual evidence exploration
• Refined the organization and accessibility of investigation controls
• Improved usability across desktop, tablet, and mobile displays

Enhanced Graph Navigation

• Added dedicated Zoom In, Zoom Out, Fit to View, Center, and Reset View controls
• Introduced a live zoom indicator
• Improved node selection and navigation between related evidence
• Added keyboard shortcuts and enhanced navigation accessibility

Investigation & Exploration Modes

• Improved access to Overview, Analyst, Execution Chain, and Raw modes
• Introduced clearer active-state indicators for each exploration mode
• Improved transitions between investigation views

---

Advanced Evidence Filtering & Controls

Evidence Categories

• Redesigned all nine evidence category controls
• Added independent visibility toggles and category counters
• Introduced Select All and Clear All actions for faster filtering
• Improved feedback when no evidence categories are selected

🎛Investigation Filters & Presets

• Introduced accessible filter switches with clearer descriptions
• Improved priority and density sliders with live values and reset controls
• Added analyst presets for quickly configuring investigation views
• Introduced Restore Defaults to simplify workspace configuration

---

Contextual Node Inspector & Focus Mode

Node Inspector

• Introduced a contextual inspection panel displaying available node metadata, confidence, priority, and relationships
• Added clickable neighboring nodes for faster exploration of connected evidence
• Improved navigation between related forensic observations

Focus Mode & Graph Visualization

• Improved focused investigations with related-node highlighting
• Added contextual focus controls and previous-view restoration
• Introduced Dim Unrelated to emphasize selected nodes and their connections
• Improved node distribution and label positioning to reduce visual clutter
• Reduced overlapping node pairs by approximately 80% in benchmark testing

---

Graph Performance & Monitoring

Visualization Performance

• Improved initial rendering performance in Raw mode
• Accelerated subsequent exploration mode switching through caching
• Optimized graph layout and evidence visualization

Graph Status & Legend

• Added detailed counters for visible nodes, relationships, loaded data, and active filters
• Introduced a collapsible legend explaining graph elements and visual representations
• Improved overall visibility into the current graph state

---

Reliability & Data Integrity

• Preserved existing graph relationships and forensic evidence
• Maintained existing confidence values and Atlas scoring
• Preserved all existing investigation modes and underlying forensic data

---

Notes

• This update focuses on graph usability, visualization performance, and the overall analyst experience
• Existing forensic evidence, investigation modes, and Atlas scoring remain unchanged
• The redesign improves how behavioral intelligence is explored without modifying the underlying analysis results

 

[RoxasDev]

RxCloud CyberLab – Update Changelog

Date: October 28, 2026
Maintenance duration: 60 minutes

Dashboard version: 2.0.7 / RxRelease_Stable

Spoiler: Preview

---

RxCloud Dashboard – Intelligence Reports Redesign

This update introduces a complete redesign of the Intelligence Reports management interface, providing a more intuitive, organized, and efficient experience for browsing and managing forensic reports.

Modern Report Explorer

• Replaced the traditional report list with a modern, compact, and organized report explorer
• Improved readability, spacing, and visual consistency with the RxCloud CyberLab Dashboard
• Refined the overall user interface with additional visual polish
• Optimized the report explorer for different screen sizes and responsive layouts

Interactive Calendar & Date Navigation

• Introduced an interactive calendar with monthly navigation
• Added daily report counters for a clearer overview of report activity
• Enabled date-based filtering for faster access to reports from specific periods
• Automatically grouped reports by date for easier browsing
• Improved chronological sorting and navigation

---

Advanced Search & Filtering

Report Search

• Introduced report searching by filename, session, virtual machine, laboratory, and date
• Improved report discovery through a dedicated search interface

Laboratory & Risk Filters

• Added laboratory filters to quickly narrow down reports by analysis environment
• Introduced risk-level filters for more efficient investigation workflows
• Improved filtering and sorting controls for easier report navigation

Pagination & Organization

• Introduced configurable page sizes for report browsing
• Added direct page selection for faster navigation
• Improved pagination behavior and report organization

---

Report Details & Management

Enhanced Report Information

• Improved visibility of laboratory information and report metadata
• Enhanced the presentation of threat scores and risk levels
• Refined report details for faster identification and review

Redesigned Report Actions

• Redesigned contextual action menus for report management
• Improved access to PDF and JSON downloads
• Improved access to AI Export functionality
• Refined report deletion controls

---

Compatibility & Data Integrity

• Preserved all existing PDF and JSON reports
• Maintained existing report storage and user permissions
• Preserved forensic report content and underlying analysis results

---

Notes

• This update focuses on report discovery, organization, management, and Dashboard usability
• Existing forensic report content, analysis results, and report formats remain unchanged
• The redesigned interface improves how reports are accessed and managed without modifying their underlying data

 

[RoxasDev]

RxCloud CyberLab – Update Changelog

Date: October 31, 2026
Maintenance duration: 1h30

Dashboard version: 2.0.8 / RxRelease_Stable

Spoiler: Preview

---

RxRemote – Unified VM Recordings

We are introducing a new recording export feature within the RxCloud CyberLab Dashboard, providing greater flexibility when downloading and managing virtual machine session recordings.

Users can now download individual recording segments or combine multiple segments into a single MP4 file directly from the VM Record interface.

Individual Segment Downloads

• Download each recorded MP4 segment separately
• Access individual recording segments directly from the VM Record interface
• Preserve the existing segment-based recording workflow

Full Recording Export

• Combine multiple recording segments into a single downloadable MP4 file
• Prepare complete session recordings directly from the Dashboard
• Simplify the export of longer virtual machine sessions
• Eliminate the need to manually combine recording segments after downloading

One-Click Recording Preparation

• Introduced one-click preparation for complete session recordings
• Added automatic export status updates during recording preparation
• Enabled direct download once the combined recording is ready

---

Recording Integrity & Quality

Original Recordings Preserved

• Original MP4 recording segments remain available after a full recording export
• Users can continue downloading individual segments independently
• The export process preserves the existing source recordings

Lossless Segment Merging

• Recording segments are combined without unnecessary video re-encoding
• Original encoded video quality is preserved during the merging process
• Avoids additional quality degradation associated with re-encoding

---

RxCloud Dashboard

Version: 2.0.8 / RxRelease_Stable

• Integrated unified recording exports into the existing VM Record interface
• Added recording preparation and export status indicators
• Improved access to individual and complete session recordings

---

Notes

• This update focuses on improving VM session recording exports and download flexibility
• Users can choose between individual MP4 segments and complete session recordings
• Original recording segments remain available after export
• Video merging does not require re-encoding

 

[RoxasDev]

RxCloud CyberLab – Update Changelog

Date: November 5, 2026
Maintenance duration: 1h30

---

AndroidLab – Remote Access Improvements

We've rolled out a series of improvements to the AndroidLab remote access infrastructure, focusing on native screen capture performance, VNC connection stability, and compatibility with Android-x86 virtual machines.

These improvements are designed to provide smoother screen capture, more responsive remote desktop interactions, and more reliable VNC sessions.

Optimized Fast Screen Capture

• Improved native screen capture performance on Android-x86 environments
• Fixed a BGRA/RGBA pixel format incompatibility that could result in black screens
• Implemented a native AHardwareBuffer-based capture path with BGRA-to-RGBA conversion
• Improved compatibility with Bliss OS 12L running under Oracle VirtualBox

VNC Connection Stability

• Patched LibVNCServer to address synchronization issues during framebuffer transmission
• Fixed a race condition that could cause TigerVNC sessions to disconnect with a Rect too big error
• Improved handling of VNC encoding and pixel format changes during active sessions
• Enhanced stability when TigerVNC automatic quality selection is enabled

---

Custom droidVNC-NG & LibVNCServer Forks

To properly address these issues, we created dedicated forks of the open-source droidVNC-NG and LibVNCServer projects.

Rather than relying on temporary workarounds or migrating to a different virtualization platform, the underlying VNC capture and server components were directly modified and tested.

Native Fixes & Upstream Contributions

• Implemented fixes directly within the VNC capture and server components
• Developed an optimized Fast Screen Capture implementation for RxCloud CyberLab's AndroidLab environment
• Maintained compatibility with the existing Android-x86 and VirtualBox infrastructure
• Submitted separate upstream contributions for review

GitHub Repositories & Contributions

droidVNC-NG – Custom Fork:
GitHub - Roxas0Dev/droidVNC-NG: Android VNC remote desktop server for local networks

LibVNCServer – Custom Fork:
GitHub - Roxas0Dev/libvncserver: LibVNCServer/LibVNCClient are cross-platform C libraries that allow you to easily implement VNC server or client functionality in your program.

LibVNCServer – Upstream Pull Request #768:
libvncserver: synchronize client encoding updates with framebuffer transmission by Roxas0Dev · Pull Request #768 · LibVNC/libvncserver

---

Notes

• This update focuses specifically on AndroidLab remote access performance, compatibility, and VNC session reliability
• AndroidLab users should benefit from smoother screen capture and improved remote desktop responsiveness
• The optimized Fast Screen Capture implementation is used within the RxCloud CyberLab AndroidLab environment
• Separate upstream contributions have been submitted for review

 

[RoxasDev]

RxCloud CyberLab – Update Changelog

Date: November 6, 2026
Maintenance duration: 30 minutes

Dashboard version: 2.0.9 / RxRelease_Stable

Spoiler: Preview

---

RxCloud Dashboard – UI Refinements

This update introduces additional visual refinements and performance optimizations to the RxCloud CyberLab Dashboard, improving interface consistency and the overall user experience.

SVG Icon Improvements

• Refined the Dashboard interface with updated SVG icons
• Improved visual consistency across interface elements
• Applied additional UI polish for a cleaner and more cohesive appearance

RxBot Assistant – Guided Tour Update

• Updated RxBot Assistant to improve the Dashboard Guided Tour experience
• Refined Guided Tour integration with the updated Dashboard interface

---

Performance & Frontend Optimizations

Dashboard Rendering

• Optimized Dashboard rendering performance
• Applied additional visual rendering improvements

JavaScript Improvements

• Applied minor improvements and optimizations to the JavaScript codebase
• Refined frontend code for improved efficiency and maintainability

---

Notes

This maintenance update focuses on visual polish, RxBot Guided Tour improvements, Dashboard rendering optimizations, and minor JavaScript refinements.