News
29 January 2024
CVE Hat-trick: 3 Major Vulnerabilities Found by Our Hacker
At Citadelo, discovering CVEs isn’t just a badge of honor — it’s how we keep systems safe. Here’s the story behind a triple find: one hacker, three vulnerabilities, and critical insights for anyone serious about cybersecurity.
1 August 2023
Azure Functions Privilege Escalation
Azure Functions Privilege Escalation Vulnerability - A Wake-Up Call for Security Professionals
26 April 2023
Citadelo vulnerability stats 2022
Our hackers analyzed 388 client projects. Here's what they found.
23 February 2023
Top 10 Pentesting Tools Every Ethical Hacker Should Know
Whether you’re probing a web app or mapping out a cloud environment, the right tool makes all the difference. These are our top 10 pentesting picks that help turn theory into (ethical) action.
14 December 2021
CVE-2021-44228: Why Log4Shell Is Still a Critical Threat
Log4Shell (CVE-2021-44228) is one of the most severe and widespread vulnerabilities in recent memory. This article unpacks the threat, the reasons for its rapid spread, and what every security team needs to know.
29 September 2021
Obfuscated Apps Waste Time. Here’s How to Pentest Smarter
Mobile applications: Why they should always be tested on a build without obfuscation, SSL pinning, and root/jb detection.