The Mysterious Story of a Troubling Intel Chip
Discover the story of the Intel Management Engine, a hidden chip in Intel processors since 2008, capable of operating independently of the operating system.
Latest articles
Investigations, technical analyses and explainers from our YouTube channel and our penetration tests.
Why You Should STOP Using Kali Linux
Kali Linux is probably the most widely used operating system in the offensive security world... but wrongly so! In fact, there are much better alternatives!
How penetration tests help ensure GDPR compliance?
How to avoid fines related to GDPR? The most effective solution is to conduct penetration tests. A complete guide is available in the article below.
What tools to use for a Penetration Test?
How to choose the right tools for an intrusion test? Read more in the article below
What budget to provide for its intrusion test
What is the budget for an intrusion test?r
XZ Utils: the backdoor shaking the free world and cybersecurity
XZ Utils has a significant backdoor in its latest versions 5.6.0 and 5.6.1. However, its exploitation is not trivial.
Why do an intrusion test on its WordPress site in 2025
WordPress, as one of the most widely used content management systems (CMS) in the world, powers a significant portion of websites, ranging from personal blogs to corporate sites.
GhostRace: New concern CPU vulnerability
A new class of speculative execution vulnerabilities, named GhostRace, has been discovered in March 2024. This attack is particularly dangerous as it can be used to exploit a wide array of software, including web browsers, operating systems, and critical applications.
How to Hack a 20 billion euro multinational corporation (legally)?
Canon, a 20 billion euro multinational corporation, is impacted by 2 critical vulnerabilities that, under certain conditions, can compromise the infrastructure hosting the vulnerable application. Trackflaw shares its discovery and responsible disclosure process.
Compromise Jenkins reading files CVE-2024-23897
This article details how a simple vulnerability discovered in late January 2024 could allow an attacker to compromise Jenkins instances.