News
1 March 2024
CVE Alert: Python API Library Allowed Remote Code Execution
A small configuration slip. A rarely used content type. One well-placed payload — and your Python app is under someone else’s control. This CVE proves it.
12 February 2024
CI/CD Misconfigurations That Could Break Your Production
What happens when your CI/CD pipeline skips one too many security checks? In our latest assessment, we chained multiple vulnerabilities—from GitHub misconfigurations to OpenShift exposure—and landed a webshell in production.
29 January 2024
CVE Hat-trick: 3 Major Vulnerabilities Found by Our Hacker
At Citadelo, discovering CVEs isn’t just a badge of honor — it’s how we keep systems safe. Here’s the story behind a triple find: one hacker, three vulnerabilities, and critical insights for anyone serious about cybersecurity.
1 August 2023
Azure Functions Privilege Escalation
Azure Functions Privilege Escalation Vulnerability - A Wake-Up Call for Security Professionals
26 April 2023
Citadelo vulnerability stats 2022
Our hackers analyzed 388 client projects. Here's what they found.
23 February 2023
Top 10 Pentesting Tools Every Ethical Hacker Should Know
Whether you’re probing a web app or mapping out a cloud environment, the right tool makes all the difference. These are our top 10 pentesting picks that help turn theory into (ethical) action.