Analysis, guides and field experience by the Flawfence team on asset mapping, vulnerability scanning and information system security.
DGFiP data breach: three intrusions in June, July and August 2026, 678,000 tax records stolen. Are you affected, and what to do against fraud?
xss2shell (CVE-2026-64638) affects every version of WordPress before 7.0.3 and can lead to a full site takeover. What the flaw means for your organization, how to check your exposure and how to protect yourself.
Where the French NIS2 transposition stands, who is in scope, what the law defers to ANSSI decrees, and the three projects you can start right now.
A step-by-step method to list what you expose on the internet: forgotten subdomains, Shadow IT, open ports, mail posture. With the commands and the free tools.
What a pentest, a vulnerability scan and a full audit actually cost in 2026: market ranges, what moves a quote, and how to read one without getting burned.
wp2shell is a pre-auth RCE in WordPress Core (CVE-2026-63030 + CVE-2026-60137). How it works, affected versions, PoC, detection and remediation.
Control A.8.8, scan frequency, audit evidence: the practical guide to setting up automated vulnerability scanning that satisfies ISO 27001:2022.
Report structure, Article 21 measures, technical evidence auditors expect: the complete guide to writing a clear, actionable NIS2 compliance report.
Mapping the IT infrastructure is a pillar of cybersecurity. Discover why and how to map your company's information system.
A guide to choosing the right vulnerability scanning tool in 2026
