Just released🚨#doyensec's latest whitepaper is a head-to-head comparison of the @AikidoSecurity & @XBOW #AI-powered penetration testing platforms. blog.doyensec.com/2026/05/27… Read how each automates #security testing, their detection capabilities, workflows & usability.

Great news! Our industry-leading security tool for Electron apps - ElectroNG is now open source! We're giving it back to the community to encourage contributions and future research. Check out the details today: blog.doyensec.com/2026/10/27… #doyensec #appsec #security #electron #node

Check out our sweet presentation - Glucose in the Air: Wireless Medical IoT Without a Trust Anchor at Hack.lu by our @br0kenpipe and @smnfbb, Oct 20, 2026 2:45 PM–3:15 PM in the Europe room! #appsec #security #doyensec

🔎 New Windows vulnerability discovered by Adrian Denkiewicz (@a_denkiewicz) of #doyensec - a high-severity flaw in one of Windows’ Virtualization-Based Security (VBS) enclaves that enables VTL1 code reuse. A first look at our ongoing research into this class of vulnerabilities. 🔗 blog.doyensec.com/2026/10/13… #appsec #security

Congratulations to @maxenceschmitt and @cousky_ on successfully using their three bugs 🤯 to exploit Home Assistant Green (cc: @home_assistant). Tough break that they were previously known - we'll get 'em next time! #doyensec #appsec #security #pwn2own

Excited to share that 🇫🇷 @cousky_ & @maxenceschmitt 🇫🇷 will be representing #Doyensec at #PWN2OWN Ireland - targeting the Smart Home category for a total of $30,000 and 3 Master of Pwn points, Wed. Oct. 7 @ 11:15AM zerodayinitiative.com/blog/2… #appsec #security

One tap was enough to bypass a Chrome for iOS security check. We found a way to use shortcuts to reach tel: or facetime: without Chrome applying its normal user-interaction checks to the final URL. The issue, CVE-2026-13795, has been fixed. Details 👇 blog.doyensec.com/2026/09/24… #appsec #doyensec #security #ios

Come join our co-founder @lucacarettoni at #BEX Thursday 9/24 at the Rimini Expo Center 🇮🇹! He'll be available to chat about the cool projects we've done for helping to secure the space industry and the final frontier 🖖! bex-expo.space/en #appsec #doyensec #security

Read all the details on how our a missing flag allows an unprivileged user to gain root access - discovered by our @73696e65. blog.doyensec.com/2026/09/17… #appsec #security #doyensec

New Doyensec research: The skb that wasn’t freed - the Fragnesia primitive via Open vSwitch. We discovered a deterministic local privilege escalation affecting default installs of Arch, Fedora, Debian, Amazon #Linux & RHEL. The result: a byte-granular page-cache write → root via an existing setuid binary. Technical deep dive + PoC: blog.doyensec.com/2026/09/17… #appsec #doyensec #security

We originally published details of a OnePlus Android vulnerability after the vendor became unresponsive and more than nine months had passed without resolution of what appeared to be a straightforward issue. Only after publication did the vendor contact us again and request that we remove the post. We have temporarily taken it down to provide additional time for remediation. We strongly encourage the vendor to provide a clear remediation timeline and reserve the right to republish the information at a time of our choosing should the continued delay warrant it. #appsec #doyensec #security

“We were expecting the engagement to be a lot more time-consuming for us. … we are impressed with how independent you work and yet how deep you still go.” And on the final report: “Looks great and super comprehensive.” - Nuno Ferreira/Mintt Studio 👏 This is exactly what we aim for: minimal overhead, deep technical work, and results that stand up to scrutiny. #doyensec #appsec #security

"You don't need pentesters anymore." - Every hype cycle, ever. While the AI debate continues in Vegas, we'll be busy finding the bugs it missed and proving which "findings" were never vulnerabilities in the first place. Happy Black Hat & DEF CON! #BlackHat #DEFCON #AppSec #AI #CyberSecurity #HackerSummerCamp #doyensec #security

🇫🇷 Un petit bug with a big impact. A vulnerability reported by Doyensec's French team members in Electron's `shell.openPath()` has now been patched. Apps relying on string-only path validation could be tricked into opening a different file via an embedded null byte. Merci to the Electron maintainers for the quick fix. github.com/electron/electron… #doyensec #appsec #security #electron #electronjs

Hey pentesters 📢, maSSO just leveled up: Duo Mode & Signer Tab have landed. Duo Mode: spin up two fully independent IdPs, manage from one dashboard. Does your target's SP actually keep "Org A" and "Org B" apart, or does a token from one slide right into the other? Now you can bring up the malicious IdPs in one command. Signer Tab: craft, sign, and verify JWTs or SAML assertions on demand, no active auth flow required. Prep test payloads and prove SP signature checks actually work before you ever replay anything. Same IdP your target trusts, now with two identities and a forge on tap. 👇 github.com/doyensec/maSSO youtu.be/cHwUKgk2LQ8 #doyensec #appsec #security #pentesting