FAQ Questions enterprise security teams ask before partnering with AFINE for security assessments. No items found. Monthly Security Report Subscribe to our Enterprise Security Report. Every month, we share what we're discovering in enterprise software, what vulnerabilities you should watch for, and the security trends we're seeing from our offensive security work. By clicking Subscribe you're confirming that you agree with our Privacy Policy . Thank you! Your submission has been received! Oops! Something went wrong while submitting the form. Related posts Eager to see more pen-testing goodness? Check out some of our other blog posts. Category How to Choose a Penetration Testing Company - The 2026 Buyer's Checklist A five-stage checklist for evaluating and choosing a penetration testing company - scope qualification, vendor vetting, proposal scoring and report anatomy. Paweł Woyke May 7, 2026 • 9 min read Category Time of Check Time of Use (TOCTOU): Anatomy of a Race Condition in GNU sed CVE-2026-5958 is a textbook TOCTOU bug that sat inside GNU sed's --follow-symlinks path for two decades. This post walks through the race at the syscall level and the fix shipped in sed 4.10. Marcin Wyczechowski Michał Majchrowicz May 1, 2026 • 9 min read Category Broken Access Control in the Real World: Chaining Two Bugs to Extract MDM Service Passwords A low-privileged user with no UI permissions chained two broken access control bugs in an MDM REST API to extract service passwords for every managed device. Full walkthrough of CVE-2025-1415 and CVE-2025-1416, from task enumeration to full developer access on any phone in the fleet. Marcin Węgłowski April 24, 2026 • 10 min read View all Cookie Settings We use cookies to provide you with the best possible experience. They also allow us to analyze user behavior in order to constantly improve the website for you. See our Privacy Policy Reject all I want to choose Accept All Functionality Analytics Storage Ad Storage Ad User Data Ad Personalisation Personalization Storage Security Storage Thank you! Your submission has been received! Oops! Something went wrong while submitting the form. Accept selection