pwntools: A Python Library for Pwn Challenges
Connect to a remote service, pack addresses, and find buffer offsets with cyclic patterns — pwntools removes the boilerplate around a pwn exploit.
U.S. Sanctions Iran-Linked Hackers Behind Critical Infrastructure Breaches
The U.S. Treasury Department has imposed new sanctions on Iranian hackers tied to breaches of critical infrastructure, part of a broader
Iran Tech Olympics CTF 2026
Iran Tech Olympics CTF 2026 is running as a joint event with ASIS CTF Quals 2026, combining the two competitions into one jeopardy-style
CVE-2026-78161 — libwebsockets CBOR Out-of-Bounds Write
A newly disclosed flaw in the libwebsockets 4.5.0 library allows an out-of-bounds write in its CBOR recording function, reachable by a
Actively Exploited Oracle WebLogic Flaw Lets Unauthenticated Attackers Access Critical Data
CISA has added a maximum-severity flaw in Oracle HTTP Server and WebLogic Server, tracked as CVE-2026-21962 with a perfect 10.0 CVSS score
BlackHat MEA CTF Qualification 2026
Registration is now open for the qualifying round of the Black Hat MEA Capture The Flag competition, organized by Saudi Arabia's SAFCSP
CVE-2026-78050 — Comfast CF-N1-S Stack Overflow
A stack-based buffer overflow has been found in Comfast CF-N1-S wireless routers running firmware 2.6.0.1, located in the NTP timezone
Microsoft Defender's Own Driver Can Be Weaponized to Delete Security Software at Boot
Check Point researchers found that Microsoft Defender's own boot-time cleanup driver, BTR.sys, can be abused to perform kernel-level file and registry
Rust Supply Chain Attack Puts Build-Time Malware in Crates with 245 Million Downloads
A maintainer's account was compromised to publish new versions of three widely used Rust packages, adding a booby-trapped dependency