Hack.lu CTF 2026
Hack.lu CTF 2026 is the 16th edition of the competition organized by FluxFingers, the CTF team based at Ruhr-University Bochum in Germany
Hackers Use Compromised ConnectWise Credential to Sign In to 173 Microsoft 365 Tenants
Security researchers are tracking an active intrusion in which attackers leveraged one stolen Microsoft 365 login tied to ConnectWise Cloud
Radare2: A Command-Line Reverse Engineering Framework
A keystroke-driven alternative to GUI disassemblers — radare2 disassembles, debugs, and scripts binary analysis entirely from the terminal.
CVE-2026-109430
CVE-2026-109430 is an unauthenticated XXE injection flaw in Ellucian WebAdvisor 3.2, triggered by sending crafted XML to the
cruXipher 2026 - ATMoS '26, BITS Hyderabad
cruXipher 2026 is a development-focused Capture the Flag contest running as part of BITS Hyderabad's ATMoS '26 fest, kicking off October
Researchers Demonstrate OpenBSD Root Exploit Chaining 37-Year-Old Shared-Memory Bug
Security researchers at Calif have released a working local privilege escalation exploit against OpenBSD 7.9 that achieves root access by
How CTF Scoring Works: Static vs Dynamic Points Explained
Why some challenges are worth fewer points the more teams solve them, and why that changes which challenges are actually worth attempting first.
Critical PwnEscape Linux Kernel Vulnerability Lets Guest VMs Read Host Memory
Researchers have disclosed a critical Linux kernel bug, dubbed PwnEscape and tracked as CVE-2026-99999, that lets a process inside a guest
H7CTF 2026 Finals
H7CTF 2026 Finals brings together the top qualifiers from a global round for an in-person attack-defense showdown at SRMIST. Competing
CVE-2026-110385
A newly tracked vulnerability, CVE-2026-110385, affects ONLYOFFICE Document Server builds prior to version 10.0.0, letting an authenticated
Cryovault 2026 Finals
Cryovault 2026 Finals is the capstone round of an annual Capture The Flag contest hosted by PES University in Bengaluru through its ISFCR
FBI raids DPRK IT worker laptop farms in Texas, US nationals arrested
The U.S. Department of Justice says it has disrupted the “Famous Chollima” threat group linked to North Korea's fraudulent remote IT worker