>_ Blog

News digests, tutorials, tool reviews and articles — always with sources.

News CTF & Competitions 2026-10-19

CREST CTF 2.0

CREST CTF 2.0 is a national-level capture-the-flag competition run by the CREST Cyber Club at Pimpri Chinchwad University's School of

News Cybersecurity 2026-10-19

MALFEX npm Package 'imgdecode' Hides Shellcode Loader in Windows Native Addon

Researchers have identified a malicious npm package called 'imgdecode' that is part of a wider supply-chain campaign tracked as MALFEX.

News CVE & Vulnerabilities 2026-10-18

CVE-2026-111210

CVE-2026-111210 affects the bitcoinj Java library up to version 0.17, specifically its Payment Request Handler component. By tampering with

News CTF & Competitions 2026-10-18

Hack.lu CTF 2026

Hack.lu CTF 2026 is the 16th edition of the competition organized by FluxFingers, the CTF team based at Ruhr-University Bochum in Germany

News Cybersecurity 2026-10-18

Hackers Use Compromised ConnectWise Credential to Sign In to 173 Microsoft 365 Tenants

Security researchers are tracking an active intrusion in which attackers leveraged one stolen Microsoft 365 login tied to ConnectWise Cloud

Tool RE 2026-10-17

Radare2: A Command-Line Reverse Engineering Framework

A keystroke-driven alternative to GUI disassemblers — radare2 disassembles, debugs, and scripts binary analysis entirely from the terminal.

News CVE & Vulnerabilities 2026-10-17

CVE-2026-109430

CVE-2026-109430 is an unauthenticated XXE injection flaw in Ellucian WebAdvisor 3.2, triggered by sending crafted XML to the

News CTF & Competitions 2026-10-17

cruXipher 2026 - ATMoS '26, BITS Hyderabad

cruXipher 2026 is a development-focused Capture the Flag contest running as part of BITS Hyderabad's ATMoS '26 fest, kicking off October

News Cybersecurity 2026-10-17

Researchers Demonstrate OpenBSD Root Exploit Chaining 37-Year-Old Shared-Memory Bug

Security researchers at Calif have released a working local privilege escalation exploit against OpenBSD 7.9 that achieves root access by

Article General 2026-10-16

How CTF Scoring Works: Static vs Dynamic Points Explained

Why some challenges are worth fewer points the more teams solve them, and why that changes which challenges are actually worth attempting first.

News Cybersecurity 2026-10-16

Critical PwnEscape Linux Kernel Vulnerability Lets Guest VMs Read Host Memory

Researchers have disclosed a critical Linux kernel bug, dubbed PwnEscape and tracked as CVE-2026-99999, that lets a process inside a guest

News CTF & Competitions 2026-10-16

H7CTF 2026 Finals

H7CTF 2026 Finals brings together the top qualifiers from a global round for an in-person attack-defense showdown at SRMIST. Competing

Got a source, tutorial or tool to suggest?

Suggest content for the blog in the Discord.

Join CTFdojo Discord