News digests, tutorials, tool reviews and articles — always with sources.
CREST CTF 2.0 is a national-level capture-the-flag competition run by the CREST Cyber Club at Pimpri Chinchwad University's School of
Researchers have identified a malicious npm package called 'imgdecode' that is part of a wider supply-chain campaign tracked as MALFEX.
CVE-2026-111210 affects the bitcoinj Java library up to version 0.17, specifically its Payment Request Handler component. By tampering with
Hack.lu CTF 2026 is the 16th edition of the competition organized by FluxFingers, the CTF team based at Ruhr-University Bochum in Germany
Security researchers are tracking an active intrusion in which attackers leveraged one stolen Microsoft 365 login tied to ConnectWise Cloud
A keystroke-driven alternative to GUI disassemblers — radare2 disassembles, debugs, and scripts binary analysis entirely from the terminal.
CVE-2026-109430 is an unauthenticated XXE injection flaw in Ellucian WebAdvisor 3.2, triggered by sending crafted XML to the
cruXipher 2026 is a development-focused Capture the Flag contest running as part of BITS Hyderabad's ATMoS '26 fest, kicking off October
Security researchers at Calif have released a working local privilege escalation exploit against OpenBSD 7.9 that achieves root access by
Why some challenges are worth fewer points the more teams solve them, and why that changes which challenges are actually worth attempting first.
Researchers have disclosed a critical Linux kernel bug, dubbed PwnEscape and tracked as CVE-2026-99999, that lets a process inside a guest
H7CTF 2026 Finals brings together the top qualifiers from a global round for an in-person attack-defense showdown at SRMIST. Competing
Suggest content for the blog in the Discord.
Join CTFdojo Discord