News digests, tutorials, tool reviews and articles — always with sources.
A newly tracked vulnerability, CVE-2026-110385, affects ONLYOFFICE Document Server builds prior to version 10.0.0, letting an authenticated
Cryovault 2026 Finals is the capstone round of an annual Capture The Flag contest hosted by PES University in Bengaluru through its ISFCR
The U.S. Department of Justice says it has disrupted the “Famous Chollima” threat group linked to North Korea's fraudulent remote IT worker
Cisco has confirmed that attackers are actively exploiting a critical, unauthenticated vulnerability in its Secure Email Gateway appliance
sqlmap probes a URL or request for injectable parameters and extracts databases, tables, and data automatically, turning a manual SQLi hunt into a single command.
CVE-2026-108783 flags a weakness in Amnezia-Web-Panel, a management interface for the Amnezia VPN, in versions up to 1.6.2 and
RSTCON 2026 CTF runs alongside the RSTCON security conference in Charlotte, North Carolina, blending an online jeopardy format with a
Microsoft's October 2026 Patch Tuesday landed as its largest ever, rolling out fixes for more than 1,400 vulnerabilities across Windows and
Ledger has confirmed that hardware wallets sold through its Southeast Asian reseller CryptoBilis were secretly fitted with a hidden chip
SOLAR CTF 2026 is a newly announced student cybersecurity competition that just opened registration. It runs as a 24-hour jeopardy-style
A newly disclosed flaw tracked as CVE-2026-107645 affects the Blocksy Companion plugin for WordPress up through version 2.1.58. The bug
Given a photo and a question like "where was this taken," reverse image search engines can trace it back to its original post, source, or location.
Suggest content for the blog in the Discord.
Join CTFdojo Discord