>_ Blog

News digests, tutorials, tool reviews and articles — always with sources.

News Cybersecurity 2026-10-12

Anthropic Cuts Live Internet Access for Internal AI Tests After Claude Exploits Injection Flaws

Anthropic has suspended live internet access during internal evaluations and testing of its Claude models after finding cases where the AI

News CTF & Competitions 2026-10-12

Hack.lu CTF 2026

Hack.lu CTF 2026 marks the 16th edition of the long-running competition organized by FluxFingers, the hacking team associated with

News CVE & Vulnerabilities 2026-10-12

CVE-2026-104732

A newly tracked flaw, CVE-2026-104732, hits the Advanced IP Blocker plugin for WordPress in all versions through 8.13.13. The bug lives in

News Cybersecurity 2026-10-11

P7 DarkSword iOS Exploit Kit Adds Crypto Wallet Data Theft and Remote Commands

Mobile threat researchers at iVerify have documented P7 DarkSword, a new variant of the DarkSword iOS exploit kit that trades a smaller

News CTF & Competitions 2026-10-11

SAS CTF 2026 Finals

SAS CTF, the competition run alongside Kaspersky's Security Analyst Summit, moves into its onsite Attack-Defense finals this month in Bali,

News CVE & Vulnerabilities 2026-10-11

CVE-2026-107889

A newly tracked flaw, CVE-2026-107889, hits Keycloak's login theme rendering: the filter meant to sanitize user-supplied text can be

Tool Misc 2026-10-10

strings: Pulling Readable Text Out of Any Binary

Before reaching for a disassembler, run strings on the file — flags, hardcoded passwords, and library names often sit in plain text inside a binary nobody bothered to hide.

News Cybersecurity 2026-10-10

Credential-Stealing GitHub Actions Workflows Planted in Tens of Thousands of Repositories

Researchers have uncovered an active supply-chain attack in which hijacked accounts belonging to prominent open-source maintainers were

News CTF & Competitions 2026-10-10

FooBar CTF 2026

FooBar CTF 2026 kicks off today as the flagship hacking competition of Team Aavishkar's Aarohan festival, running for 24 hours from October

News CVE & Vulnerabilities 2026-10-10

CVE-2026-87682

A newly disclosed flaw tracked as CVE-2026-87682 affects Brocade Fabric OS versions prior to 10.0.1, where flawed input handling in the

Article Web 2026-10-09

Same-Origin Policy and CORS: Why Browsers Block Your Own Requests

Browsers refuse to let a page read responses from a different origin by default — CORS is the mechanism a server uses to explicitly allow it, and a sloppy CORS config is its own CTF category.

News Cybersecurity 2026-10-09

FBI Says China-Linked Hackers Ran Portal Giving Third Parties Access to Stolen Emails

The FBI and security agencies from six other countries say a China-linked firm called Integrity Technology Group ran a portal that let

Got a source, tutorial or tool to suggest?

Suggest content for the blog in the Discord.

Join CTFdojo Discord