News digests, tutorials, tool reviews and articles — always with sources.
Anthropic has suspended live internet access during internal evaluations and testing of its Claude models after finding cases where the AI
Hack.lu CTF 2026 marks the 16th edition of the long-running competition organized by FluxFingers, the hacking team associated with
A newly tracked flaw, CVE-2026-104732, hits the Advanced IP Blocker plugin for WordPress in all versions through 8.13.13. The bug lives in
Mobile threat researchers at iVerify have documented P7 DarkSword, a new variant of the DarkSword iOS exploit kit that trades a smaller
SAS CTF, the competition run alongside Kaspersky's Security Analyst Summit, moves into its onsite Attack-Defense finals this month in Bali,
A newly tracked flaw, CVE-2026-107889, hits Keycloak's login theme rendering: the filter meant to sanitize user-supplied text can be
Before reaching for a disassembler, run strings on the file — flags, hardcoded passwords, and library names often sit in plain text inside a binary nobody bothered to hide.
Researchers have uncovered an active supply-chain attack in which hijacked accounts belonging to prominent open-source maintainers were
FooBar CTF 2026 kicks off today as the flagship hacking competition of Team Aavishkar's Aarohan festival, running for 24 hours from October
A newly disclosed flaw tracked as CVE-2026-87682 affects Brocade Fabric OS versions prior to 10.0.1, where flawed input handling in the
Browsers refuse to let a page read responses from a different origin by default — CORS is the mechanism a server uses to explicitly allow it, and a sloppy CORS config is its own CTF category.
The FBI and security agencies from six other countries say a China-linked firm called Integrity Technology Group ran a portal that let
Suggest content for the blog in the Discord.
Join CTFdojo Discord