CVE-2026-110653
CVE-2026-110653 affects the LatePoint appointment-booking plugin for WordPress, where versions up to and including 5.7.4 let attackers
CREST CTF 2.0
CREST CTF 2.0 is a national-level capture-the-flag competition run by the CREST Cyber Club at Pimpri Chinchwad University's School of
MALFEX npm Package 'imgdecode' Hides Shellcode Loader in Windows Native Addon
Researchers have identified a malicious npm package called 'imgdecode' that is part of a wider supply-chain campaign tracked as MALFEX.
CVE-2026-111210
CVE-2026-111210 affects the bitcoinj Java library up to version 0.17, specifically its Payment Request Handler component. By tampering with
Hack.lu CTF 2026
Hack.lu CTF 2026 is the 16th edition of the competition organized by FluxFingers, the CTF team based at Ruhr-University Bochum in Germany
Hackers Use Compromised ConnectWise Credential to Sign In to 173 Microsoft 365 Tenants
Security researchers are tracking an active intrusion in which attackers leveraged one stolen Microsoft 365 login tied to ConnectWise Cloud
Radare2: A Command-Line Reverse Engineering Framework
A keystroke-driven alternative to GUI disassemblers — radare2 disassembles, debugs, and scripts binary analysis entirely from the terminal.
CVE-2026-109430
CVE-2026-109430 is an unauthenticated XXE injection flaw in Ellucian WebAdvisor 3.2, triggered by sending crafted XML to the
cruXipher 2026 - ATMoS '26, BITS Hyderabad
cruXipher 2026 is a development-focused Capture the Flag contest running as part of BITS Hyderabad's ATMoS '26 fest, kicking off October
Researchers Demonstrate OpenBSD Root Exploit Chaining 37-Year-Old Shared-Memory Bug
Security researchers at Calif have released a working local privilege escalation exploit against OpenBSD 7.9 that achieves root access by
How CTF Scoring Works: Static vs Dynamic Points Explained
Why some challenges are worth fewer points the more teams solve them, and why that changes which challenges are actually worth attempting first.
Critical PwnEscape Linux Kernel Vulnerability Lets Guest VMs Read Host Memory
Researchers have disclosed a critical Linux kernel bug, dubbed PwnEscape and tracked as CVE-2026-99999, that lets a process inside a guest