Home OffSec
  • Pricing
Blog | OffSec

Resources

Blog

News and updates from OffSec

October 12 – 18, 2026 – Content & Platform Updates

Oct 16, 2026

October 12 – 18, 2026 – Content & Platform Updates

Explore the weekly content release. This week you have 34 new labs to practice your skills, from offensive to defensive.

Read more
OSCP Exam Guide: What to Expect and How to Prepare

Career Advice

OSCP Exam Guide: What to Expect and How to Prepare

Learn what to expect from OSCP, including format, requirements, scoring, practical study tips, and answers to common preparation questions.

Oct 16, 2026

10 min read

Someone Clicked the Link. Is Your Security Team Ready?

Enterprise Security

Someone Clicked the Link. Is Your Security Team Ready?

Exploring this year’s Cybersecurity Awareness Month theme and what it means for security teams.

Oct 1, 2026

4 min read

CVE-2026-85706: GitLab Unauthenticated Arbitrary File Read via the Repository Commits API

Research & Tutorials

CVE-2026-85706: GitLab Unauthenticated Arbitrary File Read via the Repository Commits API

CVE-2026-85706 is a critical, unauthenticated path traversal vulnerability in GitLab Community Edition (CE) and Enterprise Edition (EE).

Sep 28, 2026

7 min read

10 Lessons Reshaping Security After Black Hat and DEF CON 2026

Enterprise Security

10 Lessons Reshaping Security After Black Hat and DEF CON 2026

Ten lessons from Black Hat and DEF CON on AI agents, cheaper attacks, supply chain risk, security fundamentals and cyber skills.

Sep 21, 2026

7 min read

Are Security Teams Keeping Pace With AI-Accelerated Threats?

AI

Are Security Teams Keeping Pace With AI-Accelerated Threats?

The strongest response to AI-driven change is a workforce that can use faster tools without surrendering the judgment behind the work.

Sep 10, 2026

5 min read

What If Your Idea Became the Next OffSec Lab?

OffSec News

What If Your Idea Became the Next OffSec Lab?

Learn all about OffSec’s new Creator Platform – create labs, earn rewards and help the security community skill up.

Sep 2, 2026

4 min read

CVE-2026-72898: Critical Metabase Unauthenticated SQL Injection Vulnerability

Research & Tutorials

CVE-2026-72898: Critical Metabase Unauthenticated SQL Injection Vulnerability

CVE-2026-72898 is a critical unauthenticated SQL injection in Metabase’s password-reset functionality. Learn more about it.

Aug 25, 2026

8 min read

Who Secures AI When It Touches Every Security Team?

AI

Who Secures AI When It Touches Every Security Team?

Learn how organizations can develop relevant offensive knowledge across every security function responsible for AI systems.

Aug 20, 2026

4 min read

Introducing the AI Red Teaming Upskill Program

AI

Introducing the AI Red Teaming Upskill Program

Introducing AI Red Teaming Upskill Program. New way to build AI security capabilities across teams with different roles and levels of experience. 

Aug 11, 2026

5 min read

What the Recent Water Systems Cyber Attacks Reveal About Critical Infrastructure Security

Enterprise Security

What the Recent Water Systems Cyber Attacks Reveal About Critical Infrastructure Security

The recent water system attacks are a reminder that familiar techniques can have serious consequences when they reach critical infrastructure. Preparing teams before the next incident is just as important as responding to the last one.

Aug 7, 2026

5 min read

How Federal Agencies Can Turn Year-End Funding Into Long-Term Cyber Capability

Enterprise Security

How Federal Agencies Can Turn Year-End Funding Into Long-Term Cyber Capability

If your agency is planning how to use remaining Fiscal Year funding, now is the time to build a stronger cybersecurity workforce.

Jul 31, 2026

4 min read

The EU AI Act Deadline Is Approaching. Is Your Workforce Ready?

Enterprise Security

The EU AI Act Deadline Is Approaching. Is Your Workforce Ready?

The EU AI Act deadline is approaching but the attack surface is already here. Is your workforce ready to secure it?

Jul 23, 2026

3 min read

Showing 1 - 12 of 483 entries

Join the OffSec community

Our community members connect, communicate, and collaborate on all things cybersecurity