Oct 22, 2026
PHP2Shell – Critical Vulnerabilities in PHP Core (CVE-2026-109618/CVE-2026-109619)
Two major CVEs have been discovered in PHP core, both rated critical, leading to server crashes and potential remote code execution on affected web servers.
OffSec News
OffSec Aligns Its Cyber Workforce Development Programs to Global Workforce Frameworks
OffSec’s new framework hub shows security leaders what their teams can do and how to prove it.
Oct 21, 2026
4 min read
OffSec News
OSCP+ Scoring Update: What You Need to Know
Learn all about scoring updates to the OSCP exam that are starting on December 1, 2026.
Oct 21, 2026
4 min read
Product Updates
October 12 – 18, 2026 – Content & Platform Updates
Explore the weekly content release. This week you have 34 new labs to practice your skills, from offensive to defensive.
Oct 16, 2026
Career Advice
OSCP Exam Guide: What to Expect and How to Prepare
Learn what to expect from OSCP, including format, requirements, scoring, practical study tips, and answers to common preparation questions.
Oct 16, 2026
10 min read
Enterprise Security
Someone Clicked the Link. Is Your Security Team Ready?
Exploring this year’s Cybersecurity Awareness Month theme and what it means for security teams.
Oct 1, 2026
4 min read
Research & Tutorials
CVE-2026-85706: GitLab Unauthenticated Arbitrary File Read via the Repository Commits API
CVE-2026-85706 is a critical, unauthenticated path traversal vulnerability in GitLab Community Edition (CE) and Enterprise Edition (EE).
Sep 28, 2026
7 min read
Enterprise Security
10 Lessons Reshaping Security After Black Hat and DEF CON 2026
Ten lessons from Black Hat and DEF CON on AI agents, cheaper attacks, supply chain risk, security fundamentals and cyber skills.
Sep 21, 2026
7 min read
AI
Are Security Teams Keeping Pace With AI-Accelerated Threats?
The strongest response to AI-driven change is a workforce that can use faster tools without surrendering the judgment behind the work.
Sep 10, 2026
5 min read
OffSec News
What If Your Idea Became the Next OffSec Lab?
Learn all about OffSec’s new Creator Platform – create labs, earn rewards and help the security community skill up.
Sep 2, 2026
4 min read
Research & Tutorials
CVE-2026-72898: Critical Metabase Unauthenticated SQL Injection Vulnerability
CVE-2026-72898 is a critical unauthenticated SQL injection in Metabase’s password-reset functionality. Learn more about it.
Aug 25, 2026
8 min read
AI
Who Secures AI When It Touches Every Security Team?
Learn how organizations can develop relevant offensive knowledge across every security function responsible for AI systems.
Aug 20, 2026
4 min read
AI
Introducing the AI Red Teaming Upskill Program
Introducing AI Red Teaming Upskill Program. New way to build AI security capabilities across teams with different roles and levels of experience.
Aug 11, 2026
5 min read
Join the OffSec community
Our community members connect, communicate, and collaborate on all things cybersecurity