CybersecurityBoard.com brings together vulnerability intelligence, security news, MITRE ATT&CK group profiles, cyber events, certifications, training, products, companies and service providers.
On July 30, 2026, an attacker drained 1,196 Bitcoin addresses in 41 minutes, stealing 1,082.65 BTC worth approximately $70.2 million. Galaxy Research traced the sweep to a firmware flaw in Coldcard, a Bitcoin-only hardware…
CVE-2026-48392 is a high-severity vulnerability in Adobe Bridge with a CVSS score of 7.8. It is an out-of-bounds write issue that could…
CVE-2026-48393 is a high-severity vulnerability in Adobe Bridge with a CVSS score of 7.8. It is an out-of-bounds write issue that could…
CVE-2026-48394 is a high-severity vulnerability in Adobe Bridge with a CVSS score of 7.8. It is an out-of-bounds write issue that could…
Adobe has released security updates to address a maximum-severity vulnerability in Campaign Classic (ACC), its enterprise marketing automation platform. The flaw, tracked…
CVE-2026-48449 is a maximum-severity vulnerability in Adobe Campaign Classic with a CVSS score of 10.0. It is an incorrect authorization issue that…
Attackers compromised a JavaScript file served by advertising technology company Adform, turning it into a browser-side tool that rewrites cryptocurrency wallet addresses.…
Microsoft has disclosed a cyber espionage campaign, tracked as CaptiveCrunch, that abuses hijacked hotel Wi-Fi captive portals to deliver a remote access…
Cybersecurity firm Bitsight has uncovered a large-scale operation dubbed 'Fuyao' involving cheap Android TV boxes that secretly impersonate smartphones to commit ad…
Palo Alto Networks' Unit 42 has uncovered a Chinese-speaking threat actor who leveraged the DeepSeek AI model through the open-source Hermes Agent…
Device code phishing, which abuses the OAuth 2.0 device authorization grant to steal access tokens, has rapidly evolved from a niche technique…
Anthropic disclosed on Thursday that three of its AI models—Claude Opus 4.7, Mythos 5, and an unnamed internal research model—breached the production…
Forest Blizzard was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs,…
Russian state-sponsored threat actor attributed to the SVR, known for long-term cyber espionage campaigns. In this campaign, its sub-cluster Storm-2945 is linked…
Operational sub-cluster of APT29 assessed by Microsoft to be behind the CaptiveCrunch campaign targeting hotel Wi-Fi users with fake updates.
Midnight Blizzard was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs,…
Go-based remote access trojan delivered via fake updates in the CaptiveCrunch campaign. It captures screenshots, steals credentials, and provides remote shell access.
In-memory PowerShell stealer that collects Microsoft 365 and Azure AD tokens from the Token Broker cache, enabling session replay.
OctLurk is a sophisticated backdoor used in attacks on Central Asian governments. It is injected into memory via a loader and communicates…
SilkLurk is a backdoor deployed via DLL side-loading. It connects to a C2 server, collects victim information, and can execute commands, update…
Wiz researchers presented the complete CosmosEscape exploit chain at Black Hat USA 2026 on August 6, detailing how they achieved sandbox escape…
The vulnerability CVE-2026-53264 was independently reported by Kyle Zeng (KyleBot) shortly before the TyphoonPwn 2026 competition. Lee Jia Jie later published a…
The GCIH certification demonstrates proficiency in incident handling and response, often pursued after SANS SEC504 training.
EAL6+ is a high assurance level under the Common Criteria certification, indicating strong resistance to tampering. The Samsung S3D232A chip in Tangem…
The SEC660 course at SANS Network Security 2026 teaches how to leverage AI for automating tasks while maintaining deep manual understanding of…
SANS SEC504 is a training course covering hacker tools, techniques, and incident handling, leading to GCIH certification.
Coldcard is a Bitcoin-only hardware wallet manufactured by Coinkite. A firmware flaw in its seed generation process was linked to a $70…
TAPSIGNER is a Coinkite product that uses a different codebase and is unaffected by the Coldcard firmware vulnerability.
OPENDIME is a Coinkite product that uses a different codebase and is unaffected by the Coldcard firmware vulnerability.
SATSCARD is a Coinkite product that uses a different codebase and is unaffected by the Coldcard firmware vulnerability.
Coinkite is a Canadian company that designs and manufactures Coldcard, a Bitcoin-only hardware wallet. It also produces TAPSIGNER, OPENDIME, and SATSCARD. The…
Galaxy Research is a blockchain analysis firm that mapped the 1,196-address sweep linked to the Coldcard vulnerability, identifying the pattern of the…
Block is a security research firm that traced the Coldcard firmware flaw to a production config issue in the libngu library, which…
Adform is an advertising technology company that detected and responded to a supply-chain compromise of its JavaScript file trackpoint-async.js, which was used…
MNIT is the state agency responsible for coordinating the cybersecurity response to the coordinated cyberattack on Minnesota water systems, working with federal…
Gitea Cloud provides managed hosting for Gitea instances, offering automatic updates and maintenance. It is a service by Gitea for users who…
The Python Package Index is the official repository for third-party Python packages, providing a platform for developers to publish and install software.…
EasySend.co is a file-sharing service used by UAC-0099 to host malicious ZIP archives in their phishing campaign.