CVE-2019-19781: Citrix ADC Vulnerability
An N-day vulnerability in Citrix ADC exploited by QTFY.
Live cyber intelligence board
Track CVEs, attack groups, malware, vendors and training in one place.
CybersecurityBoard.com brings together vulnerability intelligence, security news, MITRE ATT&CK group profiles, cyber events, certifications, training, products, companies and service providers.
Latest Critical CVEs
All CVEs →CVE-2020-5902: F5 BIG-IP Vulnerability
An N-day vulnerability in F5 BIG-IP exploited by QTFY.
CVE-2019-10068: Kentico CMS Vulnerability
An N-day vulnerability in Kentico CMS used by QTFY.
CVE-2021-44228: Apache Log4j Vulnerability
The Log4Shell vulnerability in Apache Log4j exploited by QTFY.
CVE-2023-22515: Atlassian Confluence Vulnerability
An N-day vulnerability in Atlassian Confluence used by QTFY.
CVE-2024-24919: Check Point Quantum Gateway Vulnerability
An N-day vulnerability in Check Point Quantum Gateway exploited by QTFY.
Latest Cyber News
All news →FBI Disrupts China-Linked QTFY Hacking Infrastructure Used to Steal Data from U.S. Organizations
The U.S. Department of Justice (DoJ) announced the disruption of two hacking platforms, QScan and QTRouter, operated by the Chinese state-sponsored group…
CISA Red Team Compromises Two Critical Infrastructure Orgs; One SOC Detected Nothing
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) released advisory AA26-237A, titled "A Tale of Two SOCs," on August 25, 2026, detailing…
OpenAI Bans Russian ChatGPT Accounts Tied to Influence Operation Promoting Fake Think Tank
OpenAI has banned a cluster of Russian ChatGPT accounts that used VPNs to bypass access restrictions and run an influence operation. The…
Claude Opus 4.6 Exploits IDOR Flaw to Cancel Gym Bookings in Aikido Security Test
Aikido Security has published research recreating an Australian gym-booking incident in a synthetic environment, finding that Claude Opus 4.6, running on the…
Fake Apple Support AI Calls Target Stolen-Device Owners for Passcodes and 2FA Codes
Cybersecurity researchers have uncovered a phishing-as-a-service (PhaaS) platform called AnonyMousKIT that uses AI voice agents to trick owners of stolen Apple devices…
U.S. Sanctions Iran-Linked Hackers Behind Critical Infrastructure Breaches
The U.S. Department of the Treasury has announced new sanctions targeting Iranian cyber actors as part of Operation Economic Outcast, an economic…
Latest Attack Groups
MITRE groups →QTFY: China-Linked Cyber Espionage Group
QTFY is a Chinese state-sponsored hacking group linked to Nanjing Xinjiuwei Network Technology Company. Active since 2018, it has targeted U.S. critical…
Nimbus Manticore Expands Toolset With TWOSTROKE-Like Backdoor and SSH Tunneler
Cybersecurity researchers have uncovered new infrastructure and previously undocumented malware linked to Nimbus Manticore, an Iranian state-sponsored hacking group affiliated with the…
Tortoiseshell: Iranian Threat Actor Targeting Middle East and Europe
Tortoiseshell, also known as Imperial Kitten and Unyielding Wasp, is an Iranian threat actor active since at least July 2018. It targets…
Charming Kitten: Iranian Cyber Espionage Cluster
Charming Kitten, also known as Eclipsed Wasp, is a cluster of Iranian cyber espionage groups. It includes subgroups like Tortoiseshell and Nimbus…
Latest Malware
Malware →QTRouter: Network Obfuscation Platform
QTRouter is a network traffic obfuscation network that uses compromised IoT devices and commercial proxies to hide the origin of malicious activities.
QTBotnet: Botnet Management Platform
QTBotnet is a platform used by QTFY to command and control compromised devices, capable of launching DDoS attacks and executing commands.
QScan: IoT Scanning and Infection Tool
QScan is a tool used by QTFY to scan and automatically infect IoT devices worldwide, adding them to the QTRouter network for…
NovaCookies Phishing Kit Abuses Genuine Docusign Notifications to Steal Microsoft 365 Sessions
Cybersecurity researchers have disclosed a new adversary-in-the-middle (AitM) phishing toolkit called NovaCookies, which is used as a proxy to redirect Microsoft 365…
Events, Certifications & Training
Explore →INTERPOL Operation Jackal IV Arrests 58, Identifies 263 in Global Cyber Fraud Crackdown
INTERPOL's Operation Jackal IV, an eight-month international law enforcement effort targeting West African organized crime groups, has resulted in the arrest of…
Operation Jackal IV: Global Crackdown on Cyber Fraud
Operation Jackal IV was an eight-month INTERPOL-coordinated law enforcement operation from November 2025 to June 2026, involving 22 countries. It targeted West…
ISO/IEC 27001:2022 Annex A Access Control and Identity Management
ISO/IEC 27001:2022 is an international information security management standard. Its Annex A includes access control and identity management controls that organizations can…
GIAC Certified Incident Handler (GCIH)
The GCIH certification demonstrates proficiency in incident handling and response, often pursued after SANS SEC504 training.
Frontier AI: Revolutionizing Vulnerability Management and Patching
Frontier AI models, such as Anthropic's Mythos, are transforming vulnerability management by identifying zero-day flaws, chaining complex exploits, and adapting in real…
LDR516: Advanced Vulnerability Management Training
LDR516 is a SANS course taught by Kevin Garvey that covers how vulnerability programs must evolve to address the challenges posed by…
Products, Services & Companies
Browse market →Atlassian Confluence — Cybersecurity product profile
Atlassian Confluence was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs,…
Check Point Quantum Gateway — Cybersecurity product profile
Check Point Quantum Gateway was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber…
CrushFTP — Cybersecurity product profile
CrushFTP was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
Apache Log4j — Cybersecurity product profile
Apache Log4j was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs,…
Nanjing Xinjiuwei Network Technology Company
A Chinese company linked to QTFY, described by the FBI as an enabling company for cyber operations against U.S. critical infrastructure.
DoJ — Cybersecurity company profile
DoJ was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
Sublime Security: AI-Powered Email Security
Sublime Security is a cybersecurity company that provides AI-powered email security solutions. Sublime observed the DOUBLOON DREDGER threat actor abusing Notion accounts…
ElevenLabs: AI Voice Generation
ElevenLabs is a company that provides AI-powered text-to-speech and voice generation. The p1bot.io vishing-as-a-service platform uses ElevenLabs' text-to-speech capabilities to generate IVR…
HOSTKEY Detects Cryptojacking Activity on Gitea Server
HOSTKEY, a hosting provider, alerted a customer to excessive CPU usage on their virtual server, leading to the discovery of a cryptojacking…
Supabase Abused as Remote Switch in Malicious Extensions
Seven malicious Firefox extensions use threat actor-controlled Supabase projects to dynamically serve phishing or decoy content, abusing the platform's infrastructure.
API-Sports Credential Shared in Malicious Extensions
The 37 sports-score shell extensions share a hard-coded credential for API-Sports, a legitimate sports data service, indicating coordinated infrastructure.
Cloudflare Workers Used for Data Exfiltration
Fifteen malicious Firefox extensions exfiltrate wallet secrets through Cloudflare Workers, leveraging the service for data theft.