CybersecurityBoard.com brings together vulnerability intelligence, security news, MITRE ATT&CK group profiles, cyber events, certifications, training, products, companies and service providers.
A maximum-severity vulnerability in SAP Commerce Cloud, tracked as CVE-2026-58231, is now being actively exploited in the wild, just days after SAP released a patch. The flaw, rated 10.0 on the CVSS scale, stems…
CVE-2025-31324 is a critical vulnerability in SAP NetWeaver that has been weaponized by China-nexus espionage clusters such as UNC5221, UNC5174, and CL-STA-0048,…
A critical authentication bypass vulnerability in Apple macOS Screen Sharing, tracked as CVE-2026-65400 (CVSS 9.8), is being actively exploited in the wild…
CVE-2026-43779 is a logic issue in the Screen Sharing Server component of macOS, with a CVSS score of 9.8. It could allow…
CVE-2026-43777 is an unspecified issue in macOS Screen Sharing Server with a CVSS score of 7.5, allowing a remote attacker to cause…
CVE-2026-43760 is an access issue in macOS Screen Sharing with a CVSS score of 8.6, allowing an app to access user-sensitive data.…
Threat actors are increasingly acquiring expired domains—known as "dropcatch domains"—to inherit their reputation and traffic, redirecting victims to scams and malware. According…
Identity and Access Management (IAM) compliance is the practice of proving that access controls are not just documented but actively enforced across…
Apple has issued a fresh batch of threat notifications to customers in 110 countries, warning that they may be targeted by mercenary…
Cybersecurity researchers at CTM360 have exposed a large-scale, global recruitment-themed phishing campaign that leverages Browser-in-the-Browser (BitB) windows to steal Google and Facebook…
Cybersecurity researchers at SpecterOps have detailed a post-exploitation technique that enables the Chrome DevTools Protocol (CDP) inside a running Google Chrome or…
A new White House memo signed by U.S. President Donald Trump directs the National Coordination Center (NCC) to establish a program allowing…
CL-STA-0048 is a China-nexus espionage cluster that has been linked to the exploitation of SAP NetWeaver vulnerabilities, including CVE-2025-31324.
BianLian is a cybercrime group that has been observed exploiting SAP vulnerabilities, including CVE-2025-31324, for ransomware and other malicious activities.
RansomExx is a ransomware group that has exploited SAP vulnerabilities such as CVE-2025-31324 to gain access to victim networks.
UNC5221 is a China-nexus espionage cluster that has been observed exploiting SAP vulnerabilities, including CVE-2025-31324, to compromise targets. The group is known…
Auto-Color is a backdoor that was deployed in an attack against a U.S.-based chemicals company in April 2025, exploiting the critical SAP…
NanoCore is a remote access trojan that has been identified in malware samples communicating with Sable Squirrel's infrastructure, highlighting its role in…
njRAT is a remote access trojan that has been detected in malware samples communicating with Sable Squirrel's infrastructure, contributing to the threat…
HiddenTear is a ransomware family whose signatures have been found in artifacts communicating with Sable Squirrel's infrastructure, indicating potential ransomware activity within…
Microsoft's August 2026 Patch Tuesday included patches for 421 security flaws, including 236 in Windows, and addressed critical vulnerabilities such as CVE-2026-50656,…
USENIX WOOT is a security conference where the research on SIM card attacks was presented. The paper highlights the attack surface of…
ISO/IEC 27001:2022 is an international information security management standard. Its Annex A includes access control and identity management controls that organizations can…
The GCIH certification demonstrates proficiency in incident handling and response, often pursued after SANS SEC504 training.
The SEC660 course at SANS Network Security 2026 teaches how to leverage AI for automating tasks while maintaining deep manual understanding of…
SANS SEC504 is a training course covering hacker tools, techniques, and incident handling, leading to GCIH certification.
macOS Sequoia is a previous version of Apple's desktop operating system. Version 15.7.9 includes a fix for CVE-2026-65400.
macOS Sonoma is an older version of Apple's desktop operating system. Version 14.8.9 includes a fix for CVE-2026-65400.
Screen Sharing is a built-in remote desktop service in macOS that allows users to control another Mac over the network. It is…
The Orchid Security platform operates in the identity observability category, discovering identities from applications and infrastructure, verifying how access is actually used,…
The Netherlands National Cyber Security Centre (NCSC-NL) is the national authority for cybersecurity in the Netherlands. It warned about active exploitation of…
Calif is an AI security company that analyzed the macOS Screen Sharing vulnerabilities and developed working exploits using AI agents. It is…
Albertsons was part of the proposed merger with Kroger, which used the domain krogeralbertsons.com. The domain was later acquired by Sable Squirrel…
DropCatch.com is a custom drop catching service that tracks domains approaching deletion and automatically attempts to register them on behalf of customers.…
AstrillVPN is a VPN service whose exit nodes were identified in the investigation as part of the infrastructure used by suspected DPRK…
Vultr is a cloud infrastructure provider that was used to host the fake crypto startup's infrastructure in the undercover operation. The researchers…
Gorilla Servers is a hosting provider that was used in the undercover operation to host infrastructure. The researchers noted that the operatives'…
Bugcrowd is a crowdsourced security platform that facilitated the disclosure of the RovoBlast vulnerability in Atlassian Rovo. The platform rated the issue…