CybersecurityBoard.com brings together vulnerability intelligence, security news, MITRE ATT&CK group profiles, cyber events, certifications, training, products, companies and service providers.
Adobe has released critical security updates addressing multiple maximum-severity vulnerabilities in Adobe ColdFusion and Adobe Campaign Classic. The patches fix seven CVSS 10.0 flaws in ColdFusion and one critical flaw in Campaign Classic, all…
A CVSS 10.0 unrestricted upload of file with dangerous type vulnerability in Adobe ColdFusion that could lead to arbitrary code execution.
A CVSS 10.0 unrestricted upload of file with dangerous type vulnerability in Adobe ColdFusion that could lead to arbitrary code execution. Discovered…
A CVSS 10.0 improper input validation vulnerability in Adobe ColdFusion that could lead to arbitrary code execution.
A CVSS 10.0 improper input validation vulnerability in Adobe ColdFusion that could lead to arbitrary code execution.
A CVSS 10.0 improper input validation vulnerability in Adobe ColdFusion that could lead to arbitrary code execution.
Microsoft has announced an acceleration of its quantum-safe security roadmap, moving the target for transitioning critical products and services to post-quantum cryptography…
The 2026 Bitdefender Cybersecurity Assessment, based on a survey of 1,200 IT and cybersecurity professionals across six countries, reveals a significant gap…
Palo Alto Networks' Unit 42 has identified a new attack vector called 'phantom squatting,' where threat actors register AI-hallucinated domains that do…
Anthropic has restored its Claude Fable 5 AI model worldwide after the U.S. Commerce Department lifted export controls imposed on June 12,…
Cybersecurity researchers at Huntress have uncovered a massive, ongoing automated password spray attack targeting Microsoft's Azure command-line interface (CLI). The campaign, active…
Microsoft has issued a warning about a new attack vector targeting AI agents that use the Model Context Protocol (MCP). Attackers can…
The Brazilian Tetrade is a group of banking trojans identified by Kaspersky, including Grandoreiro, Guildma, Melcoz, and Ousaban (Javali). They originated in…
Kimsuky is a North Korean threat actor focused on intelligence gathering, particularly targeting cryptocurrency workers with fake job interview lures using ClickFix.
Kinsing is a threat group known for cryptojacking operations, often deploying cryptocurrency miners on compromised systems. In this campaign, the Lambsys malware…
WatchDog is a threat group involved in cryptojacking, deploying miners on vulnerable systems. The Lambsys malware actively terminates WatchDog processes to maintain…
Melcoz is a Brazilian banking trojan belonging to the Tetrade group, often used in campaigns against financial institutions.
Casbaneiro is a Brazilian banking trojan that shares a custom string encryption scheme with Ousaban, indicating code reuse within the Tetrade group.
Javali was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
A Brazilian banking trojan called Ousaban is targeting Windows users in Spain and Portugal, using phishing PDFs disguised as corrupted files. Discovered…
An independent survey of 1,200 IT and cybersecurity professionals across six countries, revealing contradictions in AI visibility, attack surface reduction, threat prioritization,…
OrangeCon is a cybersecurity conference where researcher Bert-Jan Pals presented findings on ClickFix payload analysis in early June 2026.
PCI DSS v4.0.1 introduced requirements 6.4.3 and 11.6.1, mandating that merchants inventory, authorize, and verify the integrity of all scripts on payment…
SANS San Antonio 2026 was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber…
Agentic AI represents a paradigm shift in offensive cybersecurity, where AI tools no longer require human operators to execute attacks. Unlike previous…
Adobe ColdFusion is a commercial rapid web application development platform. It was affected by multiple CVSS 10.0 vulnerabilities patched in updates 2023…
Adobe Campaign Classic is a cross-channel campaign management platform. It was affected by a critical authorization vulnerability (CVE-2026-48286) patched in version 7.4.3…
FortiGuard is Fortinet's security services suite, including antivirus and threat intelligence. It flags Ousaban samples and provides indicators of compromise.
FortiMail is Fortinet's email security product that can flag phishing emails used in the Ousaban campaign.
Adobe is a multinational computer software company known for products like ColdFusion and Campaign Classic. It recently patched critical vulnerabilities and announced…
eSentire is a Canadian cybersecurity company that provides managed detection and response (MDR) services. Its Threat Response Unit (TRU) identified active exploitation…
Progress is a software company that provides products for developing, deploying, and managing business applications. Its portfolio includes the Kemp LoadMaster load…
Cato AI Labs, the research arm of Cato Networks, discovered two critical vulnerabilities in Cursor AI code editor, named DuneSlide (CVE-2026-50548 and…
Europol was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
Nokia Deepfield Emergency Response Team was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related…
DEV Community (dev.to) is a developer platform abused by Gamaredon as a dead drop resolver.
Mastodon is a decentralized social network abused by Gamaredon as a dead drop resolver.