CybersecurityBoard.com brings together vulnerability intelligence, security news, MITRE ATT&CK group profiles, cyber events, certifications, training, products, companies and service providers.
CVE-2026-33696 was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware, attack groups, companies, products and services can be linked together on CybersecurityBoard.com.
ThreatsDay: Gogs 10.0 RCE, n8n Workflow-to-RCE, $10M Reward, GLM-5.3 AI Exploit and More Ravie LakshmananAug 20, 2026Hacking News / Cybersecurity News A…
CVE-2026-52813 was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
CVE-2026-52810 was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
CVE-2026-43774 was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
A now-patched command injection vulnerability in Zimbra Collaboration (ZCS), tracked as CVE-2026-73570 (CVSS 8.9), is under active exploitation in the wild, according…
The U.S. government has issued a joint advisory warning of an active threat targeting critical infrastructure organizations using AI-generated exploit scripts. The…
Adversa AI has disclosed a novel attack technique dubbed "Cryptographic Context Injection" that can cause xAI's Grok chatbot to exfiltrate a user's…
Researchers at the University of Massachusetts Amherst have demonstrated a novel attack, dubbed "Zombie Card," that can revive expired Visa contactless credit…
Cybersecurity researchers have disclosed two denial-of-service (DoS) attack techniques, collectively named "CDN Tsunami," that exploit how major content delivery networks (CDNs) convert…
In March 2026, Meta experienced a significant data exposure incident when an approved internal AI agent posted sensitive company and user data…
Cybersecurity researchers have disclosed a remote Spectre attack against Cloudflare Workers that leaked a JSON Web Token (JWT) from a co-located Worker…
GoldFactory is a Chinese-speaking threat actor linked to multiple Android and iOS banking malware families, including GoldDigger, GoldPickaxe, GoldDiggerPlus, and GoldKefu. The…
A newly uncovered cyber espionage operation dubbed SilkParasite has been targeting government bodies in Central Asia, according to a technical report from…
SilkParasite is a China-nexus cyber espionage threat cluster first discovered in late 2025. It targets government bodies in Central Asia, using a…
UAC-0063 is a threat actor previously identified as targeting Central Asia, often using cyber espionage tactics. It is one of the groups…
GoldPickaxe was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
GoldDiggerPlus was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
GoldKefu was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
Cybersecurity researchers have uncovered significant updates to the Android banking trojans ToxicPanda (aka TgToxic) and GoldDigger, both of which now feature enhanced…
Researchers from UC Berkeley, the Ethereum Foundation, and NYU Shanghai presented a two-turn attack at USENIX Security 2026 that succeeded against Grok…
The Zombie Card attack was presented at the 35th USENIX Security Symposium held in Baltimore from August 12 to 14, 2026. The…
ISO/IEC 27001:2022 is an international information security management standard. Its Annex A includes access control and identity management controls that organizations can…
The GCIH certification demonstrates proficiency in incident handling and response, often pursued after SANS SEC504 training.
The SEC660 course at SANS Network Security 2026 teaches how to leverage AI for automating tasks while maintaining deep manual understanding of…
SANS SEC504 is a training course covering hacker tools, techniques, and incident handling, leading to GCIH certification.
All CPU variants of the Siemens S7-200 Series PLCs are targeted by AI-generated exploit scripts. These devices are often exposed to the…
The S7-300 Series, including models 314, 315, and 317, are singled out in the advisory. Threat actors use AI to generate scripts…
All CPU variants of the S7-400 Series are vulnerable to AI-assisted exploitation. The advisory urges operators to apply patches and segment networks…
Specific CPU variants (1211C, 1212C, 1214C, 1215C, 1217C) of the S7-1200 Series are targeted. These PLCs are often internet-exposed and vulnerable to…
ZoomEye, a cyberspace mapping service, is used by threat actors to find poorly protected PLCs exposed to the internet. This aids in…
Israeli cybersecurity company Dream detailed a near-autonomous attack targeting government entities in Asia, reportedly Taiwan. The attack used AI agents like OpenClaw…
Mastercard's EMV contactless kernel (Kernel 2) includes a consistency check between the two expiry representations, causing a mismatch to be treated as…
American Express's EMV contactless kernel (Kernel 4) binds the expiration date into static data covered by offline data authentication, producing a hash…
Seven malicious Firefox extensions use threat actor-controlled Supabase projects to dynamically serve phishing or decoy content, abusing the platform's infrastructure.
The 37 sports-score shell extensions share a hard-coded credential for API-Sports, a legitimate sports data service, indicating coordinated infrastructure.
Fifteen malicious Firefox extensions exfiltrate wallet secrets through Cloudflare Workers, leveraging the service for data theft.
msaRAT uses Twilio TURN relays to establish WebRTC DataChannels between the browser and C2 server.