CybersecurityBoard.com brings together vulnerability intelligence, security news, MITRE ATT&CK group profiles, cyber events, certifications, training, products, companies and service providers.
WordPress has released a critical security update to address a pre-authentication reflected cross-site scripting (XSS) vulnerability that affects all versions of the content management system. Tracked as CVE-2026-64638 with a CVSS score of 8.9,…
CVE-2026-64638 is a high-severity pre-authentication reflected cross-site scripting vulnerability in WordPress's login screen. It allows unauthenticated attackers to execute arbitrary JavaScript in…
A use-after-free vulnerability in Linux's SCTP networking code, tracked as CVE-2026-64564 and named SCTPhantom, could allow local users to gain root privileges…
A use-after-free vulnerability in Linux's SCTP networking code, present since 2008, allows local users to gain root and potentially escape containers. Patched…
Security researcher Malcolm Stagg has disclosed a new attack class called NatJack that manipulates network address translation (NAT) connection state to hijack…
PortSwigger's AI-assisted research system, HTTP Terminator, has generated and proven new HTTP desynchronization techniques after exploring 30,000 candidate attack vectors. The system,…
Open source software is undergoing a forced maturation, driven by a convergence of threats and regulatory pressures. The article argues that while…
Cybersecurity researchers at Arctic Wolf Labs have uncovered a widespread email-driven phishing campaign that uses adversary-in-the-middle (AitM) techniques to compromise Microsoft 365…
Security researcher Malcolm Stagg has disclosed a new attack class called NatJack that exploits network address translation (NAT) connection state to hijack…
Forescout has identified over 4,400 internet-facing Rockwell Automation programmable logic controllers (PLCs) worldwide, including 22 in cities affected by recent cyberattacks on…
A new class of prompt injection attack, dubbed "AI Recommendation Poisoning," is spreading across commercial websites. It exploits pre-filled deep links in…
UNC6671 is a data extortion group known for using vishing (voice phishing) to target enterprise employees, often via personal mobile devices. They…
Cordial Spider is CrowdStrike's tracking name for the umbrella collective behind UNC6671. The group conducts rapid data theft and extortion campaigns by…
Scattered LAPSUS$ Hunters (SLH) is a threat actor associated with shared phishing-kit infrastructure. Some vishing attempts have been linked to SLH tradecraft,…
A recent wave of cyber attacks targeting financial services, private equity, and professional services has been attributed to the data extortion group…
Huntress researchers have uncovered a new ClickFix-style attack campaign targeting macOS users with a Go-based stealer malware capable of stealing cryptocurrency, browser…
Atomic Stealer is a macOS information stealer that has been observed in ClickFix campaigns using look-alike domains and server-side browser fingerprinting to…
Remus is a 64-bit variant of the Lumma Stealer malware, distributed via fake websites offering cracked software and pirated games through SEO…
A new campaign has been discovered publishing nearly 800 malicious packages to the npm registry, designed to deliver a cross-platform remote access…
Black Hat USA is a major cybersecurity conference. At the 2026 event, Novee Security presented findings on vulnerabilities in AI coding agents…
The research paper on Interrupt Injection is scheduled to be presented at USENIX Security in Baltimore. The paper details the TONTOU attack…
The GCIH certification demonstrates proficiency in incident handling and response, often pursued after SANS SEC504 training.
EAL6+ is a high assurance level under the Common Criteria certification, indicating strong resistance to tampering. The Samsung S3D232A chip in Tangem…
The SEC660 course at SANS Network Security 2026 teaches how to leverage AI for automating tasks while maintaining deep manual understanding of…
SANS SEC504 is a training course covering hacker tools, techniques, and incident handling, leading to GCIH certification.
Okta is a primary target for UNC6671's phishing kits and AitM attacks, with the group using fake Okta login pages to capture…
EmeritOSS is a concept introduced in the article as a 'retirement home' for open source projects whose maintainers are no longer able…
The Linux kernel's SCTP implementation contains a use-after-free flaw (CVE-2026-64564) that can be exploited for local privilege escalation and container escape. Patches…
The Stream Control Transmission Protocol (SCTP) in Linux has a use-after-free vulnerability in its dynamic address reconfiguration feature, leading to potential root…
Aeza Group is a Russian bulletproof hosting provider that has been sanctioned by the U.S., U.K., and Australia for facilitating malicious activities.…
DDoS-Guard was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
Tucows was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
Nicenic was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
Poison Claude is an underground service selling discounted access to Anthropic's Claude models. It operates as a proxy, giving the operator full…
Ecomagent.in is a gray-market service offering discounted access to Anthropic and OpenAI models via a custom API endpoint, with an estimated 970…
Cloudflare was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
MNIT is the state agency responsible for coordinating the cybersecurity response to the coordinated cyberattack on Minnesota water systems, working with federal…