CybersecurityBoard.com brings together vulnerability intelligence, security news, MITRE ATT&CK group profiles, cyber events, certifications, training, products, companies and service providers.
Cybersecurity researchers have discovered over 36,000 Baseboard Management Controller (BMC) interfaces exposing the Intelligent Platform Management Interface (IPMI) protocol to the public internet. Of these, 24,650 were found to disclose password-derived authentication hashes before…
CVE-2013-4786 is a high-severity information disclosure flaw in the IPMI v2.0 specification that allows remote attackers to obtain password hashes for valid…
CVE-2026-53921 is a critical stack overflow vulnerability in OpenWrt's odhcpd DHCPv6 server, rated 9.8 CVSS 3.1. An unauthenticated attacker can send a…
CVE-2026-62948 is a DHCPv6 hostname-injection flaw in OpenWrt that can produce stored cross-site scripting (XSS) when an administrator opens the LuCI leases…
CVE-2026-62947 is a path traversal vulnerability in OpenWrt's cgi-io component that can expose arbitrary root-readable files. It requires an authenticated session with…
OpenWrt has released versions 24.10.8 and 25.12.5 to patch a critical DHCPv6 stack overflow vulnerability, CVE-2026-53921, rated 9.8 on CVSS 3.1. The…
Anthropic announced that its Claude AI model, Mythos Preview, has achieved two significant cryptanalytic results: a full key-recovery attack against the HAWK-256…
NVIDIA, along with 36 other organizations including Microsoft, Cisco, Cloudflare, CrowdStrike, Hugging Face, IBM, Palo Alto Networks, Red Hat, and the Linux…
GitHub has announced a new cooldown mechanism for Dependabot that introduces a mandatory three-day waiting period before opening pull requests for version…
CTM360 Research has uncovered a sophisticated evolution in insurance phishing campaigns, where attackers now hijack accounts in real time rather than harvesting…
AI agent security is evolving from visibility to enforcement, but many organizations remain stuck in the discovery phase. According to a new…
An attacker installed the open-source Hermes AI assistant on a rented server, disabled its permission-requesting YOLO mode, and directed it at Thailand's…
Iranian state-backed hacking group Nimbus Manticore (also known as GalaxyGato, Mirage Kitten, Smoke Sandstorm, Subtle Snail, and UNC1549) has been linked to…
Nimbus Manticore, also tracked as GalaxyGato, Mirage Kitten, Smoke Sandstorm, Subtle Snail, and UNC1549, is an Iranian state-backed hacking group known for…
JackSkid was one of four IoT botnets targeted in coordinated U.S., German, and Canadian law enforcement actions on March 19, 2026. Court…
TA4922 is a Chinese-speaking cybercrime actor associated with tax-themed phishing lures targeting Indian taxpayers, tax professionals, and corporate finance teams. The group…
iLOBleed is a rootkit that has been deployed on HPE iLO servers since at least 2020. It targets the Integrated Lights-Out management…
A new Mirai-derived botnet called Tengu can use a compromised Linux device's hardware watchdog to trigger a reboot when defenders kill its…
Tengu is a Mirai-derived botnet that compromises Linux devices via Telnet brute force. It supports 25 DDoS methods, runs a SOCKS5 proxy,…
NightLedger is a previously undocumented Windows backdoor deployed by Nimbus Manticore. It supports reconnaissance, command execution, file operations, process discovery, and screenshot…
The vulnerability CVE-2026-53264 was independently reported by Kyle Zeng (KyleBot) shortly before the TyphoonPwn 2026 competition. Lee Jia Jie later published a…
Coordinated U.S., German, and Canadian law enforcement actions on March 19, 2026 targeted JackSkid and three other IoT botnets. Court documents attributed…
The GCIH certification demonstrates proficiency in incident handling and response, often pursued after SANS SEC504 training.
EAL6+ is a high assurance level under the Common Criteria certification, indicating strong resistance to tampering. The Samsung S3D232A chip in Tangem…
The SEC660 course at SANS Network Security 2026 teaches how to leverage AI for automating tasks while maintaining deep manual understanding of…
SANS SEC504 is a training course covering hacker tools, techniques, and incident handling, leading to GCIH certification.
Mythos Preview is a variant of Claude AI optimized for autonomous research, capable of conducting cryptanalysis and other complex tasks with minimal…
HPE iLO is a server management interface that provides out-of-band management capabilities. It was found to be vulnerable to CVE-2013-4786, with factory…
Supermicro BMC is a management processor embedded in Supermicro servers. It was found to expose IPMI password hashes, with factory passwords recoverable…
odhcpd is the DHCP and DHCPv6 server daemon used in OpenWrt. It runs as root and is affected by CVE-2026-53921, a critical…
Lava is a cybersecurity company that identified the widespread exposure of BMC interfaces leaking IPMI password hashes. Their research highlighted the risks…
HPE is a global enterprise IT company that manufactures servers with Integrated Lights-Out (iLO) management interfaces. Their iLO products were found to…
Supermicro is a technology company specializing in server and storage solutions. Their BMC interfaces were found to expose IPMI password hashes, with…
Eclypsium is a cybersecurity firm focused on firmware and hardware security. They previously highlighted the risks of BMCs as attack targets for…
The Python Package Index is the official repository for third-party Python packages, providing a platform for developers to publish and install software.…
EasySend.co is a file-sharing service used by UAC-0099 to host malicious ZIP archives in their phishing campaign.
Google Cloud is a suite of cloud computing services by Google. Its Fraud Defense team announced the hand gesture verification for reCAPTCHA.
HackerOne is a bug bounty platform used by Intezer to report the Kiro vulnerability to AWS.