CybersecurityBoard.com brings together vulnerability intelligence, security news, MITRE ATT&CK group profiles, cyber events, certifications, training, products, companies and service providers.
CVE-2023-24489 is an unauthenticated vulnerability in Citrix ShareFile Storage Zones Controller that was actively exploited in 2023. CISA flagged it as exploited, leading Citrix to block unpatched controllers from the ShareFile cloud.
Researchers at firmware security firm Binarly have discovered six new vulnerabilities in U-Boot, the widely used bootloader for devices ranging from home…
A vulnerability in U-Boot's FIT image signature verification allowed a tampered image to swap in unsigned components, bypassing integrity checks. Patched in…
Security researcher Chinmohan Nayak has detailed a WhatsApp-to-host attack chain leveraging three now-patched vulnerabilities in the OpenClaw personal AI assistant. The flaws,…
A critical unpatched vulnerability, dubbed XRING, has been disclosed in XQUIC, Alibaba's open-source QUIC and HTTP/3 library. Discovered by FoxIO researcher Sébastien…
CVE-2016-6329 is a vulnerability in the Blowfish cipher that allows an attacker to recover data from long-running connections due to weak encryption.…
Progress Software has instructed ShareFile customers to immediately shut down Windows servers running Storage Zone Controllers in response to a credible external…
Researchers at Ledger's Donjon security team have demonstrated a laser fault injection attack that can reset the password on Tangem crypto wallet…
A comprehensive study of 281 popular free Android VPN apps from the Google Play Store, conducted by researchers at the University of…
A cybercrime crew left its server exposed for three weeks, revealing the inner workings of a mass site-hacking operation tracked as WP-SHELLSTORM.…
A 41-year-old former ransomware negotiator, Angelo Martino, has been sentenced to 70 months in prison for conspiring with the now-defunct BlackCat ransomware…
Datadog Security Labs has uncovered several overlapping campaigns that leverage dormant GitHub accounts—some created two to five years ago—to systematically enumerate corporate…
The Clop ransomware group exploited a zero-day vulnerability in Progress MOVEit in 2023, impacting over 2,700 organizations. They are known for large-scale…
A sophisticated threat actor tracked as O-UNC-066 by Okta is targeting organizations across multiple sectors with a voice-based phishing (vishing) scheme that…
O-UNC-066 is a threat actor tracked by Okta that has been conducting voice-based phishing attacks targeting Microsoft 365 users. The actor uses…
CL-CRI-1147 is the identifier used by Palo Alto Networks Unit 42 for a threat cluster involved in fake passkey enrollment attacks. This…
Unknown threat actors compromised the Injective Labs SDK project's GitHub repository and leveraged it to publish a malicious package on the npm…
The RustDuck botnet has been rewritten in Rust, targeting routers and servers to launch distributed denial-of-service attacks.
BlueHammer ransomware is a newly identified strain that encrypts files and demands payment. It has been observed in recent attacks.
The China-linked cybercrime group Silver Fox has been attributed to a new Rust-based remote access trojan (RAT) called MODBEACON. Chinese cybersecurity company…
SANS Virginia Beach offers in-person training courses like SEC504 in the fall, with 44 labs and hands-on learning.
The MVPNalyzer framework was presented at the Network and Distributed System Security (NDSS) symposium in February 2026, detailing findings from a study…
The GCIH certification demonstrates proficiency in incident handling and response, often pursued after SANS SEC504 training.
EAL6+ is a high assurance level under the Common Criteria certification, indicating strong resistance to tampering. The Samsung S3D232A chip in Tangem…
SANS SEC504 is a training course covering hacker tools, techniques, and incident handling, leading to GCIH certification.
SANS San Antonio 2026 was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber…
ShareFile is a secure file sharing and collaboration platform owned by Progress Software. It offers cloud-only and hybrid storage options via Storage…
The Storage Zone Controller is a self-hosted Windows server that allows organizations to keep files on their own storage while using ShareFile's…
U-Boot is a widely used open-source bootloader for embedded devices, routers, and server management controllers. Six new flaws were found in its…
Metasploit is a key tool in SANS SEC504 training for incident handling and penetration testing.
Injective Labs is a blockchain development company focused on decentralized finance (DeFi) and cryptocurrency solutions. Their SDK was compromised in a supply…
Binarly is a firmware security company that discovered six new vulnerabilities in U-Boot, including two code-execution flaws. They published advisories BRLY-2026-037 through…
SANS provides training courses like SEC504 for incident handling and cyber defense, with labs and certifications such as GCIH.
Cyera previously disclosed the Claw Chain vulnerabilities in OpenClaw, which required prior foothold for exploitation.
Exaforce MDR offers managed security operations using the same agentic AI platform as the in-house solution. Customers like Forcepoint have achieved 14-minute…
BELQI is a Russian service that received part of the extortion payment from Kairos, used in the money laundering chain.
019Mobile is a telecom service provider mentioned as being abused in surveillance campaigns exploiting SS7 and Diameter protocols.
Airtel Jersey is a telecom service provider, part of Sure Group, mentioned as being abused in surveillance campaigns exploiting SS7 and Diameter…