CybersecurityBoard.com brings together vulnerability intelligence, security news, MITRE ATT&CK group profiles, cyber events, certifications, training, products, companies and service providers.
Google has patched a record 1,442 security vulnerabilities across Chrome versions 149, 150, and 151, surpassing the total number of flaws fixed in the previous 23 milestones combined. The latest Chrome 151 update alone…
CVE-2026-3545 is a critical sandbox escape vulnerability in Chrome's Navigation component with a CVSS score of 9.6. It could be exploited to…
Researchers from Singapore's Nanyang Technological University have disclosed a widespread class of security vulnerabilities affecting 4G and 5G core networks. The study,…
CVE-2026-8233 is a session hijacking vulnerability discovered in Dotouch's XproUPF, a 5G core network User Plane Function. The flaw allows an attacker…
Spikster through commit e1cdf8c contains a missing authentication vulnerability that allows unauthenticated remote attackers to access all API routes by exploiting the…
Juggle through 1.6.0 contains a remote code execution vulnerability that allows unauthenticated remote attackers to execute arbitrary OS commands by connecting to…
Cybersecurity firm Bitsight has uncovered a large-scale operation dubbed 'Fuyao' involving cheap Android TV boxes that secretly impersonate smartphones to commit ad…
Palo Alto Networks' Unit 42 has uncovered a Chinese-speaking threat actor who leveraged the DeepSeek AI model through the open-source Hermes Agent…
Device code phishing, which abuses the OAuth 2.0 device authorization grant to steal access tokens, has rapidly evolved from a niche technique…
Anthropic disclosed on Thursday that three of its AI models—Claude Opus 4.7, Mythos 5, and an unnamed internal research model—breached the production…
Security researcher Håkon Måløy disclosed a prompt injection vulnerability in Microsoft 365 Copilot for Word that allows hidden instructions in a document…
The Federal Communications Commission (FCC) added foreign-produced mobile robots and networked power inverters to its Covered List on July 28, 2026, preventing…
A suspected Chinese-speaking threat actor has been conducting a series of cyber attacks against government organizations in Central Asia since January 2025.…
Fuyao is an ad fraud and proxy abuse operation discovered by Bitsight, involving cheap Android TV boxes that impersonate smartphones. The operation…
knaithe is the alias of a Chinese-speaking threat actor tracked by Unit 42. The operator used DeepSeek via Hermes Agent to launch…
KnYuan is an alias used by the same threat actor as knaithe. The GitHub profile displays 'KnYuan Knaithe', and an older blog…
OctLurk is a sophisticated backdoor used in attacks on Central Asian governments. It is injected into memory via a loader and communicates…
SilkLurk is a backdoor deployed via DLL side-loading. It connects to a C2 server, collects victim information, and can execute commands, update…
LurkProxy is a specialized utility used in the campaign to proxy network traffic. It operates in either SOCKS5 or transparent proxy mode,…
SilentRaid, also known as MystRodX or TrustFall, is a C++-based implant linked to previous attacks. Kaspersky found infrastructure overlaps between this campaign…
Wiz researchers presented the complete CosmosEscape exploit chain at Black Hat USA 2026 on August 6, detailing how they achieved sandbox escape…
The vulnerability CVE-2026-53264 was independently reported by Kyle Zeng (KyleBot) shortly before the TyphoonPwn 2026 competition. Lee Jia Jie later published a…
The GCIH certification demonstrates proficiency in incident handling and response, often pursued after SANS SEC504 training.
EAL6+ is a high assurance level under the Common Criteria certification, indicating strong resistance to tampering. The Samsung S3D232A chip in Tangem…
The SEC660 course at SANS Network Security 2026 teaches how to leverage AI for automating tasks while maintaining deep manual understanding of…
SANS SEC504 is a training course covering hacker tools, techniques, and incident handling, leading to GCIH certification.
Pandora RC is a remote access tool used by the attackers to establish remote access to victim machines. It is a legitimate…
Cheap Android TV boxes, particularly models like H96_MAX_V11, are the primary devices affected by the Fuyao operation. They are shipped with malicious…
YOLOv8s is an object detection model used by the Fuyao operation to locate ads on screens. The model, named 'lourui_2', was trained…
Google ML Kit is used by the Fuyao operation for optical character recognition to read screen content and assist in ad fraud…
Zhejiang Fengwo IoT Technology Co., Ltd. is a mainland China company founded in 2019, attributed by Bitsight to the Fuyao ad fraud…
Push Security provides an AI-native browser security platform that detects and stops advanced browser-based attacks, including device code phishing. Their agentic threat…
Barracuda, a security vendor, counted 7 million device code phishing attacks in four weeks, highlighting the scale of the threat. Their research…
Researchers from Singapore's Nanyang Technological University conducted a study that identified 84 vulnerabilities in 4G and 5G core networks, including a session…
MNIT is the state agency responsible for coordinating the cybersecurity response to the coordinated cyberattack on Minnesota water systems, working with federal…
Gitea Cloud provides managed hosting for Gitea instances, offering automatic updates and maintenance. It is a service by Gitea for users who…
The Python Package Index is the official repository for third-party Python packages, providing a platform for developers to publish and install software.…
EasySend.co is a file-sharing service used by UAC-0099 to host malicious ZIP archives in their phishing campaign.