CybersecurityBoard.com brings together vulnerability intelligence, security news, MITRE ATT&CK group profiles, cyber events, certifications, training, products, companies and service providers.
CVE-2016-7407 is a vulnerability in the dropbearconvert tool of the Dropbear SSH server, allowing code execution when converting a malicious key file. It was fixed in July 2016 and is flagged by Censys as…
CVE-2021-39275 is an out-of-bounds write vulnerability in Apache HTTP Server 2.4.48 and earlier, rated low risk by Apache. It was patched in…
A critical vulnerability in 7-Zip, identified as CVE-2026-14266, allows attackers to execute arbitrary code by tricking users into opening a specially crafted…
CVE-2026-14266 is a heap-based buffer overflow vulnerability in 7-Zip's XZ decoder, specifically in the MixCoder_Code function. It allows an attacker to execute…
CVE-2026-48095 is a heap-write overflow vulnerability in 7-Zip's NTFS handler, fixed in version 26.01. It was detailed by GitHub Security Lab with…
A heap buffer overflow in NGINX's script engine allows unauthenticated remote attackers to crash worker processes or potentially execute arbitrary code. Affects…
The cybersecurity industry initially focused on the volume of new CVEs introduced by Anthropic's Mythos AI model, but the real threat lies…
Hugging Face, the world's largest open-source AI model repository, disclosed a security breach perpetrated by an autonomous AI agent system. The attack…
Military forces across the U.S., UK, and NATO are accelerating the fielding of autonomous capabilities, shifting focus from platforms to the trusted…
The European Commission has issued binding specification decisions under the Digital Markets Act, ordering Google to grant rival AI assistants the same…
Armenia has detained a Russian tourist, Aleksandr Ermakov, at Yerevan's Zvartnots airport on June 28, 2026, based on a U.S. extradition warrant…
A new class of attack called Agent Data Injection (ADI) has been disclosed by researchers from Seoul National University, the University of…
At least one Russian intelligence service is systematically hijacking internet-connected security cameras across Europe and Ukraine to spy on military logistics, according…
A solo Russian-speaking threat actor known as "bandcampro" has been observed using Google's open-source Gemini CLI AI to control a botnet of…
A solo Russian-speaking threat actor known as bandcampro has been observed using Google Gemini CLI to control a botnet of eight dental…
Russian state-sponsored threat actors from the UAC-0145 sub-cluster, linked to Sandworm and GRU, are using fake CAPTCHA checks on compromised websites to…
Cybersecurity researchers have uncovered a sophisticated software supply chain attack dubbed 'SleeperGem' targeting the Ruby ecosystem. Three malicious gems were published to…
SleeperGem is a software supply chain attack targeting the Ruby ecosystem through three malicious RubyGems packages. The malware acts as a loader,…
Mistic was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
GHETTOVIBE is a VBS file saved in the Startup autorun directory, delivered through fake CAPTCHA checks in the UAC-0145 campaign targeting Ukrainian…
Operation Aquila was an 18-month investigation by Australia's signals directorate and federal police that identified Aleksandr Gennadievich Ermakov as the perpetrator behind…
The TfL Hack occurred from August 31 to September 3, 2024, perpetrated by Scattered Spider members. It disrupted services, compromised data, and…
The GCIH certification demonstrates proficiency in incident handling and response, often pursued after SANS SEC504 training.
EAL6+ is a high assurance level under the Common Criteria certification, indicating strong resistance to tampering. The Samsung S3D232A chip in Tangem…
The SEC660 course at SANS Network Security 2026 teaches how to leverage AI for automating tasks while maintaining deep manual understanding of…
SANS SEC504 is a training course covering hacker tools, techniques, and incident handling, leading to GCIH certification.
Apache HTTP Server is a widely used open-source web server. Version 2.4.48 and earlier are affected by CVE-2021-39275, an out-of-bounds write vulnerability…
Cloudflare was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
RubyGems is the official package registry for the Ruby programming language. It was used as a distribution platform for malicious gems in…
Forgejo is a self-hosted Git service that was used by attackers to host second-stage payloads in the SleeperGem attack.
The AIVD is the civilian intelligence service of the Netherlands. Alongside the MIVD, it published an advisory on July 10, 2026, detailing…
The MIVD is the military intelligence service of the Netherlands. It co-published an advisory with the AIVD on July 10, 2026, revealing…
The threat actor accessed an OpenDental database on eight computers in a dental clinic as part of the botnet operation.
The threat actor used AntiPublic's database of leaked credentials as input for AI-assisted password cracking.
A VPN service provider sanctioned by the U.S. Treasury for enabling ransomware actors and cybercriminals to obscure their origins. Operational since 2014,…
Darktrace was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
CrowdSec was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
LevelBlue was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…