CybersecurityBoard.com brings together vulnerability intelligence, security news, MITRE ATT&CK group profiles, cyber events, certifications, training, products, companies and service providers.
CVE-2026-17656 was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware, attack groups, companies, products and services can be linked together on CybersecurityBoard.com.
ThreatsDay: AI-Powered Hacking, 370 Chrome Flaws, SonicWall Attacks, DNS Hijacking + 22 More Stories Ravie LakshmananJul 30, 2026Hacking News / Cybersecurity News…
CVE-2026-21858 was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
CVE-2026-34486 was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
CVE-2026-33824 was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
CVE-2026-17650 was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
Security researcher Håkon Måløy disclosed a prompt injection vulnerability in Microsoft 365 Copilot for Word that allows hidden instructions in a document…
The Federal Communications Commission (FCC) added foreign-produced mobile robots and networked power inverters to its Covered List on July 28, 2026, preventing…
Cybersecurity researchers have disclosed details of a large-scale fraud campaign that involves creating lookalike websites of major Russian companies to siphon funds…
A coordinated cyberattack targeting operational technology (OT) at over 30 community water systems in Minnesota occurred on July 26-27, 2026, prompting a…
The article discusses how AI models like Anthropic's Mythos are compressing exploit timelines, forcing a reevaluation of vulnerability management strategies. It argues…
The Federal Security Service of the Russian Federation (FSB) has charged Telegram founder Pavel Durov with aiding terrorist activity and failing to…
Threat actors with ties to North Korea have been attributed to a sophisticated macOS malvertising campaign that involves redirecting users to fake…
UNC5342, also known as Contagious Interview, is a North Korean-linked threat actor cluster that traditionally uses fake job interviews to deliver malware.…
The Chinese cybercrime group Silver Fox has been observed targeting a Japanese industrial manufacturing organization with a sophisticated attack chain that leverages…
Russian threat actors linked to the exploitation of a Zimbra vulnerability have been observed exploiting CVE-2026-42897, a cross-site scripting (XSS) flaw in…
A Node.js backdoor deployed via fake macOS updates, using LaunchAgent for persistence and Ethereum smart contracts for C2 communication. It polls the…
A fake Chrome extension sideloaded by patching Chrome's Secure Preferences file, used to drain cryptocurrency wallets. Part of the DPRK malvertising campaign's…
Winos 4.0 was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs,…
A sophisticated JavaScript backdoor deployed via half-click exploits targeting Microsoft OWA, capable of persistent mailbox access, credential theft, and data exfiltration via…
Wiz researchers presented the complete CosmosEscape exploit chain at Black Hat USA 2026 on August 6, detailing how they achieved sandbox escape…
The vulnerability CVE-2026-53264 was independently reported by Kyle Zeng (KyleBot) shortly before the TyphoonPwn 2026 competition. Lee Jia Jie later published a…
The GCIH certification demonstrates proficiency in incident handling and response, often pursued after SANS SEC504 training.
EAL6+ is a high assurance level under the Common Criteria certification, indicating strong resistance to tampering. The Samsung S3D232A chip in Tangem…
The SEC660 course at SANS Network Security 2026 teaches how to leverage AI for automating tasks while maintaining deep manual understanding of…
SANS SEC504 is a training course covering hacker tools, techniques, and incident handling, leading to GCIH certification.
A vulnerability in Azure Cosmos DB's Gremlin query sandbox allowed code execution on a multi-tenant gateway, exposing a platform-wide signing key that…
Azure Service Fabric clusters hosted the multi-tenant DB Gateway component that was compromised in the CosmosEscape exploit chain. Customer databases were not…
Microsoft Copilot stores user queries and conversation histories in Azure Cosmos DB, which were potentially accessible via the CosmosEscape vulnerability. No unauthorized…
The intelligence engine behind Microsoft 365 Copilot that selects relevant files from OneDrive and other sources for grounding AI drafts.
AllSecure is a cybersecurity company that discovered and reported the DPRK-linked macOS malvertising campaign using fake updates to deliver crypto-stealing malware. CEO…
Check Point Software, a leading cybersecurity provider, announced the AI Network Firewall, the industry's first firewall designed to secure AI interactions at…
Zeon Corporation is a Japanese company involved in chemicals and software. Its legitimate binaries ConvertToPDF.exe and PDFDirect.exe were abused in DLL side-loading…
QQ was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
MNIT is the state agency responsible for coordinating the cybersecurity response to the coordinated cyberattack on Minnesota water systems, working with federal…
Gitea Cloud provides managed hosting for Gitea instances, offering automatic updates and maintenance. It is a service by Gitea for users who…
The Python Package Index is the official repository for third-party Python packages, providing a platform for developers to publish and install software.…
EasySend.co is a file-sharing service used by UAC-0099 to host malicious ZIP archives in their phishing campaign.