CybersecurityBoard.com brings together vulnerability intelligence, security news, MITRE ATT&CK group profiles, cyber events, certifications, training, products, companies and service providers.
CVE-2026-20310 is a critical vulnerability in Cisco Catalyst SD-WAN Software with a CVSS score of 9.9. It involves improper link resolution before file access, which could be exploited to access sensitive files. Cisco has…
CVE-2026-20312 is a high-severity vulnerability in Cisco Catalyst SD-WAN Software with a CVSS score of 8.8. It involves cleartext storage of sensitive…
CVE-2026-20313 is a medium-severity vulnerability in Cisco Catalyst SD-WAN Software with a CVSS score of 7.7. It is caused by improper validation…
CVE-2026-20267 is a high-severity vulnerability in Cisco IOS XE Software with a CVSS score of 9.0. It is caused by improper access…
CVE-2026-20268 is a high-severity vulnerability in Cisco IOS XE Software with a CVSS score of 8.6. It involves buffer overflow and out-of-bounds…
CVE-2026-20269 is a high-severity vulnerability in Cisco IOS XE Software with a CVSS score of 8.6. It is caused by improper control…
Forescout has identified over 4,400 internet-facing Rockwell Automation programmable logic controllers (PLCs) worldwide, including 22 in cities affected by recent cyberattacks on…
A new class of prompt injection attack, dubbed "AI Recommendation Poisoning," is spreading across commercial websites. It exploits pre-filled deep links in…
Attackers breached an organization's Oracle database via a SQL injection flaw in a public-facing web application, then installed a post-exploitation toolkit named…
A federal judge in Alexandria, Virginia, sentenced Maksim Silnikau, a 40-year-old Belarusian national, to 16 years in prison on August 5, 2026,…
Connor Riley Moucka, a 26-year-old Canadian national, pleaded guilty in Seattle federal court to computer fraud, wire fraud, aggravated identity theft, and…
A threat actor exploited the CryptoJS weak RNG to drain over $5.7 million from cryptocurrency wallets across multiple networks.
Ransom Cartel is a ransomware-as-a-service operation created by Maksim Silnikau in 2021. It targeted at least 18 companies across the U.S. and…
UNC5537 is a threat actor tracked by Mandiant, responsible for the 2024 Snowflake customer data breaches. The group exploited stolen credentials from…
DOUBLECUP is a Russian loader-as-a-service (LaaS) operation active since June 2026. It uses ClickFix lures and steganographic PNG images to deliver malware…
khunt is a post-exploitation toolkit that runs inside Oracle databases by compiling Java source code into stored schema objects. It enables command…
rctl (remote control linux) is a simple command and control client/server tool uploaded to GitHub in 2015. It listens on port 7000…
ENDLESSDOORS is a backdoor implant found in Zbtlink router firmware. It is based on the rctl tool and allows unauthenticated remote attackers…
Angler Exploit Kit is a malware toolkit used in malvertising campaigns from 2013 to 2022. It was associated with Maksim Silnikau and…
The Interrupt Injection attack was presented at Black Hat USA, a leading cybersecurity conference. The presentation detailed the technique's ability to bypass…
The research paper on Interrupt Injection is scheduled to be presented at USENIX Security in Baltimore. The paper details the TONTOU attack…
The GCIH certification demonstrates proficiency in incident handling and response, often pursued after SANS SEC504 training.
EAL6+ is a high assurance level under the Common Criteria certification, indicating strong resistance to tampering. The Samsung S3D232A chip in Tangem…
The SEC660 course at SANS Network Security 2026 teaches how to leverage AI for automating tasks while maintaining deep manual understanding of…
SANS SEC504 is a training course covering hacker tools, techniques, and incident handling, leading to GCIH certification.
Cisco Catalyst SD-WAN is a software-defined wide area network solution that simplifies branch networking and optimizes application performance.
Cisco IOS XE is a network operating system for enterprise routers and switches, providing advanced features and programmability.
Cisco Integrated Management Controller (IMC) is a management controller for Cisco servers, providing out-of-band management and monitoring capabilities.
Cisco Secure Firewall Management Center (FMC) is a centralized management platform for Cisco firewall appliances, offering policy management and threat monitoring.
Arm was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
Intel does not consider a mitigation necessary for the Interrupt Injection attack, stating exploitability depends on many factors and that existing guidance…
Researchers Daniël Trujillo and Mengjia Yan from MIT CSAIL discovered the Interrupt Injection attack, which bypasses Spectre v2 defenses on Intel and…
Verizon Business was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs,…
Poison Claude is an underground service selling discounted access to Anthropic's Claude models. It operates as a proxy, giving the operator full…
Ecomagent.in is a gray-market service offering discounted access to Anthropic and OpenAI models via a custom API endpoint, with an estimated 970…
Cloudflare was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
MNIT is the state agency responsible for coordinating the cybersecurity response to the coordinated cyberattack on Minnesota water systems, working with federal…