CVE-2026-32475: Elementor Pro File Upload RCE
Critical vulnerability in Elementor Pro WordPress plugin allowing unauthenticated attackers to upload PHP files and execute code. CVSS 9.0. Affects versions up to 4.2.1. Patched in 4.2.2.
Live cyber intelligence board
Track CVEs, attack groups, malware, vendors and training in one place.
CybersecurityBoard.com brings together vulnerability intelligence, security news, MITRE ATT&CK group profiles, cyber events, certifications, training, products, companies and service providers.
Latest Critical CVEs
All CVEs →Critical Elementor Pro Flaw Allows Unauthenticated PHP Upload and RCE
Cybersecurity researchers have disclosed a critical vulnerability in the Elementor Pro WordPress plugin that could allow unauthenticated attackers to upload PHP files…
Critical macOS, SharePoint, vCenter, and Microsoft IKE Flaws Under Active Exploitation
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added four critical vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, confirming active…
CVE-2021-33044: Dahua IP Camera Authentication Bypass
CVE-2021-33044 is an authentication-bypass vulnerability in Dahua IP cameras and related products. Attackers can bypass device identity authentication by constructing malicious data…
CVE-2021-33045: Dahua IP Camera Authentication Bypass via Loopback
CVE-2021-33045 is an authentication-bypass vulnerability in Dahua IP cameras. It involves a loopback login request using the 127.0.0.1 address. The flaw allows…
CVE-2024-39943: Rejetto HFS Command Injection
CVE-2024-39943 is an operating-system command-injection flaw in Rejetto HFS. It was associated with the recovered tooling in the Operation CameraSwarm campaign but…
Latest Cyber News
All news →Cloudflare Workers Spectre Attack Leaks JWT at 12 Bits Per Second
Cybersecurity researchers have disclosed a remote Spectre attack against Cloudflare Workers that leaked a JSON Web Token (JWT) from a co-located Worker…
OpenAI Pauses Frontier RL Training to Bolster AI Safety Defenses
OpenAI has announced a temporary pause in reinforcement learning (RL) training for its most advanced AI models to strengthen safety and security…
Phishing 3.0: Agentic AI Drives the Need for Defensive Agents
Phishing has evolved from malicious content (Phishing 1.0) to malicious intent (Phishing 2.0) and now to AI-powered, multi-channel attacks (Phishing 3.0). In…
Hackers Compromised 14,500+ Dahua Devices Using Credential Attacks, Auth Bypasses, and P2P
Cybersecurity researchers at Hunt.io have disclosed a campaign, dubbed Operation CameraSwarm, that compromised more than 14,530 Dahua devices between June 17 and…
Ransom Busters Scam Targets Ransomware Victims with Fake Data Deletion Services
A threat actor calling itself 'Ransom Busters' is targeting ransomware victims with a novel extortion scheme, offering to delete stolen data from…
AI ‘Mind Viruses’ Can Spread Between Agents via Persistent Prompt Files
Researchers at Anthropic and Switzerland's EPFL have demonstrated that self-propagating payloads, dubbed "mind viruses," can spread between AI agents through editable system…
Latest Attack Groups
MITRE groups →SilkParasite Espionage Campaign Targets Central Asian Governments with Five New RATs
A newly uncovered cyber espionage operation dubbed SilkParasite has been targeting government bodies in Central Asia, according to a technical report from…
SilkParasite: China-Nexus Espionage Group Targets Central Asian Governments
SilkParasite is a China-nexus cyber espionage threat cluster first discovered in late 2025. It targets government bodies in Central Asia, using a…
UAC-0063: Prior Threat Actor Targeting Central Asia
UAC-0063 is a threat actor previously identified as targeting Central Asia, often using cyber espionage tactics. It is one of the groups…
FamousSparrow: Espionage Group Active in Central Asia
FamousSparrow is a threat actor known for targeting government entities in Central Asia, often exploiting vulnerabilities in web applications and using custom…
Latest Malware
Malware →40 Malicious Firefox Extensions Pose as Web3 Products to Steal Wallet Secrets
A set of 40 malicious Mozilla Firefox extensions has been discovered masquerading as popular Web3 products like OKX, Rabby Wallet, and TronLink…
Offside Wallet Theft Factory: Malicious Firefox Extensions Target Web3 Wallets
A campaign dubbed 'Offside Wallet Theft Factory' involves 40 malicious Firefox extensions that masquerade as Web3 products to steal cryptocurrency wallet secrets.…
DriveSilkRAT: New RAT Using Google Drive as C2
DriveSilkRAT is a newly discovered remote access tool written in .NET/C++ that uses Google Drive as its command-and-control channel. It supports 12…
CookiETagRAT: RAT Using HTTP Headers for C2
CookiETagRAT is a C++-based remote access tool that uses HTTP Cookie and ETag response headers as its command-and-control mechanism to receive and…
Events, Certifications & Training
Explore →USENIX Security ’23 Research on Ledger Breach Victims
Researchers presented a survey of Ledger breach victims at USENIX Security '23, documenting spam, scams, phishing, and safety concerns following the 2020…
Microsoft August 2026 Patch Tuesday Addresses 421 Flaws
Microsoft's August 2026 Patch Tuesday included patches for 421 security flaws, including 236 in Windows, and addressed critical vulnerabilities such as CVE-2026-50656,…
ISO/IEC 27001:2022 Annex A Access Control and Identity Management
ISO/IEC 27001:2022 is an international information security management standard. Its Annex A includes access control and identity management controls that organizations can…
GIAC Certified Incident Handler (GCIH)
The GCIH certification demonstrates proficiency in incident handling and response, often pursued after SANS SEC504 training.
SEC660 Course Update Integrates AI Automation with Manual Exploit Skills
The SEC660 course at SANS Network Security 2026 teaches how to leverage AI for automating tasks while maintaining deep manual understanding of…
SANS SEC504: Hacker Tools, Techniques, and Incident Handling
SANS SEC504 is a training course covering hacker tools, techniques, and incident handling, leading to GCIH certification.
Products, Services & Companies
Browse market →OKX — Cybersecurity product profile
OKX was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
TronLink Impersonated in Wallet Theft Campaign
TronLink, a Web3 wallet, is among the products impersonated by malicious Firefox extensions designed to steal recovery phrases and private keys.
Elementor Pro: WordPress Plugin with Critical RCE Flaw
A popular WordPress page builder plugin. Versions up to 4.2.1 are vulnerable to unauthenticated PHP upload and RCE (CVE-2026-32475). Patched in 4.2.2.
V8 Sandbox: Mitigation for Transient Execution Attacks
The V8 Sandbox is a security mechanism in the V8 JavaScript engine that limits transient access to 64-bit pointers, helping to mitigate…
Rabby Wallet — Cybersecurity company profile
Rabby Wallet was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs,…
TronLink — Cybersecurity company profile
TronLink was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
Supabase — Cybersecurity company profile
Supabase was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
API-Sports — Cybersecurity company profile
API-Sports was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
Supabase Abused as Remote Switch in Malicious Extensions
Seven malicious Firefox extensions use threat actor-controlled Supabase projects to dynamically serve phishing or decoy content, abusing the platform's infrastructure.
API-Sports Credential Shared in Malicious Extensions
The 37 sports-score shell extensions share a hard-coded credential for API-Sports, a legitimate sports data service, indicating coordinated infrastructure.
Cloudflare Workers Used for Data Exfiltration
Fifteen malicious Firefox extensions exfiltrate wallet secrets through Cloudflare Workers, leveraging the service for data theft.
Twilio: TURN Relay Service Abused by msaRAT
msaRAT uses Twilio TURN relays to establish WebRTC DataChannels between the browser and C2 server.