CybersecurityBoard.com brings together vulnerability intelligence, security news, MITRE ATT&CK group profiles, cyber events, certifications, training, products, companies and service providers.
Gunra Ransomware Exploits Fortinet and Schneider Electric Flaws to Breach Networks Ravie LakshmananAug 11, 2026Ransomware / Threat Intelligence Cybersecurity and intelligence agencies from South Korea and the U.S. warned of Gunra ransomware attacks targeting…
CVE-2024-5559 was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
CVE-2025-24472 was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
CVE-2023-32349 is a vulnerability in Teltonika RUT series routers that requires existing privileges on the device. It was listed in CISA's 2023…
CVE-2023-32350 is another Teltonika RUT series vulnerability that requires existing privileges. It was part of the same CISA advisory and is considered…
CVE-2026-18072 is a vulnerability in the Advanced Responsive Video Embedder WordPress plugin that was exploited in a supply chain attack to grant…
Attackers shut down a steam turbine and the process-water treatment system at a Polish combined heat and power (CHP) plant by breaching…
Cybersecurity researchers have uncovered a supply chain attack targeting WordPress plugin vendor BdThemes, leading to the temporary suspension of several plugins from…
Three independent research efforts presented at Black Hat USA 2026 and in subsequent disclosures have demonstrated practical attacks against passkey implementations, undermining…
OpenAI has announced it is pausing certain internal activities involving its upcoming artificial intelligence model, Astra, after an internal evaluation indicated significant…
New research presented at Black Hat USA 2026 reveals that CSS and HTML techniques can break out of email message boundaries to…
Two security firms have independently discovered that Atlassian's Rovo AI assistant can be tricked into sending sensitive Jira and Confluence data to…
North Korea's Kimsuky hacking group, operating under the Reconnaissance General Bureau, has been assembling an offline artificial intelligence (AI) stack on its…
The Reconnaissance General Bureau (RGB) is North Korea's primary military intelligence agency, overseeing cyber operations. Kimsuky operates under its direction, conducting espionage…
Head Mare is a threat actor that has been observed exploiting vulnerabilities in TrueConf servers to deliver backdoors and remote access trojans.…
Chinese-speaking APT was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs,…
w2.js is a JavaScript payload used in the BdThemes supply chain attack. It contacts a C2 server, creates rogue admin accounts, installs…
x.js is an alternate payload in the BdThemes attack that generates deterministic administrative credentials based on the victim website's hostname, allowing attackers…
emer-run.php is a PHP web shell installed via a fake plugin in the BdThemes supply chain attack, enabling remote code execution on…
The magic-login backdoor is a persistence module installed in the mu-plugins directory that allows unauthenticated administrative entry via a URL parameter targeting…
AI is enabling development teams to ship 10 to 50 times more code, but security teams still operate at human speed, creating…
This webinar by Chainguard explores how security teams can keep up with AI-driven development, addressing the challenges of vulnerability management at scale,…
The GCIH certification demonstrates proficiency in incident handling and response, often pursued after SANS SEC504 training.
EAL6+ is a high assurance level under the Common Criteria certification, indicating strong resistance to tampering. The Samsung S3D232A chip in Tangem…
The SEC660 course at SANS Network Security 2026 teaches how to leverage AI for automating tasks while maintaining deep manual understanding of…
SANS SEC504 is a training course covering hacker tools, techniques, and incident handling, leading to GCIH certification.
Seven Moxa serial device servers were factory-reset and reconfigured by the attacker, disrupting serial communications in the plant.
The Teltonika RUTX50 cellular router was used by the attacker to SSH tunnel into the private APN. Its default password had been…
The WAGO PFC200 controller was exposed on the private APN with default admin credentials, allowing the attacker to gain access and tunnel…
The Siemens S7-300 PLC was one of the controllers switched to STOP mode by the attacker, contributing to the turbine shutdown at…
CERT Polska, the Polish computer emergency response team, disclosed the December 2025 cyberattack on a CHP plant after a three-month investigation. They…
Teltonika's RUTX50 router was used in the attack path. Investigators could not determine if a vulnerability was exploited, but the router's SSH…
The WAGO PFC200 controller was reachable through the private APN and had default admin credentials. The attacker used it to tunnel into…
Seven Moxa serial device servers and three switches were factory-reset by the attacker, given changed passwords and assigned unreachable IP addresses, disrupting…
Bugcrowd is a crowdsourced security platform that facilitated the disclosure of the RovoBlast vulnerability in Atlassian Rovo. The platform rated the issue…
Poison Claude is an underground service selling discounted access to Anthropic's Claude models. It operates as a proxy, giving the operator full…
Ecomagent.in is a gray-market service offering discounted access to Anthropic and OpenAI models via a custom API endpoint, with an estimated 970…
Cloudflare was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…