Security Board - News

🚨 CVE-2026-46817 — now actively exploited in the wild (CISA KEV). Vulnerability in the Oracle Payments product of Oracle E… Risk 55/100 · EPSS 1% · CVSS 9.8. Patch or mitigate now — attackers are already using it. secboard.org/cve/CVE-2026-4… #KEV #CVE #Oracle #ActivelyExploited

@horizon_secured Sysmon adds visibility, but deployment alone isn't detection. Map high-value events to ATT&CK use cases, forward them reliably, and measure alert coverage—not log volume. More defensive tooling context: secboard.org/insights?categ…

🔒 Secure Bits 💡 Still not using 𝗦𝘆𝘀𝗺𝗼𝗻 to monitor your Windows environment? Most environments skip this-missing out on 𝗰𝗿𝗶𝘁𝗶𝗰𝗮𝗹 𝘃𝗶𝘀𝗶𝗯𝗶𝗹𝗶𝘁𝘆. 𝗪𝗵𝘆 𝗱𝗼𝗲𝘀 𝗦𝘆𝘀𝗺𝗼𝗻 𝗺𝗮𝘁𝘁𝗲𝗿 𝗰𝗼𝗺𝗽𝗮𝗿𝗲𝗱 𝘁𝗼 𝗯𝗮𝘀𝗶𝗰 𝗪𝗶𝗻𝗱𝗼𝘄𝘀 𝗮𝘂𝗱𝗶𝘁𝗶𝗻𝗴? ⚡ Detects advanced attacker techniques (process injection, network connections, DLL loading) ⚡ Provides detailed context that standard logs miss ⚡ Helps uncover lateral movement, persistence, and privilege escalation ⚡ Works beautifully with SIEMs and detection tools 𝗜 𝗿𝗲𝗹𝗲𝗮𝘀𝗲𝗱 𝗮 𝗽𝗿𝗮𝗰𝘁𝗶𝗰𝗮𝗹 𝗴𝘂𝗶𝗱𝗲 𝘀𝗵𝗼𝘄𝗶𝗻𝗴 𝗵𝗼𝘄 𝘁𝗼: ✔️ Build a Sysmon configuration baseline (with my new tool) ✔️ Install & verify Sysmon ✔️ Reduce noise and tune your logs 𝗡𝗢𝗧𝗘: Windows 11 and Windows Server 2025 support "built-in Sysmon". That basically means you don't need to download and distribute binaries, and you just enable it as a feature. The guide covers the installation through those binaries, but can be helpful also for the "built-in Sysmon", as everything else is the same procedure. 💬 No fluff-just the step-by-step that works. 📄 Download the 𝗣𝗗𝗙 𝗶𝗻 𝗺𝘆 𝗮𝗰𝗮𝗱𝗲𝗺𝘆 and take your Windows logging to the next level: academy.horizon-secured.com/p/windows-infr… #Windows #Sysmon #ActiveDirectory #CyberSecurity

@The_Cyber_News Physical access is often treated as out of scope—but for lost, stolen or serviced devices it is the threat model. Patch CVE-2026-50661, then verify BitLocker state, recovery-key handling and boot-chain protections. Details: secboard.org/cve/CVE-2026-5…

🚨 A newly disclosed Windows BitLocker 0‑day vulnerability, tracked as CVE-2026-50661, exposes encrypted devices to physical attacks that can completely undermine Microsoft’s disk encryption guarantees. The Flaw stems from a protection mechanism failure in BitLocker’s device encryption workflow, allowing an unauthorized attacker with hands-on access to a system to circumvent BitLocker and access data stored on the system drive. Administrators are urged to deploy the July 2026 security updates across all affected Windows 10, Windows 11, and Windows Server instances and verify that BitLocker remains enabled and correctly configured after patching. #cybersecuritynews

@Daily_CyberSec 222 repositories show why commit activity alone is not a trust signal. For Go dependencies, verify module provenance, pin versions and flag unexpected PowerShell execution or outbound downloads. More supply-chain signals and defensive context: secboard.org/it-saas

A malicious Go module exposed a GitHub lure network of 222 repositories, dubbed Operation Muck and Load, staging RATs and infostealers. #GoModule #SupplyChain #GitHub #Malware #InfoStealer #AsyncRAT #DevSecOps #InfoSec securityonline.info/malicious-go-m…

@The_Cyber_News 570 fixes make prioritization the real challenge. Start with the actively exploited AD FS and SharePoint flaws (CVE-2026-56155 / CVE-2026-56164), then assess the publicly disclosed BitLocker bypass. More CVE and exploit context: secboard.org

Microsoft’s July 2026 Patch Tuesday delivers fixes for approximately 570 vulnerabilities across its product ecosystem, following June’s record-breaking release of 206 flaws that also included three publicly disclosed zero-days. 📌 CVE-2026-56164 📌 CVE-2026-56155 📌 CVE-2026-50661 This month’s rollout includes two Critical-rated Remote Code Execution bugs in SharePoint and Print Spooler, alongside dozens of Important-severity Elevation of Privilege and RCE issues affecting core Windows components. #cybersecuritynews #microsoft #patchtuesday

🧭 Attack technique trending in current threats: T1592.002 Software It's the most-referenced MITRE ATT&CK technique across this week's reports — worth checking your detections cover it. secboard.org/attck-matrix?l… #ThreatIntel #MITREATTACK #RedTeam

🚨 CVE-2024-11680 — now actively exploited in the wild (CISA KEV). ProjectSend versions prior to r1720 are affected by an improper… Risk 82/100 · EPSS 92% · CVSS 9.8. Patch or mitigate now — attackers are already using it. secboard.org/cve/CVE-2024-1… #KEV #CVE #ActivelyExploited

🚨 CVE-2025-3248 — now actively exploited in the wild (CISA KEV). Langflow versions prior to 1.3.0 are susceptible to c… Risk 84/100 · EPSS 100% · CVSS 9.8. Patch or mitigate now — attackers are already using it. secboard.org/cve/CVE-2025-3… #KEV #CVE #Langflow #ActivelyExploited

🚨 CVE-2026-15410 — now actively exploited in the wild (CISA KEV). Post-authentication improper control of generation of code ('Code Injectio… Risk 48/100 · CVSS 7.2. Patch or mitigate now — attackers are already using it. secboard.org/cve/CVE-2026-1… #KEV #CVE #ActivelyExploited

🚨 CVE-2026-15409 — now actively exploited in the wild (CISA KEV). A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000… Risk 30/100. Patch or mitigate now — attackers are already using it. secboard.org/cve/CVE-2026-1… #KEV #CVE #ActivelyExploited

🚨 CVE-2025-2749 — now actively exploited in the wild (CISA KEV). An authenticated remote code execution in Kentico Xperience… Risk 49/100 · EPSS 4% · CVSS 7.2. Patch or mitigate now — attackers are already using it. secboard.org/cve/CVE-2025-2… #KEV #CVE #RCE #ActivelyExploited

🚨 CVE-2026-32201 — now actively exploited in the wild (CISA KEV). Improper input validation in Microsoft Office Share… Risk 53/100 · EPSS 23% · CVSS 6.5. Patch or mitigate now — attackers are already using it. secboard.org/cve/CVE-2026-3… #KEV #CVE #SharePoint #ActivelyExploited

🚨 CVE-2009-0238 — now actively exploited in the wild (CISA KEV). Microsoft Office Excel 2000 SP3, 2002 SP3, 2003 SP3, and 2007 SP… Risk 65/100 · EPSS 43% · CVSS 8.8. Patch or mitigate now — attackers are already using it. secboard.org/cve/CVE-2009-0… #KEV #CVE #ActivelyExploited

🚨 CVE-2023-27351 — now actively exploited in the wild (CISA KEV). This vulnerability allows remote attackers to bypass authentica… Risk 72/100 · EPSS 77% · CVSS 7.5. Patch or mitigate now — attackers are already using it. secboard.org/cve/CVE-2023-2… #KEV #CVE #ActivelyExploited

🚨 CVE-2024-27199 — now actively exploited in the wild (CISA KEV). In JetBrains TeamCity before 2023.11.4 path traversal allowing… Risk 78/100 · EPSS 100% · CVSS 7.3. Patch or mitigate now — attackers are already using it. secboard.org/cve/CVE-2024-2… #KEV #CVE #ActivelyExploited

🚨 CVE-2026-56164 — now actively exploited in the wild (CISA KEV). Missing authentication for critical function in Microsoft Offi… Risk 43/100 · CVSS 5.3. Patch or mitigate now — attackers are already using it. secboard.org/cve/CVE-2026-5… #KEV #CVE #SharePoint #ActivelyExploited

🚨 CVE-2026-56155 — now actively exploited in the wild (CISA KEV). Insufficient granularity of access control in Active Dire… Risk 50/100 · CVSS 7.8. Patch or mitigate now — attackers are already using it. secboard.org/cve/CVE-2026-5… #KEV #CVE #ActiveDirectory #ActivelyExploited

⚠️ CVE-2026-22200 — high exploit probability. Enhancesoft osTicket versions 1.18.x prior to 1.18.3 and 1.17.x prior to 1.17.7 contain an arbitrary file read vulnerabi… EPSS 73% · CVSS 7.5 · Risk 41/100. Patch before it's weaponised. secboard.org/cve/CVE-2026-2… #CVE #ThreatIntel

🚨 CVE-2025-13223 — now actively exploited in the wild (CISA KEV). Type Confusion in V8 in Google Chrome prior to 142.0.744… Risk 53/100 · EPSS 5% · CVSS 8.8. Patch or mitigate now — attackers are already using it. secboard.org/cve/CVE-2025-1… #KEV #CVE #Chrome #ActivelyExploited

🚨 CVE-2025-10585 — now actively exploited in the wild (CISA KEV). Type confusion in V8 in Google Chrome prior to 140.0.733… Risk 56/100 · EPSS 5% · CVSS 9.8. Patch or mitigate now — attackers are already using it. secboard.org/cve/CVE-2025-1… #KEV #CVE #Chrome #ActivelyExploited