The Cyber Express

CISA added CVE-2026-48939 and CVE-2026-56291 to KEV after active zero-day attacks targeted Joomla iCagenda and Balbooa extensions.

Odido attributed the attack to the cybercriminal group ShinyHunters, which the company said carried out the social engineering campaign.

Cyberattacks on South Korea military hit a five-year high as phishing emails increased and the Ministry of National Defense faced...

The organization also noted that several legal mechanisms remain available even without the temporary derogation.

Enterprise infrastructure is increasingly under pressure as attackers and researchers alike expose weaknesses across the technology stack. This week, a...

Ubiquiti fixes CVE-2026-50746 and 24 other UniFi OS vulnerabilities, urging users to update affected applications and devices immediately.

CERT disclosed CVE-2026-11405, an unpatched Tenda firmware backdoor enabling admin access through authentication bypass on devices.

Wireshark 4.6.7 fixes 12 security flaws and 16 bugs across SSH, IEEE 802.11, Catapult DCT2000, extcap, parsers and file readers.

Januscape (CVE-2026-53359) is a Linux KVM vulnerability in the shadow MMU code that allows VM escape and host compromise on...

Mount Royal University cyberattack exposed employee and student data in June as investigators continue assessing the full scope of the...