The Cyber Express

Check Point found a ChatGPT sandbox flaw that let planted prompts move a victim's Gmail data to an attacker's account...

Microsoft's September 2026 Patch Tuesday sets a record with 974 CVE fixes, including two actively exploited zero-day vulnerabilities.

A misconfigured Elasticsearch cluster exposed roughly 220.8 million airline passenger and crew records, including passport numbers and full itineraries, before...

Attackers are exploiting StyleSmuggler, an unpatched Magento and Adobe Commerce zero-day, to backdoor online stores. No Adobe patch as of...

Attackers exploited MikroTik RouterOS flaws from Sept. 2, a day before patches shipped. CERT Polska details the MikroTrick chain; 122,500...

The Liquid Network security incident involved nearly 4,000 BTC, with purported white-hat hackers offering to return most funds after a...

The Mathspace data breach exposed information belonging to 1,079,819 people. Here’s what happened, what data was affected and what users...

The advisory emphasizes that the shift to post-quantum cryptography cannot be solved by individual organizations in isolation.

The advisory said several organizations had experienced operational disruptions and financial losses after attackers interfered with industrial processes.

This week’s cybersecurity roundup covers Claude session hijacking, PaperCut exploits, Boston Scientific’s cyberattack, X account attacks, and Citrix flaws.