Tag: The Cyber Express

A ClickFix-style macOS attack uses Script Editor and an Apple-themed webpage to bypass Terminal protections and deploy malware.

The company identified the issue after detecting unusual activity within its systems and later confirmed the exposure of personal data.

Flowise RCE vulnerability CVE-2025-59528 is actively exploited, allowing attackers to execute arbitrary code on exposed systems worldwide.

When systems go down, the impact is immediate. Public services are disrupted, and recovery can take time.

APT28 exploited routers for DNS hijacking and adversary-in-the-middle attacks before an FBI operation disrupted the malicious network.

By targeting PLCs, threat actors are going straight to the systems that control physical processes.

The EU’s CSAM law lapse creates a dangerous gap, weakening detection efforts and risks of child sexual exploitation online.

Subsequent actions, including the release of a free decryption key, weakened the group’s operations significantly.

CVE-2026-35616 and CVE-2026-21643 flaws in FortiClientEMS enable SQL Injection and RCE, with attackers actively exploiting them in real-world attacks.

For individuals and organizations, the risk is no longer occasional—it is constant, and it is evolving.