Vulnerability News
Stay up to date on the latest cyber security news from The Cyber Express. Get the inside scoop on global Vulnerability News , privacy breaches, and industry advances. Get informed and stay safe with our in-depth coverage of the cyber world.
Adobe Patches Actively Exploited Acrobat Reader Flaw CVE-2026-34621
Adobe has released an urgent update for Acrobat Reader flaw CVE-2026-34621, a critical issue exploited in the wild that could...
Read moreDetails
Microsoft Recall Flaw Exposes Decrypted User Data, Researchers Find
TotalRecall reveals how Recall’s AES-256-GCM encryption and Windows Hello protections fail once decrypted data reaches an unprotected process.
Read moreDetails
GitLab Security Update Fixes High-Severity CVE-2026-5173, 11 Other Flaws
GitLab security update addresses CVE-2026-5173 and 11 flaws. This GitLab security update security patch fixes DoS and access risks in...
Read moreDetails
ClickFix macOS Attack Uses Script Editor to Bypass Security Controls
A ClickFix-style macOS attack uses Script Editor and an Apple-themed webpage to bypass Terminal protections and deploy malware.
Read moreDetails
Critical Flowise RCE Vulnerability Actively Exploited, Thousands of Systems at Risk
Flowise RCE vulnerability CVE-2025-59528 is actively exploited, allowing attackers to execute arbitrary code on exposed systems worldwide.
Read moreDetails
FortiClientEMS Vulnerabilities Under Active Exploitation, Expose Systems to RCE
CVE-2026-35616 and CVE-2026-21643 flaws in FortiClientEMS enable SQL Injection and RCE, with attackers actively exploiting them in real-world attacks.
Read moreDetails
North Korea Spent 6 Months Infiltrating Drift Protocol Only to Drain $285M in 12 Mins
A $285 million exploit had wiped out more than half of the Solana-based decentralized perpetual futures exchange's total value.
Read moreDetails
Axios Supply Chain Attack Exposes Developers to Hidden Malware
Hijacked Axios maintainer npm Account pushed malicious versions with a RAT, affecting macOS, Windows, and Linux systems across the JavaScript...
Read moreDetails
Multiple Threat Actors Exploiting a Six-Vulnerability iOS Exploit Kit Dubbed “DarkSword”
Researchers disclose a new iOS full-chain exploit kit dubbed DarkSword — a name taken directly from a variable buried inside...
Read moreDetails
A Satellite Receiver Trusted by Pentagon, ESA Has More Than 20 Security Flaws — and the Maker Never Responded
A penetration tester found more than 20 vulnerabilities in a satellite receiver deployed by the U.S. Department of War, the...
Read moreDetails
Sectoral Threat Reports
Latest Cyber News
Web Stories
