Vulnerability News
Stay up to date on the latest cyber security news from The Cyber Express. Get the inside scoop on global Vulnerability News , privacy breaches, and industry advances. Get informed and stay safe with our in-depth coverage of the cyber world.
Januscape Flaw in Linux KVM’s MMU Code Enables VM Escape on Intel and AMD
Januscape (CVE-2026-53359) is a Linux KVM vulnerability in the shadow MMU code that allows VM escape and host compromise on...
Read moreDetails
Apple Security Update Patches 30+ Vulnerabilities in iOS 26.5.2
Apple said the flaws were addressed through improved memory management, input validation, bounds checking, and stronger security origin tracking.
Read moreDetails
CVE-2026-20245 Zero-Day Exploited in Cisco Catalyst SD-WAN Manager to Gain Root Access
A threat actor exploited CVE-2026-20245 in Cisco Catalyst SD-WAN Manager to gain root access, steal data, and erase forensic evidence.
Read moreDetails
Multiple Vulnerabilities in QNAP NAS Devices Resolved Through Security Updates
Multiple vulnerabilities in QNAP NAS, including CVE-2025-59382, have been patched after exposing devices to code execution and DoS risks.
Read moreDetails
CVE-2026-48907 and LiteSpeed cPanel Plugin Flaws Come Under Active Attack
CVE-2026-48907 and a LiteSpeed cPanel plugin flaw are under active attack, exposing Joomla sites and shared hosting servers to compromise.
Read moreDetails
New iPhone BootROM Flaw Enables Hardware-Level Compromise
Researchers reveal iPhone BootROM vulnerability impacting A12, A13 and Apple Watch, enabling SecureROM code compromise via USB controller flaw.
Read moreDetails
Windows Defender Vulnerability Exposed as RoguePlanet PoC Spreads Online
RoguePlanet (CVE-2026-50656) exploits a Windows Defender TOCTOU flaw, enabling SYSTEM privilege escalation on fully patched Windows devices.
Read moreDetails
Critical SearchLeak Flaw in Microsoft 365 Copilot Exposed Sensitive Enterprise Data
The SearchLeak vulnerability let attackers steal data from Microsoft 365 Copilot Enterprise through a malicious link before CVE-2026-42824 was fixed.
Read moreDetails
Splunk Urges Immediate Patching of Critical Flaw Enabling Arbitrary File Operations
A critical Splunk Enterprise flaw, CVE-2026-20253, could enable unauthenticated file operations and remote code execution.
Read moreDetails
The Cyber Express Weekly Roundup: AI Security Controls, Major Patch Releases, Public Sector Audits, and Emerging Online Scams
This week’s weekly roundup covers AI security controls, Microsoft's Patch Tuesday, CBSE audits, UK court AI trials, and FIFA 2026...
Read moreDetails
Q1 2026 Threat Reports
Latest Cyber News
Web Stories
