Home Category Vulnerability News

Vulnerability News

Stay up to date on the latest cyber security news from The Cyber Express. Get the inside scoop on global Vulnerability News , privacy breaches, and industry advances. Get informed and stay safe with our in-depth coverage of the cyber world.

WinRAR, CVE-2025-8088, Nation-State Actors

Vulnerabilities

Nation-State Hackers, Cybercriminals Weaponize Patched WinRAR Flaw Despite Six-Month-Old Fix

by Mihir Bagwe

January 29, 2026

Google discovered widespread exploitation of a critical WinRAR vulnerability six months after the vendor patched it.

FortiOS, CVE-2025-59718, FortiSIEM Vulnerabiliti, Fortinet, CVE-2025-25256

Vulnerability News

Fortinet Admins Report Active Exploits on “Fixed” FortiOS 7.4.9 Firmware

by Mihir Bagwe

January 22, 2026

Network administrators worldwide are scrambling this morning following credible reports that the critical Fortinet Single Sign-On (SSO) vulnerability, tracked as...

Firewall Daily

Global DNS Crash Triggers Reboot Loops Across Cisco Small Business Switches

by Ashish Khaitan

January 9, 2026

A DNS Crash on January 8, 2026 caused global reboot loops in Cisco Small Business Switches, impacting CBS250, C1200, and...

Cyber News

Critical IBM API Connect Vulnerability Enables Authentication Bypass

by Samiksha Jain

January 5, 2026

Given the critical severity rating, security teams are expected to prioritize remediation and review API access logs for any signs...

Cyber Essentials

Critical ‘MongoBleed’ Flaw Exploited in the Wild to Leak Database Secrets

by Mihir Bagwe

December 29, 2025

A critical vulnerability in MongoDB, the world’s most popular non-relational database, is being actively exploited in the wild.

AI Agent, AI Assistant, Prompy Injection, Claude, Claude AI

Cyber News

Chinese Hackers Weaponize Claude AI to Execute First Autonomous Cyber Espionage Campaign at Scale

by Mihir Bagwe

November 14, 2025

The AI executed thousands of requests per second. That physically impossible attack tempo, sustained across multiple simultaneous intrusions targeting 30...

Vulnerabilities

SessionReaper Exploits Erupt as Magento Sites Lag on Patching

by Mihir Bagwe

October 24, 2025

Six weeks after Adobe shipped an emergency fix, attackers have begun weaponizing SessionReaper — and most Magento stores still stand...

iOS 18.6.2, Zero-Day, Spyware, Security Update

Vulnerability News

Apple Patches Zero-Day in iOS 18.6.2 After Targeted Exploits Involving Malicious Image Files

by Mihir Bagwe

August 21, 2025

Apple on Wednesday released iPadOS/iOS 18.6.2, as a security update addressing a zero-day vulnerability— tracked as CVE-2025-43300. The company said,...

Vulnerabilities

Fortinet Issues Emergency Patch for Actively Exploited Critical FortiSIEM Bug

by Mihir Bagwe

August 13, 2025

Fortinet has urgently notified users of a critical OS command injection vulnerability in its FortiSIEM platform, identified as CVE-2025-25256, which...