Vulnerability News

Stay up to date on the latest cyber security news from The Cyber Express. Get the inside scoop on global Vulnerability News , privacy breaches, and industry advances. Get informed and stay safe with our in-depth coverage of the cyber world.

Firewall Daily

Global DNS Crash Triggers Reboot Loops Across Cisco Small Business Switches

January 9, 2026

A DNS Crash on January 8, 2026 caused global reboot loops in Cisco Small Business Switches, impacting CBS250, C1200, and...

Cyber News

Critical IBM API Connect Vulnerability Enables Authentication Bypass

by Samiksha Jain

January 5, 2026

Given the critical severity rating, security teams are expected to prioritize remediation and review API access logs for any signs...

Cyber Essentials

Critical ‘MongoBleed’ Flaw Exploited in the Wild to Leak Database Secrets

by Mihir Bagwe

December 29, 2025

A critical vulnerability in MongoDB, the world’s most popular non-relational database, is being actively exploited in the wild.

AI Agent, AI Assistant, Prompy Injection, Claude, Claude AI

Cyber News

Chinese Hackers Weaponize Claude AI to Execute First Autonomous Cyber Espionage Campaign at Scale

by Mihir Bagwe

November 14, 2025

The AI executed thousands of requests per second. That physically impossible attack tempo, sustained across multiple simultaneous intrusions targeting 30...

Vulnerabilities

SessionReaper Exploits Erupt as Magento Sites Lag on Patching

by Mihir Bagwe

October 24, 2025

Six weeks after Adobe shipped an emergency fix, attackers have begun weaponizing SessionReaper — and most Magento stores still stand...

iOS 18.6.2, Zero-Day, Spyware, Security Update

Vulnerability News

Apple Patches Zero-Day in iOS 18.6.2 After Targeted Exploits Involving Malicious Image Files

by Mihir Bagwe

August 21, 2025

Apple on Wednesday released iPadOS/iOS 18.6.2, as a security update addressing a zero-day vulnerability— tracked as CVE-2025-43300. The company said,...

FortiOS, CVE-2025-59718, FortiSIEM Vulnerabiliti, Fortinet, CVE-2025-25256

Vulnerabilities

Fortinet Issues Emergency Patch for Actively Exploited Critical FortiSIEM Bug

by Mihir Bagwe

August 13, 2025

Fortinet has urgently notified users of a critical OS command injection vulnerability in its FortiSIEM platform, identified as CVE-2025-25256, which...

Cyber News

Zero-Day Vulnerability Hits Microsoft SharePoint, Urgent Patch Issued

by Samiksha Jain

July 21, 2025

Microsoft confirmed that the attacks do not affect SharePoint Online, which is hosted in the cloud as part of Microsoft...

Firewall Daily

Google Chrome’s May Update: What You Need to Know About CVE-2025-4372 and More

by Ashish Khaitan

May 16, 2025

Google Chrome’s latest update (136.0.7103.113/.114) addresses critical vulnerabilities like CVE-2025-4372, CVE-2025-4664, and CVE-2025-2783, including an active zero-day exploit.