Vulnerability News
Stay up to date on the latest cyber security news from The Cyber Express. Get the inside scoop on global Vulnerability News , privacy breaches, and industry advances. Get informed and stay safe with our in-depth coverage of the cyber world.
Kraken vs Certik: A Dispute Over a $3 Million Zero-Day and Bug Bounty Ethics
In a high-stakes clash within the crypto verse, Kraken, a leading U.S. cryptocurrency exchange, has accused blockchain security firm Certik...
Read moreDetails
Weekly Vulnerability Report: Critical Security Flaws Identified by Cyble in GitHub, FortiOS, and PHP
The Cyber Express, in collaboration with Cyble Research & Intelligence Labs (CRIL), is dedicated to providing the latest and most...
Read moreDetails
Black Basta Ransomware Affiliates Possibly Exploited Windows Bug as a Zero-Day
The Black Basta ransomware gang may have exploited a Windows privilege escalation vulnerability as a zero-day before it was patched,...
Read moreDetails
Researcher Finds Vulnerability in Kyber Post-Quantum Key Encapsulation Mechanism (KEM)
A security researcher discovered an exploitable timing leak in the Kyber key encapsulation mechanism (KEM) that’s in the process of...
Read moreDetails
NIST Hires External Contractor to Help Tackle National Vulnerability Database Backlog
The U.S. National Institute of Standards and Technology (NIST) has taken a big step to address the growing backlog of...
Read moreDetails
Multiple Vulnerabilities Reported in LenelS2 NetBox Entry Tracking and Event Monitoring Tool
Carrier has issued a serious product security advisory confirming the existence of several vulnerabilities in its LenelS2 NetBox access control...
Read moreDetails
Check Point VPN Fix Released After Researchers Observe Malicious Access Attempts
Check Point researchers have observed a surge in threat actor groups targeting remote-access VPN environments as an entry point for...
Read moreDetails
Chrome Fixes Fourth Zero-Day in Two Weeks, Eighth in 2024
Google released a new Chrome update on Thursday to fix the fourth zero-day vulnerability in two weeks and eighth overall...
Read moreDetails
Thousands at Risk in the U.S. from Critical GitHub Enterprise Server Flaw
Thousands of GitHub Enterprise Server (GHES) instances in the United States using SAML single sign-on (SSO) authentication are at high...
Read moreDetails
Microsoft Addresses Zero-Day Vulnerability Exploited by QakBot Malware
Microsoft patched a zero-day vulnerability exploited by attackers to distribute QakBot and other malware payloads on susceptible Windows systems. Identified...
Read moreDetailsQ1 2026 Threat Reports
