Vulnerability News
Stay up to date on the latest cyber security news from The Cyber Express. Get the inside scoop on global Vulnerability News , privacy breaches, and industry advances. Get informed and stay safe with our in-depth coverage of the cyber world.
New Parallels Desktop Flaw Lets Local Users Seize Root Control of Macs
A Parallels Desktop bug dubbed ParaShells (CVE-2026-90894) lets local Mac users escalate to root. Here's how the exploit chain works.
Read moreDetails
Apple Patches 273 Vulnerabilities as iOS 26.7 Rolls Out
This Apple security update brings iOS 26.7 and iOS 27, fixing 273 vulnerabilities across iPhone, iPad, Mac, and more Apple...
Read moreDetails
4 in 5 Singapore Business Websites Have WordPress Vulnerabilities
A Singapore Study reveals WordPress Vulnerabilities affect 4 in 5 business sites, with 1 in 3 rated High or Critical...
Read moreDetails
Nintendo Switch Flaw Lets Nearby Attackers Run Code, Steal Data
Nintendo confirms a security flaw in the original Switch tied to QR codes. Here's how the exploit works and how...
Read moreDetails
AI Agents Compromised 440 PaperCut Servers, Researchers Say
GreyNoise says AI agents compromised 440 PaperCut servers in 48 countries.
Read moreDetails
ChatGPT Sandbox Flaw Let a Planted Prompt Ship Victim’s Gmail Data to Another Account
Check Point found a ChatGPT sandbox flaw that let planted prompts move a victim's Gmail data to an attacker's account...
Read moreDetails
Microsoft Patch Tuesday Hits Record 974 CVEs, Two Exploited
Microsoft's September 2026 Patch Tuesday sets a record with 974 CVE fixes, including two actively exploited zero-day vulnerabilities.
Read moreDetails
Attackers Exploit Unpatched Magento Zero-Day to Backdoor Online Stores
Attackers are exploiting StyleSmuggler, an unpatched Magento and Adobe Commerce zero-day, to backdoor online stores. No Adobe patch as of...
Read moreDetails
Pegasus, New NoviSpy Variant Found on Serbian Students and Opposition Figures
SHARE Foundation says 14 Serbian students, activists and opposition figures were hit with Pegasus and a new NoviSpy variant, some...
Read moreDetails
CVE-2026-84115 in Cleo Harmony: JWT Refresh Token Handler Flaw Exposes Remote Attack Risk
CVE-2026-84115 affects Cleo Harmony through version 5.8.1.10, with a JWT Refresh Token Handler flaw enabling remote privilege escalation.
Read moreDetailsQ1 2026 Threat Reports
