Vulnerability News
Stay up to date on the latest cyber security news from The Cyber Express. Get the inside scoop on global Vulnerability News , privacy breaches, and industry advances. Get informed and stay safe with our in-depth coverage of the cyber world.
Windows Defender Vulnerability Exposed as RoguePlanet PoC Spreads Online
RoguePlanet (CVE-2026-50656) exploits a Windows Defender TOCTOU flaw, enabling SYSTEM privilege escalation on fully patched Windows devices.
Read moreDetails
Critical SearchLeak Flaw in Microsoft 365 Copilot Exposed Sensitive Enterprise Data
The SearchLeak vulnerability let attackers steal data from Microsoft 365 Copilot Enterprise through a malicious link before CVE-2026-42824 was fixed.
Read moreDetails
Splunk Urges Immediate Patching of Critical Flaw Enabling Arbitrary File Operations
A critical Splunk Enterprise flaw, CVE-2026-20253, could enable unauthenticated file operations and remote code execution.
Read moreDetails
The Cyber Express Weekly Roundup: AI Security Controls, Major Patch Releases, Public Sector Audits, and Emerging Online Scams
This week’s weekly roundup covers AI security controls, Microsoft's Patch Tuesday, CBSE audits, UK court AI trials, and FIFA 2026...
Read moreDetails
ServiceNow Flaw Prompted Security Update After Researcher-Observed Activity, Not Active Attacker Exploitation
The ServiceNow flaw allowed threat actors to access customer instances, leading to a security update and alerts for affected users.
Read moreDetails
Microsoft Patches Record 200 Vulnerabilities in June 2026 Patch Tuesday
June 2026 Patch Tuesday addresses 200 flaws, including 3 zero-days and a critical wormable Windows Kernel vulnerability.
Read moreDetails
Cisco Warns of Active Exploitation of Catalyst SD-WAN Flaw With No Patch Available
Cisco warns CVE-2026-20245 in Catalyst SD-WAN Manager is actively exploited, allowing root-level arbitrary command execution—and no patch is currently available.
Read moreDetails
Google Patches Android Zero-Day CVE-2025-48595 Exploited in Targeted Attacks
CVE-2025-48595 is an actively exploited Android zero-day patched in Google's June 2026 update alongside 123 other vulnerabilities.
Read moreDetails
Threat Actors Target Critical Windows Netlogon Flaw CVE-2026-41089
Threat actors are targeting CVE-2026-41089, a critical Windows Netlogon vulnerability that could enable unauthenticated remote code execution.
Read moreDetails
CBSE Engages IIT Experts After Admitting OSM Security Vulnerabilities
CBSE has launched a security audit after researchers flagged an OSM vulnerability affecting the Class 12 board exam evaluation system.
Read moreDetailsQ1 2026 Threat Reports
