Vulnerability News
Stay up to date on the latest cyber security news from The Cyber Express. Get the inside scoop on global Vulnerability News , privacy breaches, and industry advances. Get informed and stay safe with our in-depth coverage of the cyber world.
Microsoft Fixes 167 Vulnerabilities in Latest Patch Tuesday Update
Microsoft Patch Tuesday April brings a major security update fixing 167 vulnerabilities, including zero-days and critical flaws in SharePoint, Defender.
Read moreDetails
Hackers Exploit Kali Forms Vulnerability to Take Over WordPress Sites
Kali Forms vulnerability in WordPress plugin enables Remote Code Execution. Kali Forms vulnerability is actively exploited with 312K+ attacks blocked.
Read moreDetails
Adobe Patches Actively Exploited Acrobat Reader Flaw CVE-2026-34621
Adobe has released an urgent update for Acrobat Reader flaw CVE-2026-34621, a critical issue exploited in the wild that could...
Read moreDetails
Microsoft Recall Flaw Exposes Decrypted User Data, Researchers Find
TotalRecall reveals how Recall’s AES-256-GCM encryption and Windows Hello protections fail once decrypted data reaches an unprotected process.
Read moreDetails
GitLab Security Update Fixes High-Severity CVE-2026-5173, 11 Other Flaws
GitLab security update addresses CVE-2026-5173 and 11 flaws. This GitLab security update security patch fixes DoS and access risks in...
Read moreDetails
ClickFix macOS Attack Uses Script Editor to Bypass Security Controls
A ClickFix-style macOS attack uses Script Editor and an Apple-themed webpage to bypass Terminal protections and deploy malware.
Read moreDetails
Critical Flowise RCE Vulnerability Actively Exploited, Thousands of Systems at Risk
Flowise RCE vulnerability CVE-2025-59528 is actively exploited, allowing attackers to execute arbitrary code on exposed systems worldwide.
Read moreDetails
FortiClientEMS Vulnerabilities Under Active Exploitation, Expose Systems to RCE
CVE-2026-35616 and CVE-2026-21643 flaws in FortiClientEMS enable SQL Injection and RCE, with attackers actively exploiting them in real-world attacks.
Read moreDetails
North Korea Spent 6 Months Infiltrating Drift Protocol Only to Drain $285M in 12 Mins
A $285 million exploit had wiped out more than half of the Solana-based decentralized perpetual futures exchange's total value.
Read moreDetails
Axios Supply Chain Attack Exposes Developers to Hidden Malware
Hijacked Axios maintainer npm Account pushed malicious versions with a RAT, affecting macOS, Windows, and Linux systems across the JavaScript...
Read moreDetailsQ1 2026 Threat Reports
