#vulnerabilitynews — Public Fediverse posts

Russian APT28 Exploit Zero-Day Hours After Microsoft Discloses Office Vulnerability https://thecyberexpress.com/russian-apt28-exploit-zero-day-cve-2026-21509/ #ThreatIntelligence #VulnerabilityNews #Vulnerabilities #MicrosoftOffice #ThreatActors #Backdoor #CERT-UA #Russia #APT28 #Word

Global DNS Crash Triggers Reboot Loops Across Cisco Small Business Switches https://thecyberexpress.com/dns-crash-cisco-small-business-switches/ #CiscoSmallBusinessSwitches #TheCyberExpressNews #VulnerabilityNews #TheCyberExpress #FirewallDaily #CyberNews #DNSCrash #CBS250 #CBS350 #C1200 #DNSC

CISA Expands KEV Catalog with 1,484 New Vulnerabilities as Active Exploitation Surges 20% in 2025 https://cybersecuritynews.com/cisa-expands-kev-catalog/ #CyberSecurityResearch #CyberSecurityNews #VulnerabilityNews #cybersecuritynews #CyberSecurity #cybersecurity #vulnerability

Critical IBM API Connect Vulnerability Enables Authentication Bypass https://thecyberexpress.com/ibm-api-connect-security-vulnerability/ #IBMAPIConnectAuthentication #IBMAPIConnectvulnerability #IBMAPIConnectVersions #TheCyberExpressNews #VulnerabilityNews #Vulnerabilities #TheCyberExpress #FirewallDaily #CVE202513915 #CyberNews #IBM

Cisco AsyncOS 0-Day Vulnerability Exploited in the Wild to run System-level Commands https://cybersecuritynews.com/cisco-asyncos-0-day-vulnerability/ #CyberSecurityNews #VulnerabilityNews #cybersecuritynews #CyberAttackNews #cybersecurity #vulnerability

Hackers Actively Attacking Cisco and Palo Alto Networks VPN Gateways to Gain Login Access https://cybersecuritynews.com/cisco-and-palo-alto-vpn-gateways-under-attack/ #CyberSecurityNews #VulnerabilityNews #cybersecuritynews #CyberAttackNews #cybersecurity #vulnerability

High-Severity Jenkins Vulnerability Allows Unauthenticated DoS via HTTP CLI https://cybersecuritynews.com/jenkins-vulnerability-2/ #CyberSecurityNews #VulnerabilityNews #cybersecuritynews #cybersecurity #Dosattack #HTTP

Critical Ivanti EPM Vulnerability Allows Admin Session Hijacking via Stored XSS https://cybersecuritynews.com/ivanti-epm-vulnerability/ #CyberSecurityNews #VulnerabilityNews #cybersecuritynews #XSSVulnerability #cybersecurity

Critical Ivanti EPM Vulnerability Allows Admin Session Hijacking via Stored XSS https://cybersecuritynews.com/ivanti-epm-vulnerability/ #CyberSecurityNews #VulnerabilityNews #cybersecuritynews #XSSVulnerability #cybersecurity

Critical Ivanti EPM Vulnerability Allows Admin Session Hijacking via Stored XSS https://cybersecuritynews.com/ivanti-epm-vulnerability/ #CyberSecurityNews #VulnerabilityNews #cybersecuritynews #XSSVulnerability #cybersecurity

Critical Ivanti EPM Vulnerability Allows Admin Session Hijacking via Stored XSS https://cybersecuritynews.com/ivanti-epm-vulnerability/ #CyberSecurityNews #VulnerabilityNews #cybersecuritynews #XSSVulnerability #cybersecurity

Gitlab Patches Multiple Vulnerabilities that Enable Authentication Bypass and DoS Attacks https://cybersecuritynews.com/gitlab-patches-vulnerabilities/ #CyberSecurityNews #VulnerabilityNews #cybersecuritynews #cybersecurity #PatchUpdates

Gitlab Patches Multiple Vulnerabilities that Enable Authentication Bypass and DoS Attacks https://cybersecuritynews.com/gitlab-patches-vulnerabilities/ #CyberSecurityNews #VulnerabilityNews #cybersecuritynews #cybersecurity #PatchUpdates

Gitlab Patches Multiple Vulnerabilities that Enable Authentication Bypass and DoS Attacks https://cybersecuritynews.com/gitlab-patches-vulnerabilities/ #CyberSecurityNews #VulnerabilityNews #cybersecuritynews #cybersecurity #PatchUpdates

Gitlab Patches Multiple Vulnerabilities that Enable Authentication Bypass and DoS Attacks https://cybersecuritynews.com/gitlab-patches-vulnerabilities/ #CyberSecurityNews #VulnerabilityNews #cybersecuritynews #cybersecurity #PatchUpdates

DeepSeek-R1 Makes Code for Prompts With Severe Security Vulnerabilities https://cybersecuritynews.com/deepseek-r1-code-vulnerabilities/ #SecurityVulnerabilities #CyberSecurityNews #VulnerabilityNews #cybersecuritynews #cybersecurity

Cline AI Coding Agent Vulnerabilities Enables Prompt Injection, Code Execution, and Data Leakage https://cybersecuritynews.com/cline-ai-coding-agent-vulnerabilities/ #CyberSecurityNews #VulnerabilityNews #AIVulnerabilities #cybersecuritynews #cybersecurity

Imunify AI-Bolit Vulnerability Let Execute Arbitrary Code and Escalate Privileges to Root https://cybersecuritynews.com/imunify-ai-bolit-vulnerability/ #CyberSecurityNews #VulnerabilityNews #AIVulnerabilities #cybersecuritynews #cybersecurity

Chinese Hackers Weaponize Claude AI to Execute First Autonomous Cyber Espionage Campaign at Scale https://thecyberexpress.com/1st-autonomous-cyber-espionage-with-claude-ai/ #CyberattackLifecycle #VulnerabilityNews #AutonomousAttack #AIHallucination #ClaudeAIHacking #Chinesehackers #FirewallDaily #VibeHacking #ClaudeCode #CyberNews #Anthropic #Research #Claude

OpenAI Sora 2 Vulnerability Exposes System Prompts via Audio Transcripts https://cybersecuritynews.com/openai-sora-2-vulnerability/ #CyberSecurityNews #VulnerabilityNews #cybersecuritynews #cybersecurity #vulnerability #CyberAI

Tor Browser 15.0.1 Released With Fix for Multiple Security Vulnerabilities https://cybersecuritynews.com/tor-browser-15-0-1-released/ #CyberSecurityNews #VulnerabilityNews #cybersecuritynews #securityupdates #cybersecurity

SessionReaper Exploits Erupt as Magento Sites Lag on Patching https://thecyberexpress.com/sessionreaper-exploits-erupt/ #SessionReaperExploitation #ExploitedVulnerabilities #VulnerabilitiesPatching #ThreatIntelligence #VulnerabilityNews #Vulnerabilities #CyberEssentials #FirewallDaily #AdobeCommerce #SessionReaper #CyberNews #Magento

CoreDNS Vulnerability Let Attackers Pin DNS Cache And Deny Service Updates https://cybersecuritynews.com/coredns-vulnerability/ #CyberSecurityNews #VulnerabilityNews #cybersecuritynews #Vulnerability #cybersecurity #vulnerability #DNSAttacks

Hackers Can Exploit Image Scaling in Gemini CLI, Google Assistant to Exfiltrate Sensitive Data https://cybersecuritynews.com/image-scaling-gemini-cli/ #CyberSecurityNews #VulnerabilityNews #cybersecuritynews #CyberSecurity #cybersecurity #GeminiCLI #CyberAI

Apple Patches Zero-Day in iOS 18.6.2 After Targeted Exploits Involving Malicious Image Files https://thecyberexpress.com/zero-day-patched-in-ios-18-6-2/ #VulnerabilityNews #Vulnerabilities #securityupdate #CyberNews #iOS1862 #Spyware #ZeroDay

GPT-5 Jailbreaked With Echo Chamber and Storytelling Attacks https://cybersecuritynews.com/gpt-5-jailbreaked/ #CyberSecurityNews #VulnerabilityNews #cybersecuritynews #cybersecurity #CyberAI

New ‘Win-DoS’ Zero-Click Vulnerabilities Turns Windows Server/Endpoint, Domain Controllers Into DDoS Botnet https://cybersecuritynews.com/win-dos-zero-click-vulnerabilities-turns-windows-domain-controllers-into-ddos-botnet/ #CyberSecurityNewsLive #CyberSecurityNews #VulnerabilityNews #Vulnerabilities #CyberSecurity #Windows

Zero-Day Vulnerability Hits Microsoft SharePoint, Urgent Patch Issued https://thecyberexpress.com/zero-day-vulnerability-microsoft-sharepoint/ #SharePointserversAttack #SharePointServer2019 #zerodayvulnerability #TheCyberExpressNews #VulnerabilityNews #SharePointservers #SharePointOnline #Vulnerabilities #CyberattackNews #TheCyberExpress #FirewallDaily #zerodayattack #CyberNews #Microsoft #CISA #FBI

New WAFFLED Attack Exploits AWS, Azure, Cloud Armor, Cloudflare, and ModSecurity WAFs https://cybersecuritynews.com/waffled-waf-attack/ #CyberAttackArticle #CyberSecurityNews #VulnerabilityNews #cybersecuritynews #CyberSecurity #cybersecurity

JavaScript Crypto Library OpenPGP.js Hit by High-Risk Spoofing Vulnerability https://thecyberexpress.com/cve-2025-47934-openpgp-vulnerability/ #CVE202547934Vulnerability #TheCyberExpressNews #OpenPGPencryption #VulnerabilityNews #Vulnerabilities #TheCyberExpress #FirewallDaily #Vulnerability #CVE202547934 #CyberNews #OpenPGPjs

JavaScript Crypto Library OpenPGP.js Hit by High-Risk Spoofing Vulnerability https://thecyberexpress.com/cve-2025-47934-openpgp-vulnerability/ #CVE202547934Vulnerability #TheCyberExpressNews #OpenPGPencryption #VulnerabilityNews #Vulnerabilities #TheCyberExpress #FirewallDaily #Vulnerability #CVE202547934 #CyberNews #OpenPGPjs

JavaScript Crypto Library OpenPGP.js Hit by High-Risk Spoofing Vulnerability https://thecyberexpress.com/cve-2025-47934-openpgp-vulnerability/ #CVE202547934Vulnerability #TheCyberExpressNews #OpenPGPencryption #VulnerabilityNews #Vulnerabilities #TheCyberExpress #FirewallDaily #Vulnerability #CVE202547934 #CyberNews #OpenPGPjs

JavaScript Crypto Library OpenPGP.js Hit by High-Risk Spoofing Vulnerability https://thecyberexpress.com/cve-2025-47934-openpgp-vulnerability/ #CVE202547934Vulnerability #TheCyberExpressNews #OpenPGPencryption #VulnerabilityNews #Vulnerabilities #TheCyberExpress #FirewallDaily #Vulnerability #CVE202547934 #CyberNews #OpenPGPjs

CVSS 10.0 Vulnerability Found in Ubiquity UniFi Protect Cameras https://thecyberexpress.com/ubiquity-unifi-protect-flaws-cve-2025-23123/ #SecurityAdvisoryBulletin #TheCyberExpressNews #VulnerabilityNews #Vulnerabilities #TheCyberExpress #FirewallDaily #UbiquityUniFi #CVE202523123 #UniFiProtect #CyberNews

A Shift From Browsers to Enterprise Targets: 2024 Zero-Day Exploitation Analysis https://thecyberexpress.com/google-2024-zero-day-exploitation-analysis/ #TheCyberExpressNews #zerodayexploitation #EnterpriseSecurity #VulnerabilityNews #Vulnerabilities #TheCyberExpress #FirewallDaily #CyberNews #GTIG

Ukraine Reports 48% Jump in Cyber Incidents in H2 2024, but 77% Drop in High-Severity Incidents https://thecyberexpress.com/cyber-incidents-in-h2-2024-ukraine/ #Ukrainecyberincident #TheCyberExpressNews #Ukrainecyberwarfare #Ukrainecyberattacks #VulnerabilityNews #malwareplaybook #TheCyberExpress #kineticattacks #FirewallDaily #CyberWarfare #ThreatActors #MalwareNews #CERTUkraine #GeoServer #Features #CERTUA

Ukraine Reports 48% Jump in Cyber Incidents in H2 2024, but 77% Drop in High-Severity Incidents https://thecyberexpress.com/cyber-incidents-in-h2-2024-ukraine/ #Ukrainecyberincident #TheCyberExpressNews #Ukrainecyberwarfare #Ukrainecyberattacks #VulnerabilityNews #malwareplaybook #TheCyberExpress #kineticattacks #FirewallDaily #CyberWarfare #ThreatActors #MalwareNews #CERTUkraine #GeoServer #Features #CERTUA

Ukraine Reports 48% Jump in Cyber Incidents in H2 2024, but 77% Drop in High-Severity Incidents https://thecyberexpress.com/cyber-incidents-in-h2-2024-ukraine/ #Ukrainecyberincident #TheCyberExpressNews #Ukrainecyberwarfare #Ukrainecyberattacks #VulnerabilityNews #malwareplaybook #TheCyberExpress #kineticattacks #FirewallDaily #CyberWarfare #ThreatActors #MalwareNews #CERTUkraine #GeoServer #Features #CERTUA

Ukraine Reports 48% Jump in Cyber Incidents in H2 2024, but 77% Drop in High-Severity Incidents https://thecyberexpress.com/cyber-incidents-in-h2-2024-ukraine/ #Ukrainecyberincident #TheCyberExpressNews #Ukrainecyberwarfare #Ukrainecyberattacks #VulnerabilityNews #malwareplaybook #TheCyberExpress #kineticattacks #FirewallDaily #CyberWarfare #ThreatActors #MalwareNews #CERTUkraine #GeoServer #Features #CERTUA

Australian Businesses at Risk as Threat Actors Exploit Fortinet Vulnerabilities https://thecyberexpress.com/fortinet-urges-australia-to-patch-now/ #AustralianCyberSecurityCentre #CybersecurityBestPractices #TheCyberExpressNews #VulnerabilityNews #Fortinetproducts #Vulnerabilities #TheCyberExpress #FirewallDaily #CyberNews #Features #Fortinet #SSLVPN

CERT-In Flags Info Disclosure Flaw in TP-Link Tapo H200 Smart Hub https://thecyberexpress.com/flaw-in-tp-link-tapo-h200-smart-hub/ #TPLinkTapoH200V1IoTSmartHub #TheCyberExpressNews #VulnerabilityNews #Vulnerabilities #TheCyberExpress #FirewallDaily #Vulnerability #CVE20253442 #CyberNews #CERTIn

CERT-In Flags Info Disclosure Flaw in TP-Link Tapo H200 Smart Hub https://thecyberexpress.com/flaw-in-tp-link-tapo-h200-smart-hub/ #TPLinkTapoH200V1IoTSmartHub #TheCyberExpressNews #VulnerabilityNews #Vulnerabilities #TheCyberExpress #FirewallDaily #Vulnerability #CVE20253442 #CyberNews #CERTIn

CERT-In Flags Info Disclosure Flaw in TP-Link Tapo H200 Smart Hub https://thecyberexpress.com/flaw-in-tp-link-tapo-h200-smart-hub/ #TPLinkTapoH200V1IoTSmartHub #TheCyberExpressNews #VulnerabilityNews #Vulnerabilities #TheCyberExpress #FirewallDaily #Vulnerability #CVE20253442 #CyberNews #CERTIn

CERT-In Flags Info Disclosure Flaw in TP-Link Tapo H200 Smart Hub https://thecyberexpress.com/flaw-in-tp-link-tapo-h200-smart-hub/ #TPLinkTapoH200V1IoTSmartHub #TheCyberExpressNews #VulnerabilityNews #Vulnerabilities #TheCyberExpress #FirewallDaily #Vulnerability #CVE20253442 #CyberNews #CERTIn

CISA Warns of Exploited GitHub Action CVE-2025-30066 – Users Urged to Patch https://thecyberexpress.com/exploited-github-action-cve-2025-30066/ #GitHubPersonalAccessTokens #tjactions/changedfiles #TheCyberExpressNews #VulnerabilityNews #Vulnerabilities #TheCyberExpress #FirewallDaily #Vulnerability #CVE202530066 #GitHubAction #CyberNews #CISA

Commvault Webserver Vulnerability Let Attackers Compromise Webserver https://cybersecuritynews.com/commvault-webserver-vulnerability/ #CyberSecurityNewsLive #CyberSecurityNews #VulnerabilityNews #cybersecuritynews #cybersecurity #vulnerability

Improper Certificate Validation in RadiAnt DICOM Viewer Puts Healthcare Systems at Risk https://thecyberexpress.com/radiant-dicom-viewer-vulnerability/ #machineinthemiddleattack #SocialEngineeringAttacks #TheCyberExpressNews #RadiAntDICOMViewer #VulnerabilityNews #Vulnerabilities #TheCyberExpress #FirewallDaily #CyberNews #Medixant #CISA

Improper Certificate Validation in RadiAnt DICOM Viewer Puts Healthcare Systems at Risk https://thecyberexpress.com/radiant-dicom-viewer-vulnerability/ #machineinthemiddleattack #SocialEngineeringAttacks #TheCyberExpressNews #RadiAntDICOMViewer #VulnerabilityNews #Vulnerabilities #TheCyberExpress #FirewallDaily #CyberNews #Medixant #CISA

Ghost Ransomware Group Exploiting Unpatched Software, FBI and CISA Warn https://thecyberexpress.com/ghost-ransomware-attacks/ #CybersecurityandInfrastructureSecurityAgency #FederalBureauofInvestigation #Ghostransomwareattacks #TheCyberExpressNews #VulnerabilityNews #phishingattempts #ProxyShellattack #Vulnerabilities #Ghostransomware #TheCyberExpress #RansomwareNews #FirewallDaily #CyberNews #Cring #Ghost #CISA #FBI

Ghost Ransomware Group Exploiting Unpatched Software, FBI and CISA Warn https://thecyberexpress.com/ghost-ransomware-attacks/ #CybersecurityandInfrastructureSecurityAgency #FederalBureauofInvestigation #Ghostransomwareattacks #TheCyberExpressNews #VulnerabilityNews #phishingattempts #ProxyShellattack #Vulnerabilities #Ghostransomware #TheCyberExpress #RansomwareNews #FirewallDaily #CyberNews #Cring #Ghost #CISA #FBI