CHOSEN BRICK: Iran’s Spyware Campaign Against Its Critics
The file looked like an MRI scan. Lumbar spine, several grey slices of vertebrae, a heading reading something like ‘Disk Herniation and Degeneration.’ For a…
Category: TheCyberExpress
International Meteor Organization Cyberattack Disrupts Site
The International Meteor Organization cyberattack has knocked much of the Belgium-based nonprofit’s website offline, with the organization warning that several weeks of partial downtime could…
Study Finds WordPress Vulnerabilities In 4 Of 5 Sites
A new Singapore Study has found that four in five websites run by local businesses carry at least one detectable WordPress vulnerabilities. The Singapore WordPress Website…
TCE Weekly Roundup: Iran Bounty, Airline Leak, ChatGPT Flaw
This weekly roundup covers a bounty offer targeting an alleged Iranian cyber official, a massive data-exposure incident affecting airline travelers, a breach of an education…
Springfield Cyberattack: Union Demands Answers Before Return
Springfield Public Schools remains in recovery mode following a cyberattack that shut down district operations and forced schools to close for the second half of…
Agentic AI Harnesses: ASD Releases New Security Guidance
The Australian Signals Directorate (ASD) has released new guidance on Agentic AI Harnesses, highlighting the security, governance and operational risks organisations need to consider as…
EU’s 24-Hr Vulnerability Reporting Rules Take Effect Friday, A Year Before The Rest Of The Cyber Resilience Act
Manufacturers selling connected products in the European Union face a new legal duty starting Sept. 11. Report actively exploited vulnerabilities to authorities within 24 hours…
ChatGPT Sandbox Flaw Let A Planted Prompt Ship Victim’s Gmail Data To Another Account
Check Point Research disclosed Tuesday that a weakness in ChatGPT’s code-execution sandbox let data from one user’s connected Gmail account be moved into a separate,…
Exposed Database Left 220Mn Airline Passenger, Crew Records Open To The Internet
A misconfigured Elasticsearch cluster exposed roughly 220.8 million airline passenger and crew records, including passport numbers and full itineraries, before it was secured in June,…
Post-Quantum Cryptography: G7 And CISA Urge Urgent Shift
Some of the world’s leading democracies are pushing governments and companies to start preparing for post-quantum cryptography before quantum computers become powerful enough to break…
Attackers Exploit Unpatched Magento Zero-Day To Backdoor Online Stores
Attackers are exploiting an unpatched remote code execution flaw in Adobe Commerce and Magento Open Source to install persistent backdoors on e-commerce sites, Dutch security…
Liquid Network Security Incident: Hackers Offer BTC Return
The Liquid Network security incident has taken an unusual turn after the unidentified actors behind the theft of nearly 4,000 BTC offered to return “most”…