Critical ‘MongoBleed’ Flaw Exploited In The Wild To Leak Database Secrets
The cybersecurity world is facing a “Heartbleed” moment for the NoSQL era. A critical vulnerability in MongoDB, the world’s most popular non-relational database, is being…
Category: TheCyberExpress
Grigol Liluashvili Arrested In Georgia Corruption Case
Georgia’s former Head of the State Security Service, Grigol Liluashvili, has been arrested following an investigation into alleged corruption, bribery, and abuse of power. The…
Shai-Hulud Returns With ‘Golden Path’ Malware In Latest NPM Attacks
Just weeks after the devastating “Second Coming” campaign crippled thousands of development environments, the threat actor behind the Shai-Hulud worm has returned. Security researchers at…
The Global Commerce Vulnerability Window
Rizwan Patel, Global Head Cloud, InfoSec and Emerging Technologies, Altimetrik Global commerce no longer pauses between festivals; it moves continuously across markets, moments, and geographies.…
Why Trust Is ASEAN’s New Cyber Perimeter
By Salleh Kodri, Sr Presales consultant, Cyble As 2025 comes to a close, one thing is clear to me: The most damaging cyber incidents across ASEAN…
CVE-2025-68615: Critical Net-SNMP Snmptrapd Flaw
A newly disclosed security issue in the Net-SNMP software suite has raised serious concerns for organizations that rely on the protocol to monitor and manage network infrastructure.…
Agencies Across Africa Arrest 574, Recover $3 Million In Cybercrime Crackdown
Law enforcement across 19 African countries arrested 574 suspects and recovered approximately $3 million in a month-long cybercrime crackdown, dubbed Operation Sentinel. The operation primarily…
PCPcat Operation Breaches 59,000 React Servers
A large-scale cyber espionage operation known as Operation PCPcat has shaken the modern web infrastructure, compromising more than 59,000 servers in just 48 hours. The campaign targets systems…
The Technologies CISOs Will Invest In To Stay Relevant
Coupang’s CEO resigned. Bed Bath & Beyond’s CTO stepped down. Two very different companies, two very similar stories: a massive breach, millions of exposed records, and executives suddenly…
RTO Scam Surge: Browser-Based E-Challan Phishing Exposed
A renewed RTO scam campaign targeting Indian vehicle owners is gaining momentum. This follows a sharp rise in browser-based e-challan phishing operations that rely on shared and reusable fraud infrastructure. The latest…
Spotify Scraping: Platform Disables Linked Accounts
Spotify has disabled multiple user accounts after an open-source group claimed it scraped millions of songs and related data from the music streaming platform. The…
Bank Account Takeover Fraud: Key Domain Seized
The U.S. Department of Justice has announced a major disruption of a bank account takeover fraud operation that led to more than $28 million in…