Joyfill Npm Packages Hit By DEV#POPPER Node.js Malware
Two beta releases of joyfill npm Packages have been found distributing a malware implant capable of delivering the DEV#POPPER remote access trojan (RAT) . The…
Category: TheCyberExpress
Hermes AI Agent Used In Thailand Ministry Cyberattack
A Hermes AI agent was used to automate parts of a cyberattack targeting Thailand’s Ministry of Finance, according to research by Hunt.io and security researcher…
Tanaka Leads Global Data Leak Activity In H1 2026
Ransomware often dominates cybersecurity headlines, but stolen data has become an equally valuable commodity in the cybercrime economy. In the first half of 2026, one…
Origin Energy Data Breach Affects 900,000 Customers
The Origin Energy data breach has affected approximately 900,000 current and former customers after Australia’s largest energy retailer confirmed unauthorized access to customer information. The company also…
Tribeca Film Festival Data Breach Exposes Celebrity Info
A Tribeca Film Festival data breach has reportedly exposed the contact information of Hollywood stars including Angelina Jolie, Robert De Niro and Martin Scorsese, alongside…
Minnesota Medicaid Fraud: 4 Men Plead Guilty In $2.2M Scheme
Four Minnesota men have pleaded guilty to a Minnesota Medicaid fraud scheme that allegedly stole approximately $2.2 million from the state’s Housing Stabilization Services (HSS)…
Zimbra Phishing Campaign Exploits CVE-2025-66376
A Zimbra phishing campaign attributed to Russian state-supported cyber actors has targeted Western government and commercial organizations, exploiting CVE-2025-66376 to access sensitive email data and…
TCE Weekly Roundup: Ransomware, Breaches & Scams
This week’s cybersecurity landscape highlights the continued expansion of cyber risks across governments, businesses, and consumers. From ransomware campaigns targeting organizations worldwide to credential-based attacks,…
Google Fined €890 Million For Digital Markets Act Breaches
Google fined €890 million by the European Commission for breaching the Digital Markets Act (DMA) over its practices on Google Search and Google Play. The…
One Country Absorbed Nearly Half Of The World’s Ransomware Attacks In Just Six Months – The United States
Strip away the geopolitics, the hacktivist noise, and the espionage headlines, and one number from the first half of 2026 stands out above everything else:…
OpenAI And Hugging Face Address AI Security Incident
OpenAI and Hugging Face are investigating an AI security incident involving an AI agent that compromised infrastructure while models were being evaluated for advanced cyber…
Chick-fil-A Data Security Incident Exposes Customer Data
Chick-fil-A data security incident may have exposed personal and account information belonging to customers after unauthorized parties launched an automated attack against the company’s website…