AI-Powered Bots Create Governance Challenges
For years, security teams have relied on behavioral clues to identify malicious activity. However, the rise of AI-powered bots is making that task far more…
Category: TheCyberExpress
META Threat Landscape Report Reveals Growing Cyber Threats
Cyber threats across the Middle East, Turkey, and Africa (META) continued to intensify in the first quarter of 2026, with ransomware groups, hacktivist campaigns, and…
Qilin And INC Ransom Drive 2026 Ransomware Surge
Ransomware attacks surged 30% in the first half of 2026 compared to the same period in 2025, with Qilin and INC Ransom emerging as two…
Miasma Revives Shai-Hulud Supply Chain Attack Tactics
A newly discovered software supply chain campaign, dubbed Miasma, has emerged as the latest evolution of the Shai-Hulud supply chain attack, compromising several redhat-cloud-services npm…
ChatGPhish Reveals ChatGPT Browser Prompt Injection Risk
Security researchers have unveiled ChatGPhish, a newly documented vulnerability concept that demonstrates how browser-based prompt injection can influence ChatGPT page summaries and potentially expose users…
WP Maps Pro Flaw Exposed Sites To Administrator Takeover
A critical vulnerability in the WP Maps Pro WordPress plugin allowed unauthenticated attackers to create administrator accounts and potentially perform a complete site takeover on affected websites. …
TCE Weekly Roundup: Supply Chain & Cloud Threats
The cybersecurity landscape in this weekly roundup shows how attackers are shifting away from isolated systems and focusing instead on the trusted ecosystems that underpin…
Notepad++ Fixes CVE-2026-48770 RCE Vulnerability
The developers behind Notepad++ have released version 8.9.6.1 to address multiple security vulnerabilities, including critical flaws that could expose users to remote code execution (RCE)…
CERT-In Urges 12-Hour Patching Amid AI Cyber Threats
India’s Computer Emergency Response Team, Indian Computer Emergency Response Team, has introduced a new cybersecurity framework urging organizations to patch critical security vulnerabilities in internet-facing…
Megalodon GitHub Supply Chain Attack Hits 5,500+ Repos
A large-scale software supply chain attack dubbed “Megalodon” has compromised more than 5,500 repositories on GitHub, raising fresh concerns about the growing abuse of automated…
CVE-2026-26980 Ghost CMS Vulnerability Hits 700 Sites
A critical Ghost CMS vulnerability identified as CVE-2026-26980 has been exploited in a widespread cyber campaign that compromised more than 700 websites, including platforms associated with major institutions such…
Kali365 Phishing Kit Hijacks Microsoft 365 Access
The FBI has issued a fresh warning about a growing cybercrime service known as Kali365, a new Phishing-as-a-Service (PhaaS) platform that enables attackers to hijack…