This week’s The Cyber Express weekly roundup highlights major cybersecurity developments affecting organizations, governments, and individuals worldwide. Key stories include destructive...
From Encryption to Real-World Attack Prevention In today’s hyper-connected digital environment, secure communication is not just about encrypting data—it is about preventing attackers from abusing...
An important Veeam security patch to address multiple vulnerabilities in its Backup & Replication platform that potentially allowed attackers to execute malicious code remotely, has been released....
Hypervisor migrations can introduce hidden risks that threaten data availability and recovery. Acronis explains why verified backups and cross-platform recovery are essential during VMware...
Guinea pigs, fictitious signatures, and the future of security in an AI-driven world
ESET’s Jake Moore used smart glasses, deepfakes and face swaps to ‘hack’ widely-used facial recognition systems – and he'll demo it all at RSAC 2026
Veeam has released security updates to address multiple critical vulnerabilities in its Backup & Replication software that, if successfully exploited, could result in remote code execution. The...
An international law enforcement action codenamed "Operation Synergia III" has sinkholed tens of thousands of IP addresses and seized servers linked to cybercrime operations worldwide. [...]
A threat actor tracked as Storm-2561 is distributing fake enterprise VPN clients from Ivanti, Cisco, and Fortinet to steal VPN credentials from unsuspecting users. [...]
Rising tensions in the Middle East are prompting fresh warnings that the conflict could spill into the cyber... The post ISAC advisory highlights cyber and physical risks to critical...
A suspected Iran-linked cyberattack has disrupted global systems at medical technology giant Stryker Corp., knocking some internal services... The post Suspected Iran-linked cyberattack hits...
Researchers from IBM X-Force have uncovered a new AI-generated malware, dubbed “Slopoly.” During a ransomware engagement, X-Force discovered a PowerShell script deployed on an infected server. The...
Japanese police confirmed 226 cases of damage from ransomware attacks in 2025, the second-highest annual total, data from the National Police Agency showed Thursday. The number of ransomware...
In 2026, the cyber threat landscape has become more complex and dangerous than ever. Attackers no longer operate only on the surface web; they now lurk in encrypted networks, underground...
In 2026, cyber threats are originating on the dark web, where stolen credentials, exploit kits, and attack plans are bought and sold before they ever reach corporate networks. Organizations are...
Starbucks has disclosed a data breach affecting hundreds of employees after threat actors gained access to their Starbucks Partner Central accounts. [...]
Google has released emergency security updates to patch two high-severity Chrome vulnerabilities exploited in zero-day attacks. [...]
On March 11, 2026, the medical technology vendor Stryker disclosed a global cyberattack affecting its Microsoft environment. The company said there was no indication of ransomware or malware, but...
Prompt like a hard-ass boss who won't tolerate failure and bots will find ways to breach policy AI agents work together to bypass security controls and stealthily steal sensitive data from within...
Cybersecurity researchers have disclosed details of a new banking malware targeting Brazilian users that's written in Rust, marking a significant departure from other known Delphi-based malware...
Cybersecurity researchers have disclosed details of a suspected artificial intelligence (AI)-generated malware codenamed Slopoly put to use by a financially motivated threat actor named Hive0163....
We are observing an increase of wiper attacks by the Iran-linked Handala Hack group (aka Void Manticore) through phishing and misuse of Microsoft Intune. The post Insights: Increased Risk of Wiper...
An espionage operation demonstrated strategic operational patience against targets in Southeast Asia, deploying custom backdoors. The post Suspected China-Based Espionage Operation Against...
It’s been difficult early on to separate signal from noise, even if the attack on the medical device maker looks like a qualified success for the attackers. The post Stryker attack highlights...
Senior researcher Wolfie Christl spoke with Forbes about OpenAI's deal with the Pentagon that permits the gathering of bulk data from users. The post OpenAI Blurs Its Mass Surveillance Red Line...
Senior researcher and co-author of the report, Noura Aljizawi, speaks to the Fuller Project about the concerning ways gender is still being weaponized to silence women. The post The Market for...
Apple announcement: …iPhone and iPad are the first and only consumer devices in compliance with the information assurance requirements of NATO nations. This enables iPhone and iPad to be used with...
The number of FBI searches of data collected through the surveillance program known as Section 702 of the Foreign Intelligence Surveillance Act (FISA) between December 2024 to November 2025 rose...
HPE security advisory (AV26-234)
Apple security advisory (AV26-233)