thecyberexpress

India Rolls Out Digital Life Certificate 4.0, Urges Pensioners to Stay Cyber Safe

The Government of India’s Department of Pension & Pensioners’ Welfare (DoPPW) has launched the Digital Life Certificate (DLC) Campaign 4.0, a national drive to make pension services more accessible ...
thecyberexpress

Illuminate Education Fined $5.1 Million for Failing to Protect Student Data

The Attorneys General of California, Connecticut, and New York have announced a $5.1 million settlement with Illuminate Education, Inc., an educational technology company, for failing to adequately ...
thecyberexpress

AI Malware Detected in the Wild as Threats Evolve

AI malware may be in the early stages of development, but it’s already being detected in cyberattacks, according to new research published this week. Google researchers looked at five AI-enabled ...
thecyberexpress

Microsoft Security Lapse Exposed Sensitive Credentials and Internal Resources of Employees

The compromised internal Azure server seemed to be associated with the functioning of the Bing search engine and had been used to store scripts, configuration & code containing sensitive data such as ...
thecyberexpress

CISA Warns that DELMIA Apriso Vulnerabilities Are Under Attack

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two DELMIA Apriso vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog. DELMIA Apriso is manufacturing ...
thecyberexpress

SessionReaper Exploits Erupt as Magento Sites Lag on Patching

Six weeks after Adobe shipped an emergency fix, attackers have begun weaponizing SessionReaper — and most Magento stores still stand exposed. Security firm Sansec’s forensics team said it blocked ...
thecyberexpress

Ransomware Attacks Have Soared in 2025 as New Leaders Emerge

Ransomware attacks have soared 50% in 2025 despite major changes among the leading ransomware groups, according to a new Cyble report. Through October 21, there have been 5,010 ransomware attacks ...
thecyberexpress

North Korean Hackers Deploy “Drone” Malware in Targeting of European UAV Manufacturers

The name said it all: DroneEXEHijackingLoader.dll. That internal file name, buried in malicious code delivered to three European defense contractors, revealed what security researchers now believe ...
thecyberexpress

Compromised YouTube Accounts Used to Distribute Infostealer Malware

More than 3,000 malicious YouTube videos were used to distribute infostealer malware, according to a new report detailing the operation. Dubbed the “YouTube Ghost Network” by Check Point Research, the ...
thecyberexpress

U.S. Accuses Former Security Company Official of Stealing Trade Secrets to Sell to Russian Buyer

The U.S. government has apparently charged a former cybersecurity company official with stealing trade secrets with the intention of selling them to a Russian buyer, according to court documents and ...
thecyberexpress

Brazilian “Caminho” Loader Turns Images into Malware Delivery Chain

A newly identified loader dubbed “Caminho” (Portuguese for “path”) has emerged as a sophisticated Loader-as-a-Service platform that uses Least Significant Bit (LSB) steganography to conceal malicious ...
thecyberexpress

Vidar Stealer 2.0 Boosts Infostealer’s Credential Theft and Evasion Capabilities

Vidar Stealer 2.0 has been released, and the updated infostealer claims to offer improved performance with advanced credential stealing and evasion abilities, features that will necessitate even ...