Ashish Khaitan

6 days ago | thecyberexpress.com | Ashish Khaitan

Ubiquity has disclosed two security vulnerabilities affecting its widely used video surveillance platform, UniFi Protect. One of the flaws, now assigned the identifier CVE-2025-23123, has been rated as critical with a maximum CVSS score of 10.0. Both issues have been addressed in recent firmware and application updates, and the company is urging users to install these patches without delay. The vulnerabilities were detailed in Security Advisory Bulletin 047, published by Ubiquity on May 6, 2025.

6 days ago | thecyberexpress.com | Ashish Khaitan

The Federal Bureau of Investigation (FBI) has issued a warning about the TheMoon malware. The warning also stresses the dramatic uptick in cyberattacks targeting aging internet routers, especially those deemed “End of Life” (EOL). These vulnerable routers, no longer supported by manufacturers with software or security updates, have become the latest focus of threat actors exploiting them with a new strain of TheMoon malware.

6 days ago | thecyberexpress.com | Ashish Khaitan

The Nmap Project has officially launched the highly anticipated Nmap 7.96, bringing a wealth of new features, performance upgrades, and bug fixes to the popular network scanning tool. As a fundamental utility for network discovery and security auditing, Nmap has been a go-to solution for security professionals, and version 7.96 makes it even more powerful. One of the standout features of Nmap 7.96 is the massive overhaul of its DNS resolution system.

6 days ago | thecyberexpress.com | Ashish Khaitan

Cisco has rolled out software patches to address a severe security vulnerability, tracked as CVE-2025-20188, in its IOS XE Wireless Controller software. The flaw, which has been assigned the highest possible CVSS score of 10.0, could allow unauthenticated remote attackers to gain full root access on affected systems.

1 week ago | thecyberexpress.com | Ashish Khaitan

Security researchers have uncovered a severe vulnerability affecting the Microsoft Telnet Client, which allows remote attackers to harvest user credentials without any interaction from the victim. This “0-Click Telnet Vulnerability” exploits the MS-TNAP authentication mechanism built into Telnet, a legacy protocol still presents on many Windows systems. The vulnerability exists in the MS-TNAP (Microsoft Telnet Authentication Protocol), a feature of the Microsoft Telnet Client.