Cyber News
Topic:
Critical zero-day vulnerability discovered in popular web framework
18-Sep-2025
Article Summary:
A critical zero-day vulnerability (CVE-2024-0001) has been discovered in the widely-used Express.js web framework, potentially affecting over 2 million applications globally. The vulnerability allows remote attackers to execute arbitrary code on vulnerable servers through specially crafted HTTP requests. Security firm CyberGuard Labs reported the flaw after discovering it during a routine security audit. The vulnerability stems from improper input validation in the framework's request parsing mechanism. Attackers can exploit this by sending malformed requests that bypass security checks and execute malicious code with server privileges. The Express.js team has released an emergency patch (version 4.18.3) that addresses this vulnerability. Organizations using Express.js are strongly advised to update immediately. The vulnerability has been assigned a CVSS score of 9.8, indicating its critical nature. No active exploits have been detected in the wild yet, but security experts warn that proof-of-concept code could emerge within days.
How is this relevant to my business?
1
Your apps may be at risk
If you (or tools you use) run on Express.js, hackers could break in and take control of servers.
2
Update immediately
The Express.js team has released a fix (v4.18.3). Delaying patching leaves your systems exposed.
3
Check your dependencies
Even if you don't use Express.js directly, third-party apps or vendors might, which could affect you.
Major healthcare provider suffers ransomware attack
18-Sep-2025
Article Summary:
A leading regional healthcare provider has been hit by a devastating ransomware attack that has encrypted patient records across 12 hospitals and disrupted critical medical services. The attackers are demanding a $15 million ransom payment in cryptocurrency. The incident has forced staff to revert to manual, paper-based processes while IT teams work to contain the breach. Initial investigations suggest the attackers gained access through a phishing email opened by a staff member two weeks before deploying the ransomware. Patient data including medical histories, prescriptions, and personal information may have been exfiltrated before encryption.
How is this relevant to my business?
1
Phishing is the entry point
Most ransomware starts with a single phishing email. Staff training is your first line of defence.
2
Backups are critical
Organisations with tested, offline backups can recover without paying ransom. Review your backup strategy now.
3
Have an incident response plan
Knowing what to do in the first hours of an attack limits damage. Ensure your team has a tested plan in place.
Data breach exposes personal information of 2 million users
17-Sep-2025
Article Summary:
A major e-commerce platform has disclosed a data breach affecting approximately 2 million customers after a misconfigured cloud storage bucket was left publicly accessible for 11 days. The exposed data includes names, email addresses, hashed passwords, and partial payment card details. The company discovered the breach after a security researcher reported it through their responsible disclosure programme. Regulators have been notified and an investigation is underway. Affected users are being contacted and advised to change their passwords immediately. The incident is expected to result in significant regulatory fines under data protection laws.
How is this relevant to my business?
1
Cloud misconfigurations are common
Regularly audit your cloud storage permissions to ensure sensitive data is not exposed publicly.
2
Know your reporting obligations
Data protection laws require breach notification within strict timeframes. Make sure your team knows the process.
3
Encrypt sensitive data at rest
Even if data is exposed, encryption limits what attackers can do with it. Review your data-at-rest encryption policies.