FamousSparrow Exploits Public-Facing Exchange Servers to Deploy SparroWocky Backdoor
FamousSparrow has introduced a new backdoor called SparroWocky after breaking into public-facing Microsoft Exchange servers. The campaign shows
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Cyber News
Critical Docker Sandbox Vulnerabilities Enable Malicious Guests to Escape Isolated microVM Workspaces
Docker patched two serious vulnerabilities in Docker Sandboxes that could let a malicious guest workload break out of
Cisco Warns of Critical ISE 0-Day Vulnerability Exploited in Attacks
Cisco has issued an urgent security advisory for a critical zero-day vulnerability in Cisco Identity Services Engine (ISE)
One Compromised Kubernetes Node Can Expose Every Workload Identity Running on It
A Kubernetes node becomes an identity breach point when an attacker gains root access. Research shows a hostile
US takes down NightmareStresser DDoS-for-hire platform
The U.S. Federal Bureau of Investigation (FBI) seized the domains used by NightmareStresser, one of the world’s longest-running
AI Agent Carries Out Multi-Stage Data Theft Attack
Spanish data protection agency AEPD reveals the country’s first AI-powered data breach
New Android Malware Steals Banking PINs and Reinstalls Itself After Users Delete It
A newly tracked Android malware called RatHat is targeting banking customers with fake screens, stolen verification codes and
Top 10 Best Google Cloud (GCP) Security Tools in 2026
Quick Answer: Google Security Command Center (Standard tier included) is every GCP project’s floor; Wiz leads agentless attack-path
Top 10 Best Microsoft Azure Security Tools in 2026
Quick Answer: Microsoft Defender for Cloud with its free foundational tier and published per-resource plans is the anchor
NightEagle Hackers Abuse Microsoft Dev Tunnels and GhostContainer to Breach Russian Companies
NightEagle, also tracked as APT-Q-95, has expanded its operations against Russian businesses with a campaign built around stolen
CISA Releases Guidance on Deploying Cyber Decoys
Complementing Zero Trust models, decoys enable organizations to detect, observe, and block malicious activity in their environments. The
AI Agents Can Retrain Own Models Mid-Task, Leaking Secrets and Erasing Refusals
New research from Irregular shows AI agents can retrain and redeploy their own underlying models during routine maintenance