NIST Finalizes Guidelines on Protecting Online Identity and Access Tokens From Misuse
The finalized publication is designed to help organizations take effective steps to avoid exposing tokens to attackers.
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Cyber News
CISA and NIST Release Technical Checklist for Safeguarding Identity Tokens From Theft and Misuse
The Cybersecurity and Infrastructure Security Agency (CISA) and the National Institute of Standards and Technology (NIST) have released
CISA Shares 17 Techniques Used by Hackers to Compromise Active Directory Environments
CISA and five international cybersecurity agencies have released detailed guidance describing 17 common techniques hackers use to compromise
Apple Rolls Out Massive Security Update Fixing 273 Vulnerabilities Across Its Devices
Apple has released one of its largest coordinated security rollouts, addressing 273 distinct critical vulnerabilities across iPhone, iPad,
How to Keep Malware’s Rotating Infrastructure From Becoming a Detection Gap
You can’t detect today’s attacks with yesterday’s threat intelligence; that’s how you could briefly formulate the challenge many
Microsoft Bans Its AI Models From Launching Cyberattacks or Escalating Their Own Access
Microsoft has published a draft Humanist AI Code of Conduct that would prohibit its in-house MAI models from
$1 Million Sandbox Challenge Uncovers Linux Kernel Flaws
AI-assisted researchers flooded Vercel with reports, forcing the company to automate vulnerability triage. The post $1 Million Sandbox
Exein Secures $270M at $1.7B Valuation for Physical AI Security
The cybersecurity startup is building a proprietary foundation model and plans to accelerate global expansion. The post Exein
Texas Utility CenterPoint Energy Confirms Breach After Hacker Leaks Data
A hacker claims to have stolen 7.5 million customer records after breaching the company’s systems. The post Texas
VectraRAT Can Hack Windows Enterprises for $250 per Month
The full-service malware-as-a-service (MaaS) platform offers a Windows implant, command-and-control (C2) infrastructure, and an operator panel for comprehensive
CenterPoint Energy confirms customer data stolen in cyberattack
CenterPoint Energy disclosed a breach compromising some customers’ personal information after an attacker leaked data allegedly stolen from
BambooToken malware controls Windows and Linux systems via MQTT
A previously unknown malware framework called BambooToken, active since at least 2023, is now using the Message Queuing