Public PoC Released for Windows NT OS Kernel Privilege Escalation Vulnerability
Public proof-of-concept (PoC) exploit code was released for CVE-2026-42980, a local privilege escalation vulnerability in the Windows NT
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Cyber News
Hackers Let Victims Complete MFA Then Steal the Entire Microsoft 365 Session
Multi-factor authentication is meant to stop stolen-password attacks. A newly documented phishing technique instead persuades users to approve
Kali365 Phishing Kit Abuses Microsoft Device Codes to Hijack Microsoft 365 Accounts
A phishing kit known as Kali365 is targeting U.S. organizations through device code phishing attacks that abuse Microsoft’s
How an OpenAI benchmark test turned into a real-world cyberattack
OpenAI says an agent powered by its LLM models escaped its sandboxed testing environment to infiltrate Hugging Face’s
Iranian Hackers Are Quietly Building Access They Can Turn Into Wartime Disruption
Iran-linked hackers are not relying only on loud attacks, public leaks, or website defacements. They are quietly building
When AI Attacks: OpenAI Models Autonomously Hack Hugging Face
Advanced LLMs escaped their sandboxes while attempting to achieve a non-malicious benchmark test objective.
Swiss rail giant Stadler rejects $12.3M ransom demand after cyberattack
Swiss rail vehicle manufacturer Stadler Rail says the Everest ransomware gang demanded about $12.3 million after breaching a
2 sources
Google Chrome security advisory (AV26-730)
<article data-history-node-id="8020" about="/en/alerts-advisories/google-chrome-security-advisory-av26-730" class="cccs-threats full clearfix"> <div class="content"> <div class="layout layout–onecol"> <div class="layout__region layout__region–content"> <div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder
Connected reporting, one intelligence threadcyber.gc.ca
2 sources
Oracle security advisory – July 2026 quarterly rollup (AV26-729)
<article data-history-node-id="8019" about="/en/alerts-advisories/oracle-security-advisory-july-2026-quarterly-rollup-av26-729" class="cccs-threats full clearfix"> <div class="content"> <div class="layout layout–onecol"> <div class="layout__region layout__region–content"> <div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder
Connected reporting, one intelligence threadcyber.gc.ca · blog.qualys.com
If you pay a hacker’s ransom, chances are that they’ll come back for more
The long-held understanding among security researchers and network defenders is that it’s impossible to negotiate in good faith
AI-Speed Attacks Are Forcing a Rethink of Incident Response
Byline: Nikola Petrovic Accelerating Attacks. Our Detection Processes Are Still Running on Human Time. In one of my previous
Cloudflare Data Reveals Which World Cup Teams Moved the Global Internet Most
The 2026 World Cup did more than fill stadiums and television screens. It reshaped when millions of people