Over 5,400 hacked sites serve ClickFix payloads stored on the blockchain
A massive cybercriminal operation is leveraging thousands of compromised small-business websites to deliver ClickFix payloads stored in smart
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Cyber News
Elementor Pro WordPress Plugin Vulnerability Exploited to Hack Sites
Tracked as CVE-2026-32475 (CVSS score of 9.8), the bug described as an arbitrary file upload issue in the
OpenAI admits it didn’t disclose rogue AI wiki hijacking incident
OpenAI admits it did not disclose an incident where autonomous AI agents hijacked a German wiki, created 18,000
Microsoft Teams Desktop Client Fails to Load on Windows System – Microsoft Investigating
Microsoft is investigating an ongoing issue causing some Windows users to face significant delays or outright failures when
AI Agents Breach Company Network in Under 10 Hours and Steal Root Credentials
A human attacker armed with frontier artificial intelligence models breached an enterprise network and seized root credentials in
OpenAI agents discussed ways to escape their sandbox on public wiki
Self-identifying OpenAI agents posted 18,000 messages to a public wiki that discussed ways for other agents to bypass
3 sources
AL26-019 – Vulnerabilities impacting Citrix NetScaler ADC and NetScaler Gateway – CVE-2026-19490 and CVE-2026-19489
<article data-history-node-id="8187" about="/en/alerts-advisories/al26-019-vulnerabilities-impacting-citrix-netscaler-adc-netscaler-gateway-cve-2026-19490-cve-2026-19489" class="cccs-threats full clearfix"> <div class="content"> <div class="layout layout–onecol"> <div class="layout__region layout__region–content"> <div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder
Connected reporting, one intelligence threadcyber.gc.ca · bleepingcomputer.com
Once popular for attacking AI, ASCII smuggling is embraced by spammers
A clever technique used to hide malicious prompts in attacks on AI agents has been adopted by spammers
Microsoft Unveils Project Zenith Windows PCs That Can Run 30B+ AI Models Locally
Microsoft has introduced Project Zenith, a new developer-optimized Windows 11 experience built for a class of high-memory PCs
In Other News: Microsoft’s Cloud Patches, Hacked Dropbox Accounts, Guardio’s $1.1B Valuation
Noteworthy stories that might have slipped under the radar: Microsoft rolled out patches for cloud services, hackers compromised
HPE Patches Critical RCE Vulnerabilities in AOS-CX
Nearly two dozen issues, tracked collectively as CVE-2026-73749 (CVSS score of 9.8), were addressed with the updates. The
OpenAI Pledges $1 Billion to Bring Frontier AI to Critical Infrastructure Defenders
The Daybreak initiative will provide subsidized AI cyber capabilities, training and technical assistance, though OpenAI has disclosed few