Companies Have Six Months to Prepare for Automated Attacks
Frontier AI models have already demonstrated they can autonomously — and in some cases, inadvertently — conduct end-to-end
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Cyber News
IDScan sued over alleged data breach affecting 153 million drivers
Multiple lawsuits have been filed against identity verification company IDScan after hackers allegedly breached the service and offered
Critical Citrix NetScaler auth bypass now leveraged in attacks
Attackers have begun targeting a critical-severity Citrix NetScaler auth bypass flaw (CVE-2026-19490) in the wild, according to vulnerability
Hackers Use Popular Messaging Services to Control New Windows Backdoors
A financially motivated threat group known as Toy Ghouls has begun using two custom Windows backdoors that communicate
Microsoft says some users can’t open the Teams desktop client
Microsoft is working to resolve a known issue that causes delays or blocks some users from opening the
Google security advisory (AV26-883)
<article data-history-node-id="8185" about="/en/alerts-advisories/google-security-advisory-av26-883" class="cccs-threats full clearfix"> <div class="content"> <div class="layout layout–onecol"> <div class="layout__region layout__region–content"> <div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder
US military disabled ad tracking on troops’ devices following reports of targeted attacks
A senator’s letter confirms the U.S. military moved to prevent the tracking after foreign adversaries used location data
NodeStealer Can Now Record Everything Victims Type and Steal Their Screenshots
NodeStealer has returned with a more invasive toolkit. The Python-based information stealer can now record keystrokes, watch copied
Hackers Use Invisible Unicode Characters to Evade Phishing Detection in Millions of Emails
Attackers are using invisible Unicode characters to make phishing emails appear harmless while disrupting the security systems built
Hackers Turn Claude, Qwen and DeepSeek Into AI Agents for Real-World Cyberattacks
Hackers have turned commercial AI models into working parts of a cyberattack operation. The campaign paired AI-directed tasking
Sangoma Switchvox Vulnerabilities Exploited in the Wild
Tracked as CVE-2026-9586, the unauthenticated SQL injection flaw can be exploited remotely for arbitrary code execution. The post
39 New Methods That Compromise Passkey Authentication
Passkeys eliminate many password-based attacks, but researchers have documented 39 methods for compromising authentication built around them. Token