Citrix, Fortinet, Ivanti Patch 29 Vulnerabilities Across Their Products
Critical-severity flaws could lead to authentication bypass, code execution, and sensitive authentication information leaks. The post Citrix, Fortinet,
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Cyber News
Orphaned VBA Projects Inside DWG Files, (Wed, Oct 14th)
Years ago I wrote diary entries about VBA code stored inside AutoCAD drawing files (.dwg).
SAP Patches Critical NetWeaver, S/4HANA Vulnerabilities
The bugs could allow attackers to invoke internal operations and execute code, completely compromising the system. The post
Hackers Abuse Google Search to Attacks ITadmins with Weaponized PuTTY Installer
IT administrators searching Google for PuTTY may see a convincing fake download result mixed with legitimate links. Researchers
Ransomware Gangs Embrace Physical Threats, Family Stalking?
Organizations are reporting that employees face threats to their families, stalking, physical violence, and abduction. But these alarming
View intelligence · Critical 2 sources
Microsoft Windows Shell 0-Day Vulnerability Actively Exploited in Attacks
Microsoft has patched an actively exploited Windows Shell zero-day vulnerability that allows attackers to bypass Mark of the
Connected reporting, one intelligence threadcybersecuritynews.com · securityweek.com
OpenAI Engineer Arrested for Planting Spyware Device in an Executive Conference Room
An OpenAI engineer has been arrested for allegedly hiding an audio recording device in an executive conference room
Justice Department says North Koreans have infiltrated dozens of U.S. companies
U.S. authorities warn that sanctioned hackers are increasingly targeting Americans to act as facilitators between breached U.S. companies
Microsoft Patches More Than 1,400 Security Flaws
Microsoft today issued updates to fix more than 1,400 security vulnerabilities in its Windows operating systems and other
Employee Arrested After Listening Device Found in OpenAI Conference Room, FBI and the Company Say
Saudi national Abdulrahman Alfozan was arrested Friday and terminated by OpenAI. The post Employee Arrested After Listening Device
Zero-Days Lurk in Microsoft’s Overgrown October Patch Tuesday
The scary surprises for the largest security update ever include security bypasses and unauthenticated RCEs.