Hackers Impersonate Robinhood With Fake Sign-In Alerts in Callback Phishing Attacks
Robinhood users are being targeted with fake sign-in alerts that urge them to call a phone number. The
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Cyber News
Microsoft Warns of Increase in Number of Security Updates
Microsoft has said the volume of Windows security updates is set to grow as it uses AI to
“Comment stuffing” in an HTML phishing attachment as a mechanism for evading AI-based detection?, (Fri, Jul 10th)
Anyone who deals with phishing messages caught by basic security filters knows that most phishing samples tend to
Hackers Turn 50+ Dormant GitHub Accounts Into a Network for Corporate Source Code Recon
Research has uncovered coordinated campaigns that use more than dormant GitHub accounts to map corporate organizations, repositories, and
GigaWiper Combines Multiple Malware for System-Level Sabotage
The backdoor’s destructive capabilities include a standalone wiper, ransomware encryption, and a multi-pass wiping command. The post GigaWiper
NHS Warns Staff Over Unauthorized Access to Patient Data
NHS tells staff they could face prison for “inappropriate” access to patients’ medical records
Ransomware Negotiator Sentenced for BlackCat Ransomware Operators to Attack Victims
A former Florida ransomware negotiator has been sentenced to 70 months in federal prison after conspiring with BlackCat/ALPHV
GigaWiper Malware Attacking Windows Systems With Data Wipers and Fake Ransomware Notices
GigaWiper is a newly identified Windows threat built to do more than steal information or lock a screen.
‘HalluSquatting’ Turns AI Hallucinations Into Botnet Delivery Mechanism
Researchers demonstrate adversarial hallucination squatting against popular AI assistants to achieve remote code execution. The post ‘HalluSquatting’ Turns
2 sources
Former ransomware negotiator gets 4 years for BlackCat attacks
A former employee of cybersecurity incident response company DigitalMint was sentenced to 70 months in prison for targeting
Connected reporting, one intelligence threadbleepingcomputer.com · thehackernews.com
Braintree NuGet Typosquat Uses XOR-Obfuscated C2 to Hide Environment Secret Theft
A malicious NuGet package impersonating the Braintree .NET payment library has put production payment systems at risk. The
Network of 200 GitHub Repositories Used for Malware Infection
A Go module is used to load PowerShell code that fetches a resolver from public dead drops to