Hackers Abuse Active Directory SPN Misconfigurations for Stealthy Kerberoasting Attacks
Threat actors are increasingly abusing overlooked Active Directory service principal name (SPN) misconfigurations to launch stealthier Kerberoasting attacks,
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Cyber News
Critical cPanel Vulnerability Allows Attackers to Take Full Server Control
A newly disclosed vulnerability in cPanel and WHM, the widely used web hosting control panel software, could let
Nearly 700 rogue AI agents coordinated in the Hugging Face attack
New details about the July attack on Hugging Face reveal that hundreds of AI agents driven by OpenAI’s
Chinese Routers Sold Worldwide Contain Backdoors
An untold numbers of ZBT routers sold around the world as white-label products come with several implants built
Agentic AI Risks, CVE Program Concerns Permeate Black Hat USA 2026
This installment of the Reporters’ Notebook video series discusses the topics that dominated the cybersecurity conference, such as
ATF declares ‘major incident’ as ransomware gang claims hack
The ATF is the latest federal government agency in recent years to notify Congress of a “major incident”
PaperCut NG/MF Vulnerability Actively Exploited in Attack – All Versions Impacted
PaperCut has confirmed that hackers are actively exploiting an unpatched vulnerability in its widely used PaperCut NG and
Cybercriminals Are Selling Corporate Executives’ Social Security Numbers for Just 25 Cents
Corporate executives’ most sensitive identity data is being sold on dark web marketplaces for as little as a
New Twitter Launches as Startup Claims Elon Musk’s X Abandoned the Twitter Name
A startup operating as Operation Bluebird, Inc. has launched early access to a new social media service on
TP-Link Kasa Smart Home Devices Vulnerability Allows Attackers to Disrupt Device Functionality
TP-Link has disclosed a high-severity vulnerability affecting multiple Kasa smart home devices that could allow attackers on the
GitLab Fixes Claude AI Agent Flaw That Could Execute Arbitrary Commands in CI Pipeline
GitLab has released security updates to fix a high-severity vulnerability in its Duo Claude AI agent that could
PaperCut warns of NG, MF flaw exploited in zero-day attacks
PaperCut is warning that hackers are actively exploiting a vulnerability in all versions of its PaperCut NG and PaperCut