Ivanti Zero-Day Chain Gave Attackers Root Access to Fully Patched VPN
CVE-2026-104935 affects Ivanti Connect Secure and it can be exploited for unauthenticated remote code execution with elevated privileges.
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Cyber News
UK Housing Ombudsman Service investigates ‘security incident’
The U.K. Housing Ombudsman Service is investigating a third-party IT security incident that impacted its case management system
Pluto Security raises $42M as AI gives enterprise security teams a new headache
The problem with giving everyone in a company access to AI tools is that people will use them
Critical FortiSandbox GUI Vulnerability Allows Remote Attackers to Bypass Authentication
Fortinet disclosed a critical authentication-bypass vulnerability in the FortiSandbox graphical user interface that could let remote attackers access
TFG London Cyberattack Disrupts IT Systems Used by Phase Eight, Hobbs, and Whistles Brands
TFG London has confirmed a cyberattack that disrupted IT systems supporting Phase Eight, Hobbs, and Whistles. South Africa’s
Adobe Patches 140 Vulnerabilities Across 10 Products
The flaws affect products such as Commerce, Photoshop, ColdFusion, Substance 3D, Dimension, FrameMaker and Bridge. The post Adobe
Google Partially Reverses Chrome Bug Bounty Cuts
Google is restructuring bug bounty rewards with a focus on complex memory safety vulnerabilities. The post Google Partially
Windows 11 KB5127648 & KB5126653 cumulative updates released
Microsoft has released Windows 11 KB5127648 and KB5126653 cumulative updates for versions 26H2/25H2/24H2 and 23H2 to fix security
Critical Docker Hub Flaw Lets Attackers Impersonate Users and Push Container Images
Docker has disclosed a critical Docker Hub vulnerability that could let attackers impersonate other users and publish container
CrowdStrike Joins Anthropic Defense Program to Advance AI-powered Defense for Critical Infrastructure
CrowdStrike has joined Anthropic’s Critical Infrastructure Defense Program to help strengthen AI-powered cybersecurity across energy, water, manufacturing, and
Zoom Clients for Certificate Validation Flaw Exposes Sensitive Information via Network Access
Two high-severity certificate validation flaws in Zoom clients could allow attackers without login credentials to access sensitive information
Meta Says Hackers Took Code, Personal Data of 1,500 in GitHub Breach
Most of the affected individuals are Meta employees in the United States and they are being offered credit