Critical Elementor Pro bug exposes WordPress sites to RCE attacks
A critical vulnerability in the Elementor Pro WordPress plugin could allow attackers to upload executable files for remote
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Cyber News
How MSPs can catch phishing attacks email filters miss
AI is making phishing attacks more personalized, convincing, and difficult for traditional email filters to detect. Kaseya explains
Cisco security advisory (AV26-834)
<article data-history-node-id="8132" about="/en/alerts-advisories/cisco-security-advisory-av26-834" class="cccs-threats full clearfix"> <div class="content"> <div class="layout layout–onecol"> <div class="layout__region layout__region–content"> <div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder
Grok exfiltrates user data when malicious instructions are encrypted
Earlier this week, researchers outlined an attack that used a secret input provided by Microsoft 365 Copilot for
ToxicPanda Android Malware Can Steal Banking PINs and Gain Shell Access to Phones
A new version of the ToxicPanda Android banking trojan is widening the danger for mobile users. The malware
Hackers Use Fake CAPTCHA to Install Malware That Kills 145 Security Processes
Hackers are using fake CAPTCHA pages to push a malware loader that can shut down security software before
New Android Malware Steals Banking PINs and Relays Data Through Someone Else’s Infected Phones
A newly discovered Android malware family named Manic combines banking fraud with full-scale spyware, and it comes with
Threat Actor Hacks 14,000 IP Cameras in Ukraine and Russia
Operation CameraSwarm targeted Dahua cameras across multiple countries, focusing on Russian and CIS telecom netblocks. The post Threat
‘Grandoreiro’ Malware Resurfaces With Mexico Campaign
The banking Trojan, post-law enforcement takedown, is sprucing itself up with features that make detection and analysis harder.
AI data giant Alation confirms cyberattack
The data search and AI giant confirmed unauthorized access to its systems during an incident on Tuesday, and
US says hackers are targeting vulnerable water systems with the help of AI
Hackers are targeting internet-connected Siemens controllers used in water facilities around the United States.
US Defense Contractors Admit Their Rising CMMC Scores May Not Be Accurate
Defense contractors in the US are doubting their own self-assessment scores under CMMC Phase I, even as those