Apple’s MacOS Gap Lets Users Disable Security Tools
Attackers can exploit the issue to disable security and integrated browser tools without needing administrator privileges or kernel
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Cyber News
Exploitable CI/CD Vulnerabilities Expose Millions of Repositories to Hijacking
The security defects allow unauthenticated users to take control of the open source software supply chain. The post
BeyondTrust, LastPass Impacted by Klue-Salesforce Incident
Over a dozen Klue customers have confirmed that hackers stole data from their Salesforce instances. The post BeyondTrust,
Stealthy Mistic backdoor linked to ransomware access broker KongTuke
A new backdoor dubbed Mistic has been observed in financially motivated attacks targeting organizations in the insurance, education,
AI Is Making Attacks Cheaper, Faster and More Covert, Says ReliaQuest
New ReliaQuest study reveals the six ways AI is practically being used in attacks today
Claude Fable 5 Wrote Windows Kernel Code in Rust in 38 Minutes
Anthropic’s Claude Fable 5 generated a complete, bootable NT-compatible Windows kernel written in Rust called ntoskrnl-rs from an
Malicious AI Agent Skill Bypasses Security Scans and Seizes Full Control of Over 26,000 Agents
A malicious AI “skill” created as part of a controlled security experiment has exposed critical weaknesses in modern
UK Museums Face Cybersecurity Risks, MPs Warn
Public Accounts Committee (PAC) warns that museums and galleries aren’t getting enough government support on cyber
Webinar Today: Modern Exposure Validation in the AI Era
The exploit timeline collapsed. Make sure your validation didn’t. The post Webinar Today: Modern Exposure Validation in the
GTA 6 Scam Websites Use AI-Generated Images and Fake Download Buttons to Lure Gamers
A fresh wave of scam websites is targeting gamers worldwide, using the massive hype around Grand Theft Auto
FortiBleed Attack Hit 430,000+ FortiGate Firewalls, Stealing 110M+ Credentials
A large-scale, ongoing credential-harvesting campaign dubbed “FortiBleed” has silently compromised more than 430,000 FortiGate firewalls globally, siphoning over
How Attackers Exploit Privileged Access and How to Lock Them Out
Every major breach you read about has a quiet middle chapter that rarely makes the headline. The headline is the