Linux Process Name Masquerading, (Wed, Jun 24th)
In a previous diary, I talked about stack strings[1] with a practical example of them. Since my SEC670
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Cyber News
CISA Warns of Ubiquiti UniFi OS Vulnerability Actively Exploited in Attacks
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added multiple Ubiquiti UniFi OS vulnerabilities to its Known
Anthropic’s Mythos Model Found Vulnerabilities in Classified US Government Systems, Official Says
Come vulnerabilities were found within hours, but that does not mean the model was able to exploit them
Executive order bumps up deadline to move off quantum-vulnerable crypto
The White House is drastically shortening the deadline for government agencies and organizations to adopt new quantum-resistant encryption
Ubiquiti security advisory (AV26-498) – Update 1
<article data-history-node-id="7731" about="/en/alerts-advisories/ubiquiti-security-advisory-av26-498" class="cccs-threats full clearfix"> <div class="content"> <div class="layout layout–onecol"> <div class="layout__region layout__region–content"> <div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder
Hackers Use GoogleErrorReport Scheduled Task for Persistence in Dropping Elephant Campaign
A well-known threat actor called Dropping Elephant has returned with a refined and more dangerous campaign, using a
In-Browser Data Inspection Lets Analysts Track Phishing Attack Flow Inside Browser Sessions
Phishing attacks have grown far more complex in recent years. Attackers no longer rely on simple static pages
Scope of Salesforce Attacks Expands as Icarus Leaks Data
More victims have emerged after attackers breached application vendor Klue and used its OAuth tokens to steal customers’
Tata Electronics confirms cyberattack as hackers leak data
Tata Electronics has confirmed in a statement to BleepingComputer that it was the target of a cyberattack that
5 sources
Cisco Unified CM flaw CVE-2026-20230 now exploited in attacks
A high-severity SSRF vulnerability, tracked as CVE-2026-20230, in Cisco Unified Communications Manager Server is now being exploited in
Connected reporting, one intelligence threadbleepingcomputer.com · cybersecuritynews.com · thehackernews.com · 1 more source
Windows 11 KB5095093 update rolls out new Point-in-Time restore feature
Microsoft has released the KB5095093 preview cumulative update for Windows 11 24H2 and 25H2, which fixes numerous bugs
Klue says hackers stole credential from 2022 that led to customer data breaches
It’s unclear why Klue had not revoked the credential after the limited pilot, which hackers then used to