‘Cordyceps’: Mushrooming Malicious Pull Requests Threaten Developer Workflows
The CI/CD workflow weakness affects Microsoft’s Azure Sentinel, Google’s AI Agent Development Kit, Apache’s Doris analytics database, Cloudflare’s
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Cyber News
Healthtech firm Xolis suffers data breach impacting 1.4 million people
Healthcare technology company Xsolis says that sensitive data belonging to nearly 1.4 million individuals was compromised in a
Anthropic Launches Claude Tag – AI Teammate Now Lives Inside Slack
Anthropic has unveiled Claude Tag, a new agentic AI feature that integrates directly into Slack, allowing teams to
New macOS ClickFix attack silently mounts DMGs to push infostealer
A new macOS ClickFix campaign is using Terminal commands to silently download, mount, and launch info-stealing malware from
Modernize or Relocate. $1 Trillion Has Picked a Side.
BCG surveyed 1,000 manufacturers and found $1.03 trillion in European manufacturing value at risk of relocation.
AI Is is making advanced cyber attacks more accessible. How do we make advanced defenses more accessible?
This month I am spotlighting the new LinkedIn Newsletter by Waterfall Security Solutions’ CEO and Co-Founder, Lior Frenkel.
Takepoint Signals | Risk ownership crosses the OT boundary
Australia’s Cyber and Infrastructure Security Centre expanded its Critical Infrastructure Risk Management Program this week to cover AI,
Dragos Unveils AI for OT Security
Named EmberAI, the new capability is built on Dragos’ massive operational technology cybersecurity dataset. The post Dragos Unveils
Bajaj Auto Confirms Systems Affected by Ransomware Attack
India’s leading two-wheeler manufacturer, Bajaj Auto, disclosed on Tuesday that it fell victim to a ransomware attack that
Your SOC Has Too Many IOCs: How to Cut Feed Noise, Prioritize What Matters, and Improve Response
Most SOCs measure threat intelligence the same way they measure storage: bigger is better. A feed that delivers two million indicators a month looks more impressive on a vendor scorecard than one that delivers two hundred thousand. Dashboards proudly display IOC counts in the millions. Procurement decisions get justified by “coverage.” And yet, ask almost any SOC analyst how many of those indicators they’ve actually looked at, matched against a log, or used to close an investigation, and the answer is usually somewhere between “not many” and “no idea.” This is the quiet contradiction at the center of modern threat intelligence: teams are drowning in indicators while starving for usable intelligence. Volume and value have become decoupled, and most security programs haven’t noticed because nobody is measuring the difference. The Difference Between Threat Data and Threat Intelligence An IOC is not automatically useful
AWS Warns Outbound Traffic Blind Spots Can Enable Cloud Data Exfiltration
Most organizations spend a lot of time locking the front door of their cloud environments. Firewalls, access controls,
Claude Down – A Major Outage Affects Most of the Models
Anthropic experienced a service disruption on Tuesday that produced elevated error rates across multiple Claude models, according to