AryStinger Botnet Hijacks 4,300+ Routers to Build Global Attack Proxy Network
A newly discovered botnet called AryStinger has quietly hijacked more than 4,300 routers across the globe, turning them
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Cyber News
FortiBleed campaign used custom FortiGate sniffer to steal credentials
Security firm SOCRadar says the large-scale FortiBleed campaign targeting Fortinet FortiGate devices used custom sniffers to harvest authentication secrets
A new unpatchable flaw in Apple chips opens the door to an iPhone jailbreak
European offensive cybersecurity company Paradigm Shift released details of a flaw and a technique to exploit it that
Anthropic says Claude may want to see your ID
Claude’s chatbot may ask to verify your age and identity “in certain circumstances,” such as with a passport
JetBrains security advisory (AV26-623)
<article data-history-node-id="7897" about="/en/alerts-advisories/jetbrains-security-advisory-av26-623" class="cccs-threats full clearfix"> <div class="content"> <div class="layout layout–onecol"> <div class="layout__region layout__region–content"> <div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder
Nodejs security advisory (AV26-624)
<article data-history-node-id="7898" about="/en/alerts-advisories/nodejs-security-advisory-av26-624" class="cccs-threats full clearfix"> <div class="content"> <div class="layout layout–onecol"> <div class="layout__region layout__region–content"> <div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder
Microsoft says Windows 11 26H2 is coming soon, details upgrade process
Microsoft has confirmed that Windows 11 version 26H2 will be the next feature update and that devices running
Microsoft fixes AutoGen Studio flaw that enabled code execution
A vulnerability chain dubbed AutoJack in Microsoft’s AutoGen Studio interface for prototyping AI agents could let attackers manipulate
2 sources
Daily Cybersecurity Brief
Today’s signal was concentrated in a few areas rather than a broad surge of new disclosures. The most
Connected reporting, one intelligence threadlinkedin.com
Microsoft Entra Conditional Access Policies Can Be Bypassed Via Nested App Authentication
Microsoft Entra Conditional Access Policies (CAPs), a core security control for Azure and Microsoft 365 tenants, were recently
AI-Powered iOS Apps Leaking LLM API Credentials Through Network Traffic
AI-powered iOS applications are increasingly leaking large language model (LLM) API credentials through network traffic, exposing developers to
Klue Hack Leads to Data Breach Across Multiple Cybersecurity Companies
A sophisticated supply chain attack on market intelligence platform Klue has compromised Salesforce data across at least nine