Hackers Use RemotePC RMM and PowerShell Stagers to Deploy Prinz Eugen Ransomware
A newly identified ransomware group is using remote management software and scripted attack tools to compromise organizations and
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Cyber News
Crypto Heist Fueled by Elaborate Fake Reputation-Boosting Campaign
Attackers are using multiple online channels — including GitHub, YouTube, and VirusTotal — to build an illusion of
3 sources
Daily AI Brief
Today’s signal is less about flashy model launches and more about how AI is getting operationalized. The clearest
Connected reporting, one intelligence threadlinkedin.com
29-Year-Old ‘Squidbleed’ Vulnerability Discovered With the Aid of Claude Mythos Preview
A Heartbleed-style heap buffer overread lurking in Squid Proxy since 1997 can silently leak HTTP headers, including passwords
Red Hat security advisory (AV26-621)
<article data-history-node-id="7895" about="/en/alerts-advisories/red-hat-security-advisory-av26-621" class="cccs-threats full clearfix"> <div class="content"> <div class="layout layout–onecol"> <div class="layout__region layout__region–content"> <div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder
3 sources
[Control systems] CISA ICS security advisories (AV26–620)
<article data-history-node-id="7894" about="/en/alerts-advisories/control-systems-cisa-ics-security-advisories-av26-620" class="cccs-threats full clearfix"> <div class="content"> <div class="layout layout–onecol"> <div class="layout__region layout__region–content"> <div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder
Connected reporting, one intelligence threadcyber.gc.ca
GentleKiller Framework Disables Victims’ Security Software
ESET details GentleKiller, the EDR-killer framework the Gentlemen ransomware gang gives affiliates
Webshells Remain Popular, (Mon, Jun 22nd)
Webshells have been popular for a long time. We already covered this topic across multiple diaries[1][2]. I spent
Microsoft’s New Option Allows Organizations to Block Copilot Access to Office Files
Microsoft has announced a significant update to its Microsoft 365 security and compliance features, introducing enhanced controls that
A Glimpse into the “Search Your Target” Market for Stolen Credentials
Attackers no longer need to sift through massive credential dumps. They can pay others to do it for
Dell security advisory (AV26-619)
<article data-history-node-id="7893" about="/en/alerts-advisories/dell-security-advisory-av26-619" class="cccs-threats full clearfix"> <div class="content"> <div class="layout layout–onecol"> <div class="layout__region layout__region–content"> <div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder
Ubuntu security advisory (AV26-618)
<article data-history-node-id="7892" about="/en/alerts-advisories/ubuntu-security-advisory-av26-618" class="cccs-threats full clearfix"> <div class="content"> <div class="layout layout–onecol"> <div class="layout__region layout__region–content"> <div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder