Unpatchable BootROM Flaw Impacts Apple A12, A13 Chips
Apple BootROM exploit exposes unpatchable USB flaw on A12 and A13 devices
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Cyber News
Klue hack results in data breach at several cybersecurity firms
Huntress, HackerOne, Jamf, Recorded Future, and Tanium are among the cybersecurity companies that had data stolen following an
Decades-Old Squid Proxy Flaw ‘Squidbleed’ Can Expose User Data
Squidbleed, discovered with the aid of Claude Mythos Preview, has been described as a Heartbleed-style vulnerability. The post
Microsoft Attributes Mastra AI Supply Chain Attack to North Korea
North Korean threat actor Sapphire Sleet has been linked to a supply chain attack targeting Mastra, according to
Microsoft has urged IT Admins to Prepare for Windows 11, Version 26H2 Update
Microsoft has urged IT administrators to begin preparing for the upcoming Windows 11 version 26H2 update, which is
New Malware Attack Via WhatsApp Attacking Windows System to Enable Remote Access For Attackers
A new and active malware campaign is spreading through WhatsApp, targeting everyday Windows users across more than a
North Korean Hackers Blamed for Mastra NPM Supply Chain Attack
A malicious dependency the attackers added to over 140 Mastra packages fetches a payload targeting cryptocurrency extensions. The
Klue Breach Enables Hackers to Compromise Cybersecurity Firms via OAuth Tokens
At least five cybersecurity firms confirmed they have been affected by a breach of business intelligence platform Klue
GitHub Actions Checkout Update Blocks Workflows Triggered by Malicious pull_request_target
GitHub has rolled out a significant security enhancement to GitHub Actions by updating actions/checkout to block unsafe workflows that abuse
QNAP Patches Multiple Injection Vulnerabilities Leads to Arbitrary Command Execution
QNAP has released security updates to address multiple vulnerabilities affecting its widely used NAS operating systems, including QTS,
pgAdmin 4 Released With Fixes for Seven Security Vulnerabilities and New Features
pgAdmin 4 version 9.16 has been released, delivering a combination of new features, bug fixes, and critical security