What the Latest ShinyHunters Breaches Reveal About Modern Cyberattacks
Groups like ShinyHunters are demonstrating that attackers do not necessarily need malware or zero-day exploits to cause massive
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Cyber News
UK Information Commissioner Resigns After Workplace Investigation
The UK’s data protection regulator the information commissioner has resigned after his position became “untenable”
Chinese Cyber Contractors Use Malware, Botnets, and Stolen Data to Enable State Operations
China’s cyber operations have evolved far beyond what most people imagine when they picture a state-sponsored hacker. Instead
North Korean Hackers Abuse Mastra npm Supply Chain to Target Developers and CI/CD Pipelines
North Korean hackers have turned a widely used developer tool into a weapon, quietly poisoning more than 140
13-Word Reddit Comment Can Poison ChatGPT and Gemini AI Search Results
A newly published academic paper has revealed a critical vulnerability in AI-powered deep-research systems, including those underpinning commercial
New Exploit Bypasses Apple’s Boot Defenses, Affects Millions of iPhones
The vulnerability exploited by the Usbliter8 exploit cannot be patched and a PoC exploit has been released by
Fortinet Responds to FortiBleed Campaign
A database of over 86,000 confirmed working credentials was created during the credential-harvesting campaign. The post Fortinet Responds
More Cybersecurity Firms Disclose Impact From Klue Hack
HackerOne, Huntress, Jamf, OneTrust, Recorded Future, Snyk, and Tanium are among the affected Klue customers. The post More
NCSC Urges Fortinet Customers to Tackle FortiBleed Fallout
The NCSC has released guidance for Fortinet customers impacted by the FortiBleed threat campaign
Hackers Compromised 10,000+ GitHub Repositories to Inject Malicious Script
A large-scale malware campaign has been uncovered on GitHub after a researcher identified more than 10,000 repositories distributing
Hackers Impersonate Node.js Installer in Google Ads to Deploy Infostealer Malware
Hackers are using fake Google Ads to push a brand-new malware loader that disguises itself as the popular
Anthropic’s Mythos AI Model Reportedly Breached NSA Classified Systems in Hours
Anthropic’s flagship Mythos AI model reportedly infiltrated nearly all of the National Security Agency (NSA) ‘s classified systems