2.86 Billion Credentials Flood Criminal Markets as Enterprise Access Moves Upmarket
Stolen login data is so abundant that criminal markets can sell it for almost nothing. Meanwhile, verified entry
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Cyber News
Fake CCleaner Download Installs GhostDesk Chrome Spyware on Windows PCs
Windows users looking for a familiar cleanup utility are being steered toward a convincing counterfeit download page. The
2 sources
WhatsApp Unveils New Scam Alert Feature
Signal has also made a security announcement: an automatic key verification feature to complement its safety number system.
Connected reporting, one intelligence threadsecurityweek.com · cybersecuritynews.com
Walmart Leaders Transform Security Operations Without Going Bananas
The big-box giant has scaled its defenses by encouraging trust and innovation. Good communications, transparency and team spirit
Hackers leverage new Microsoft SharePoint exploit in attacks
Hackers have already begun using a proof-of-concept (PoC) exploit for a critical Microsoft SharePoint vulnerability, published by cybersecurity company Rapid7
13-Minute WindRelay Malware Attack Uses SpyNote RAT and NFC Relay Malware to Drain Victim Accounts
A new Android fraud operation shows how quickly a convincing phone call can turn into financial loss. The
Ceva Logistics Operations Disrupted by Cyberattack
Affecting European contract logistics operations at eight Ceva warehouses, the incident caused shipment delays for multiple customers. The
Signal adds new security feature to thwart man-in-the-middle attacks
Signal has introduced Automatic Key Verification, a new security feature that gives users a new way to ensure
Chipmaker Patch Tuesday: Intel, AMD Fix Over 80 Vulnerabilities Combined
Intel has informed customers about several high-severity vulnerabilities that can lead to privilege escalation and even code execution.
CAV3RN Uses Google Apps Script as C2 Relay to Hide Malware Traffic Behind Google Infrastructure
CAV3RN is a modular espionage framework that is becoming harder to see on a network. Its newest communication
Russian-Linked Hackers Accessed Polish Power Plant OT Network Through Private APN, Says CERT.PL
The Polish CERT has released details of another 2025 attack on a combined heat and power plant in
Sandworm Fake Job Interviews Push Trojanized WireGuard VPN to Infect IT Professionals
Sandworm has turned the routine job interview into a route for compromising IT workers. The campaign uses convincing