Maximum-Severity SSRF Flaw in SonicWall SMA Devices Under Attack
Attackers are currently targeting a critical vulnerability in SMA 1000 appliances, putting SonicWall customers in a familiar yet
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Cyber News
Prominent Ransomware Negotiator Faces Extortion Charges
Edward Dubrovsky, a longtime cybersecurity executive, was arrested and charged in Pennsylvania last week under conspiracy to extort
2 sources
Norway fines Microsoft ad firm $9.6 million over Grindr data sharing
Norway’s Data Protection Authority (Datatilsynet) has fined Microsoft-owned advertising company Xandr NOK 92 million ($9.6M) for unlawfully processing
Connected reporting, one intelligence threadbleepingcomputer.com · thehackernews.com
Yandex confirms service outage as users lose access to cloud files
Russian cloud services provider Yandex announced that drone attacks damaged three of its data centers, forcing it to shut
No Identity, No Recovery: Cyber Resilience Starts With IAM
The proliferation of enterprise apps and the centrality of cloud identity providers requires an identity security rethink.
Anthropic takes risky AI tests offline after models breach govt sites
Anthropic announced that its internal AI models undergoing “high-risk and cybersecurity evaluations” no longer have internet access following
Ledger confirms spy chip implant behind wallet crypto thefts
Ledger has confirmed that some of its devices distributed through Southeast Asian reseller CryptoBilis were compromised with a
Luna Moth Leaks Shed Light on Ransomware Group’s Inner Workings
Leaked documents suggest a multi-pronged operation, with social engineering and more technical attackers working together to manipulate a
Ahold Delhaize Takes Systems Offline Following Cybersecurity Incident
Ahold Delhaize has taken some systems offline after identifying a security issue within its network, the food retail
Cyberattack shuts down refrigerators at French supermarkets
Attackers remotely defrosted refrigerators at multiple French supermarket chains overnight in a cyberattack that reportedly targeted Danfoss refrigeration
Google DevSite Flaw Let Attackers Execute Remote Code Through Forged Flask Sessions
A critical vulnerability in Google’s shared DevSite platform could have allowed an unauthenticated attacker to forge Flask session
Critical GitLab Vulnerability Enables Arbitrary Code Execution Attacks on Servers
GitLab has released urgent security updates to fix a critical vulnerability that could allow attackers to execute arbitrary