Claude Code Sessions Spawn Reverse Tunnels and LaunchAgent Persistence on macOS
Claude Code activity on a macOS developer machine has raised a difficult security question: when does convenient automation
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Cyber News
New WordPress Supply Chain Attack Compromises Themes via Poisoned API Response
A supply chain attack targeting BdThemes WordPress plugins has exposed site administrators to account takeover, webshell deployment, and
Claude Opus 5 Cuts Indirect Prompt Injection Attack Success to 2% in New Benchmark Analysis
Anthropic’s Claude Opus 5 has recorded the lowest indirect prompt injection attack success rate in Gray Swan’s latest
Critical Flaws Discovered in Belgian eID Software Used by 2 Million People
The vulnerabilities affected software used by eight of Belgium’s ten largest banks and over 60 government agencies. The
Windows 11’s Built-In Weather App Reportedly Consumes 1.2GB of RAM for Showing Forecasts
Windows 11’s default Weather app, a fixture on the taskbar for millions of users, is under fire after
Claude-Powered OpenClaw AI Agent Exploits Gym API to Steal a Workout Slot
An Australian man’s AI assistant has become the center of what is being described as the country’s first
When One Remote Path Becomes Seven States of Risk
Why shared OT architecture requires shared accountability A water-system operator loses visibility into a remote pumping station. The
Metabase 0-Day Vulnerability Exploited in the Wild to Gain Admin Access
Metabase, the widely used open-source business intelligence and data visualization platform, has confirmed that a critical zero-day vulnerability
Microsoft to Launch New Security Detection Report in Teams
Microsoft is preparing to roll out a new Security Detection Report inside the Teams admin center, giving administrators
The AI safety test is becoming a safety risk
AI agents are escaping cybersecurity testing environments and reaching real-world systems, raising questions about whether safety infrastructure, industry
This ‘adversarial’ pattern can prevent surveillance cameras from detecting you
A security researcher has designed an algorithm that can create computer-generated patterns capable of hiding people, faces, and
CSS Bomb Attacks Turn Malicious Emails Into Password-Stealing Keyloggers
A new class of email-based attacks that exploit ordinary CSS styling code to hijack webmail interfaces, spy on