Fake Software Tutorials on TikTok Spread Vidar Stealer
Threat actors push fake free-software tutorials on TikTok and Instagram to spread Vidar stealer
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Cyber News
Hackers Abuse Fake Utility Downloads to Install ScreenConnect and Mine Cryptocurrency
Hackers are turning everyday software searches into a trap. A sophisticated cryptojacking campaign is actively targeting users who
Hackers Use Tax Phishing Emails to Deploy In-Memory Malware on Windows Systems
Hackers are using fake tax notification emails to trick Windows users into downloading dangerous multi-stage malware that runs
Hackers Infect npm Package dbmux With Malware to Fully Compromise Developer Systems
A malicious package targeting software developers has been discovered on npm, one of the most widely used package
ServiceNow Confirms Vulnerability Allowing Unauthorized Access to Customer Instance Tables
ServiceNow has confirmed a security vulnerability that could allow unauthorized actors to query customer instance tables, raising concerns
OpenClaw AI Agent Leaks Sensitive Credentials in New Phishing Attack Simulation
AI agents are becoming a core part of how companies manage their inboxes, triaging messages, pulling up files,
The Invisible Battlefield: How Cyber War Is Reshaping Everyday Life
Former National Cyber Director Chris Inglis warns that cyber attacks threaten hospitals, utilities and essential services.
Nightmare-Eclipse Drops Yet Another Microsoft Exploit, RoguePlanet
The disgruntled researcher released yet another PoC for a Windows Defender bug that allows for system takeover, showing
China-linked JDY botnet expands targeting of U.S. military networks
The JDY botnet, a malware network previously associated with Chinese threat actors like Volt Typhoon, has significantly expanded
OpenSSL security advisory (AV26-572)
<article data-history-node-id="7828" about="/en/alerts-advisories/openssl-security-advisory-av26-572" class="cccs-threats full clearfix"> <div class="content"> <div class="layout layout–onecol"> <div class="layout__region layout__region–content"> <div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder
HPE security advisory (AV26-573)
<article data-history-node-id="7829" about="/en/alerts-advisories/hpe-security-advisory-av26-573" class="cccs-threats full clearfix"> <div class="content"> <div class="layout layout–onecol"> <div class="layout__region layout__region–content"> <div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder
Over a Quarter of Identity Crime Victims Hit by Multiple Incidents, ITRC Data Shows
Nearly 26% of identity crime victims faced multiple incidents in the past year, as ITRC warns of a