Instagram Meta AI Vulnerability Allegedly Enables Password Reset for Accounts
A critical flaw in Meta’s AI-powered account recovery tool on Instagram allowed attackers to hijack high-value accounts by
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Cyber News
YARA-X 1.17.0 Release, (Sun, May 31st)
YARA-X’s 1.17.0 release brings 5 improvements (several performance improvements) and 1 bugfix.
4 sources
WP Maps Pro bug exploited to create admin accounts on WordPress sites
Hackers are targeting WordPress websites running a vulnerable version of the WP Maps Pro plugin, which allows creating
Connected reporting, one intelligence threadbleepingcomputer.com · cybersecuritynews.com · securityweek.com · 1 more source
GitLab Patches Multiple Duo AI, DoS, and Authorization Flaws in Community and Enterprise Edition
GitLab has released emergency security updates for both Community Edition (CE) and Enterprise Edition (EE), addressing multiple Duo
Russian Spies Are Aggressively Seeking Western Technology as Sanctions Bite, Officials Say
Moscow’s agents are building fake companies, recruiting middlemen and deploying cyber spies and hackers who gather information that
Exploit Code Published for Critical Flowise RCE Vulnerability
The one-click vulnerability allows attackers to execute arbitrary code on self-hosted Flowise servers by tricking users into importing
New CIFSwitch Linux flaw gives root on multiple distributions
A newly discovered local privilege escalation vulnerability dubbed ‘CIFSwitch’ in the Linux kernel could allow attackers to forge
Pentest Swarm AI Tool With Live Access to nmap, sqlmap, Burp, Metasploit, and Others
Pentest Swarm AI is the first open-source autonomous penetration testing platform built on a swarm intelligence architecture, not
Google Chrome’s Device-Bound Session Credentials Now GA to Block Account Takeovers
Google has officially moved Device Bound Session Credentials (DBSC) to general availability in the Chrome browser on Windows,
GREYVIBE Hackers Leverage ChatGPT and Google Gemini to Fuel Cyberattacks
GREYVIBE hackers are increasingly leveraging generative AI tools such as ChatGPT and Google Gemini to enhance cyberattack operations.
5 sources
Palo Alto Networks security advisory (AV26-462) – Update 1
<article data-history-node-id="7694" about="/en/alerts-advisories/palo-alto-networks-security-advisory-av26-462" class="cccs-threats full clearfix"> <div class="content"> <div class="layout layout–onecol"> <div class="layout__region layout__region–content"> <div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder
Connected reporting, one intelligence threadcyber.gc.ca · cybersecuritynews.com · securityweek.com · 1 more source