New GhostApproval Vulnerability Affects Amazon Q, Claude Code, Cursor, and Other AI Agents
A newly disclosed vulnerability pattern dubbed “GhostApproval” has exposed a critical security flaw in six of the most
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Cyber News
6 sources
Microsoft patches RoguePlanet Defender zero-day vulnerability
Microsoft has released a security patch to address a Defender zero-day vulnerability known as “RoguePlanet,” disclosed after the
Connected reporting, one intelligence threadbleepingcomputer.com · cybersecuritynews.com · arstechnica.com · 2 more sources
Palo Alto PAN-OS Vulnerability Allows Arbitrary Code Execution Through Malicious Network Traffic
Palo Alto Networks has disclosed a high-severity vulnerability in PAN-OS that could allow unauthenticated attackers to execute arbitrary
Claude, Cursor, and Codex Trigger Endpoint Security Rules Used to Catch Hackers
AI coding agents such as Claude Code, Cursor, and OpenAI Codex are increasingly appearing in enterprise environments, and
_HELP_ME_ESCAPE_FROM_BELARUS_PLEASE_ [Guest Diary], (Tue, Jul 7th)
[This is a Guest Diary by Jason Callahan, an ISC intern as part of the SANS.edu BACS program]
PromptSpy Android Malware Uses Google Gemini to Adapt During Runtime Execution
A newly identified strain of Android spyware called PromptSpy has become the first mobile malware known to call
APT-C-20 Hackers Hide Shellcode in PNG Images to Launch Fileless C# Backdoor
A well known hacking group has found a clever way to sneak malicious code past security tools, using
Mexico’s New Cyber Plan Faces Its First Real Test
The Latin American nation’s cybersecurity plan — still in the expansion phase — has to survive its own
ClickFix Campaign Uses Fake Google Verification Page to Infect Mexican Bank Customers
A fake Google verification page is being used to infect customers of Mexican banks with a malware toolkit
Mount Royal University confirms breach as hackers claim attack
Mount Royal University in Calgary says hackers stole and then deleted data from its file storage systems after
Lone Attacker Uses AI to Breach AWS Cloud Environment in 72 Hours
The attacker exploited AI workflows, chained cloud weaknesses, and stolen credentials to extort a large Amazon customer.
Progress security advisory (AV26-678)
<article data-history-node-id="7960" about="/en/alerts-advisories/progress-security-advisory-av26-678" class="cccs-threats full clearfix"> <div class="content"> <div class="layout layout–onecol"> <div class="layout__region layout__region–content"> <div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder