Europol-Led Operation Endgame Takes Down StealC and Amadey Infostealers
Operation Endgame seized around 50 domains and nearly 200 active IP-based servers associated with the infostealers
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Cyber News
2 sources
PoC Exploit Released for Microsoft Exchange Server Elevation of Privilege Vulnerability
A public proof-of-concept exploit is now available for CVE-2026-45504, a high‑severity server-side request forgery vulnerability in Microsoft Exchange
Connected reporting, one intelligence threadcybersecuritynews.com
Fake Income Tax Assessment Notice Delivers RAT-Like Malware to Windows Users
Cybercriminals are now using fake government tax notices to push dangerous malware onto Windows computers, and the tactic
Laravel Livewire Applications Compromised to Steal Credentials Exploiting RCE Vulnerability
A large-scale cyber campaign targeting Laravel Livewire applications has been uncovered, with attackers exploiting a critical remote code
Advancing Product Security: New IoT Guidance and New Engagement
It may be summertime, but the NIST Cybersecurity for the Internet of Things (IoT) Program isn’t hitting the
Critical Webmin Vulnerabilities Allow Attackers to Impersonate as Any User
Critical security flaws in Webmin have exposed systems to severe risks, allowing attackers to impersonate users, bypass authentication,
White House Orders Federal Agencies to Migrate Systems to Post-Quantum Cryptography
The White House has issued a major executive order directing U.S. federal civilian agencies to migrate high‑value systems
Browser-in-the-Browser Kit Uses Fake Software Errors to Deliver Malware Installers
A newly identified attack campaign is using a sophisticated Browser-in-the-Browser (BitB) kit to trick users into downloading malware
Exclusive: Meet AIVEX, a New Triage Model Built to Reduce Supply Chain Threat and Risk
The new framework seeks to help security teams identify which software supply chain vulnerabilities pose the greatest operational,
Microsoft and Allies Smash Shared Infrastructure of Amadey and StealC Malware
Hundreds of C&C servers were disrupted in an operation involving law enforcement and several cybersecurity companies. The post
CISA warns of max severity Ubiquiti flaws exploited in attacks
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning of hackers actively exploiting flaws in Ubiquity UniFi OS and Lantronix
Securing the service desk: Why social engineering attacks keep succeeding
Service desks have become a favored target for attackers seeking password resets, MFA changes, and access to corporate