GhostAction Supply Chain Campaign Uses Malicious GitHub Actions to Steal CI/CD Credentials
A new wave of the GhostAction supply chain campaign has compromised 772 public GitHub repositories, using fake GitHub
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Cyber News
US Seeks Alleged Chinese Hafnium Hacker With $10 Million Reward
Zhang Yu was charged alongside Xu Zewei, who was extradited from Italy to the US in April 2026.
SonicWall and Splunk Patch Critical Vulnerabilities
Critical and high-severity vulnerabilities could allow attackers to bypass authentication, execute arbitrary code, and elevate their privileges. The
Microsoft Teams to get support for third-party deepfake detection tools
Microsoft will soon introduce support for third-party deepfake detection solutions and impersonation protection in Teams meetings. […]
Solo Hacker Used AI Tools to Breach South Korean Financial Organizations and Steal Data
A suspected lone threat actor used an AI-powered penetration-testing tool called ARTEX to breach several South Korean financial
Rein Security Raises $25 Million to Guard AI Agents at Runtime
The cybersecurity startup will invest in product innovation, agentic research, and employee base expansion. The post Rein Security
Writing the Next Chapter
Dark Reading is about to begin a new decade in its storied history, and we have some breaking
ASOS links data breach to social engineering attack, credential theft
ASOS is sending updates to affected customers about the cybersecurity incident it suffered earlier this week, confirming that
Chinese Hacker Deployed AI in Campaign Against South Korean Banks
CrowdStrike revealed that a Chinese-speaking hacker deployed agentic pentesting tool ARTEX and Claude to help breach data from
Critical Flaw in Multiple Atlassian Products Exploited in the Wild
A critical vulnerability affecting eight Atlassian products, including Jira and Confluence, is being exploited in the wild, said
Gitea Patches 27 Security Flaws, Including Critical SSH Authentication Bypass and SSRF
Gitea has released security updates addressing 27 reported flaws across versions 28.0.0 and 28.1.0, including a critical SSH
wolfSSH 1.6.0 Fixes 5 Security Flaws Including Critical MITM Host Key Verification Bypass
wolfSSL has released wolfSSH 1.6.0 to fix five security flaws, including a critical host key verification bypass that