Data Exposure Flaws Threaten Dify AI Platform Powering Over 1 Million Apps
Attackers could abuse Dify’s multi-tenant cloud service to read private chats, preview other tenants’ documents, and reach internal
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Cyber News
3 sources
Scattered Spider members plead guilty to hacking Transport for London
Two members of the ‘Scattered Spider’ cybercrime group pleaded guilty to hacking the Transport for London (TfL) systems
Connected reporting, one intelligence threadbleepingcomputer.com · krebsonsecurity.com · therecord.media
Broadcom VMware security advisory (AV26-625)
<article data-history-node-id="7900" about="/en/alerts-advisories/broadcom-vmware-security-advisory-av26-625" class="cccs-threats full clearfix"> <div class="content"> <div class="layout layout–onecol"> <div class="layout__region layout__region–content"> <div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder
Lookalike npm Package Hides a Multi-Stage Windows RAT
JFrog found an npm package impersonating postcss-selector-parser to drop a multi-stage Windows RAT
8-Year-Old Samsung KNOX Vulnerability Exposes Galaxy Devices to Kernel Attacks
A critical use-after-free (UAF) vulnerability in Samsung’s proprietary KNOX security subsystem, which has been hidden for over eight
LastPass Customer Data Exposed in Klue Supply Chain Attack
LastPass has disclosed a supply chain security incident involving its third-party vendor, Klue, that resulted in unauthorized access
DifyTap Flaws Allow Attackers to Wiretap AI Data Across Tenants – 1M+ Apps Impacted
Multiple critical vulnerabilities in Dify could expose sensitive AI data across tenants and potentially impact more than one
Five-Eye Agencies Call for “Whole-of-Organization and Whole-of-Society Response” to Stop Cyber Threats
The Five Eyes cyber security agencies have issued a joint warning urging governments, businesses, and critical infrastructure operators
Nearly Half of Apps Across LG and Samsung TV’S are Selling Your IP Address
New research found that 2,058 of 6,038 apps across the LG webOS and Samsung Tizen ecosystems included residential
The Exploit Doesn’t Exist. You Can Still Prove It Works Against You
Attackers can now weaponize newly disclosed vulnerabilities far faster than most organizations can patch them. Picus Security explains
Trump Issues Executive Order to Fast-Track Post-Quantum Migration
All US federal agencies will have to complete their post-quantum cryptography transition by 2031, according to a new
Hackers Use Velociraptor, Cloudflare Tunnels, Zoho Assist, and VS Code SSH for Persistence
A routine ransomware investigation turned into something far more alarming when security researchers uncovered two separate threat actors