FlutterShell macOS Backdoor Abuses Flutter Framework and WKWebView for Stealthy Attacks
A newly analyzed macOS backdoor called FlutterShell has been quietly targeting Mac users by disguising itself as legitimate
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Cyber News
Cordyceps Supply Chain Flaw Impacting Code Repositories at thousands of Organizations
A newly discovered supply chain flaw is putting thousands of organizations at serious risk. Named Cordyceps after the
FBI Warns Cybercriminals Use Traffic Distribution Systems to Redirect Users to Fraudulent Websites
Cybercriminals have found a clever and largely invisible way to send unsuspecting internet users straight to fake or
LastPass confirms data breach in Klue supply chain attack
LastPass announced that hackers accessed customer data from its Salesforce environment after stealing the company’s OAuth tokens in
SocGholish Takedown Highlights Malicious TDS Threats
SocGholish uses traffic distribution systems (TDSs) to provide initial access into victims’ networks for cybercrime groups such as
GTA 6 Scams Emerge as Pre-Orders Open
Cybercriminals launch fake GTA 6 pre-order sites offering early access for crypto payments
Eight-Year-Old Samsung KNOX Flaw Exposed Millions of Galaxy Devices to Kernel Attacks
The high-severity use-after-free vulnerability in Samsung’s KNOX security framework affected Android-powered Galaxy devices from the S9 through S25.
CISO Conversations: Carl Froggett – Combining CISO and CIO at Deep Instinct
Carl Froggett combines CISO and CIO. He currently occupies both positions at Deep Instinct. Before then, he was
Algerian Man Extradited to US for Running Cybercrime Marketplaces
26-year-old Abdellah Belmili faces up to 30 years in prison for allegedly operating the marketplaces Market0Day and Spoxy.
DifyTap Bugs Let Attackers ‘Wiretap’ AI Chat Histories
Four vulnerabilities allow attackers to exploit Dify, a platform for AI application building and management, to silently access
FortiBleed Attackers Turn Firewalls Into Credentials Stealers as Heist Persists
The threat actors engineered a Golang-based sniffer to target 430,000 FortiGate firewalls and identify 110 million credentials in
Webinar: Why email security teams are drowning in alerts
Phishing, BEC, and account takeover attacks continue to overwhelm security teams with alerts and investigations. This webinar explores