Hackers Leverage Microsoft Teams to Breach Organizations Posing as IT Helpdesk Staff
A newly identified threat group, UNC6692, has been caught running a sophisticated multistage intrusion campaign that uses Microsoft
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Cyber News
Tropic Trooper APT Takes Aim at Home Routers, Japanese Targets
The Chinese state-sponsored cyber threat is known for moving fast and trying odd attack vectors; now it’s branching
Multiple Vulnerabilities in StrongSwan (RCE, DoS, Security Bypass)
CERT-FR published advisory CERTFR-2026-AVI-0484 on April 23, 2026, disclosing seven vulnerabilities (CVE-2026-35328 through CVE-2026-35334) in strongSwan, an open-source
CPython Security Policy Bypass Vulnerability
CERT-FR has published advisory CERTFR-2026-AVI-0482 identifying a security vulnerability in CPython (the reference implementation of Python) that allows
Multiple Vulnerabilities in Stormshield Management Center, RCE
CERT-FR published advisory CERTFR-2026-AVI-0483 on April 23, 2026, disclosing 12 CVE-referenced vulnerabilities in Stormshield Management Center, affecting versions
Hackers exploit file upload bug in Breeze Cache WordPress plugin
Hackers are actively exploiting a critical vulnerability in the Breeze Cache plugin for WordPress that allows uploading arbitrary
In a first, a ransomware family is confirmed to be quantum-safe
A relatively new ransomware family is using a novel approach to hype the strength of the encryption used
Tenable security advisory (AV26-387)
<article data-history-node-id="7597" about="/en/alerts-advisories/tenable-security-advisory-av26-387" class="cccs-threats full clearfix"> <div class="content"> <div class="layout layout–onecol"> <div class="layout__region layout__region–content"> <div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder
Spring security advisory (AV26-386)
<article data-history-node-id="7596" about="/en/alerts-advisories/spring-security-advisory-av26-386" class="cccs-threats full clearfix"> <div class="content"> <div class="layout layout–onecol"> <div class="layout__region layout__region–content"> <div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder
North Korean Hackers Use Fake IT Worker Scheme to Infiltrate Companies and Evade Sanctions
North Korea has been running one of the most quietly effective cyber fraud operations in recent years. State-sponsored
Malicious npm Package Turns Hugging Face Into Malware CDN and Exfiltration Backend
A rogue npm package named js-logger-pack has been caught quietly turning Hugging Face, a widely trusted AI model hosting platform,