Critical Spring Security Flaw Lets Attackers Gain Admin Access to LDAP Servers
A critical vulnerability in Spring Security’s embedded UnboundID LDAP server can allow remote attackers to gain administrative access
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Cyber News
CISA Urges Immediate Patching of Exploited TrueConf Vulnerabilities
The Head Mare hacktivist group has been exploiting the bugs to deploy the PhantomCore malware. The post CISA
Apple’s Private Find My People Reversed to Decrypt Live Shared Locations on Linux
A security researcher has successfully reverse-engineered Apple’s private Find My People protocol, demonstrating that a Linux machine can
Hackers Exploit TrueConf Servers to Push Malware Through Legitimate Video Conference Downloads
Kaspersky researchers investigating attacks on Russian organizations discovered that legitimate TrueConf video conferencing client installers were secretly bundled
Google Chrome 151 Chromoting Flaw Allows Attackers to Execute Malicious Code Remotely
Google has released Chrome 151 Stable, fixing seven security vulnerabilities, including a critical use-after-free flaw in Chromoting that
China-Linked Spy Campaign Uses Five New Malware Families Against Central Asian Governments
Central Asian government bodies have been targeted in a cyberespionage operation using a compact but varied set of
Who Got Missed in the MFA Rollout? More Powershell + Graph + Entra scripting!, (Fri, Aug 21st)
In every MFA rollout, there will come a time where you think you are closing in on “done”,
Even MOAR Powershell, looking at Entra logins – the good, the bad and the password sprays, (Fri, Aug 21st)
One thing that folks never seem to do after “going to the CLOOOOUUUUD” is to look at their
Someone targeted security researchers using a fake crypto conference as a lure
A hacker pretending to work for a leading cryptocurrency news website targeted several cybersecurity professionals using Google Docs
[Control Systems] Johnson Controls security advisory (AV26-837)
<article data-history-node-id="8135" about="/en/alerts-advisories/control-systems-johnson-controls-security-advisory-av26-837" class="cccs-threats full clearfix"> <div class="content"> <div class="layout layout–onecol"> <div class="layout__region layout__region–content"> <div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder
n8n security advisory (AV26-836)
<article data-history-node-id="8134" about="/en/alerts-advisories/n8n-security-advisory-av26-836" class="cccs-threats full clearfix"> <div class="content"> <div class="layout layout–onecol"> <div class="layout__region layout__region–content"> <div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder
Calling on Cyber Pros to Help Defend City Hall
Government agencies with smaller budgets need support — and here’s how you can help.