Grok exfiltrates user data when malicious instructions are encrypted
Earlier this week, researchers outlined an attack that used a secret input provided by Microsoft 365 Copilot for
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Cyber News
ToxicPanda Android Malware Can Steal Banking PINs and Gain Shell Access to Phones
A new version of the ToxicPanda Android banking trojan is widening the danger for mobile users. The malware
Hackers Use Fake CAPTCHA to Install Malware That Kills 145 Security Processes
Hackers are using fake CAPTCHA pages to push a malware loader that can shut down security software before
New Android Malware Steals Banking PINs and Relays Data Through Someone Else’s Infected Phones
A newly discovered Android malware family named Manic combines banking fraud with full-scale spyware, and it comes with
Threat Actor Hacks 14,000 IP Cameras in Ukraine and Russia
Operation CameraSwarm targeted Dahua cameras across multiple countries, focusing on Russian and CIS telecom netblocks. The post Threat
‘Grandoreiro’ Malware Resurfaces With Mexico Campaign
The banking Trojan, post-law enforcement takedown, is sprucing itself up with features that make detection and analysis harder.
AI data giant Alation confirms cyberattack
The data search and AI giant confirmed unauthorized access to its systems during an incident on Tuesday, and
US says hackers are targeting vulnerable water systems with the help of AI
Hackers are targeting internet-connected Siemens controllers used in water facilities around the United States.
US Defense Contractors Admit Their Rising CMMC Scores May Not Be Accurate
Defense contractors in the US are doubting their own self-assessment scores under CMMC Phase I, even as those
NCSC Urges Stronger Controls for Agentic AI Systems
NCSC urged sandboxing, oversight and tight access controls for autonomous AI agents
Hackers Bypass Microsoft 365 MFA and Hijack Finance Mailbox to Steal Payments
A single phishing email was enough to give attackers access to a finance employee’s Microsoft 365 account and
Zyxel Patches Command Injection Flaw in 18 Access Points Allowing Root OS Command Execution
Zyxel has released firmware updates for a high-severity command injection vulnerability, tracked as CVE-2026-6837, affecting 18 wireless access