VS Code Vulnerability Allows One-Click GitHub Token Theft
A researcher has disclosed the full details of the vulnerability and released a PoC without notifying Microsoft in
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Cyber News
Fake Claude Code Installer Via Google Sites Deliver Credential-Stealing Malware
Cybercriminals have found a new and clever way to exploit the growing popularity of AI developer tools. A
Acer Working to Patch Wave 7 Router 0-day Vulnerability
Acer is preparing a firmware update to address a critical zero-day vulnerability affecting its Wave 7 routers, following
Microsoft’s Coreutils for Windows, (Thu, Jun 4th)
I’ve been using the GnuWin32 CoreUtils for Windows for many years now (it gives you many *nix core
Bots Surpass Humans in Global Web Traffic for the First Time in Internet History
For the first time ever, automated bots have officially overtaken human users in global internet traffic, and the
Pakistan Spies on Afghan Finance Ministry With Xeno RAT
Despite broadly connected digital infrastructure, standard fare TTPs are enough to cause trouble for Afghanistan’s porous cybersecurity.
Microsoft Unveils Always-On AI Agent Scout to Integrate With Teams, Outlook, and More
Microsoft has officially introduced Microsoft Scout, its first-ever “Autopilot” AI agent, a persistent, always-on autonomous assistant designed to
Chinese hackers use new Atlas RAT malware in European cyberattacks
A Chinese-speaking cybercrime group has expanded its targeting to the European space, deploying previously undocumented malware and the
2 sources
Attackers Use AI to Automate EDR Evasion Testing
Python scripts were used to test malware against endpoint detection and response agents from Sophos, CrowdStrike, and Windows
Connected reporting, one intelligence threaddarkreading.com · cybersecuritynews.com
Broadcom VMware security advisory (AV26-548)
<article data-history-node-id="7787" about="/en/alerts-advisories/broadcom-vmware-security-advisory-av26-548" class="cccs-threats full clearfix"> <div class="content"> <div class="layout layout–onecol"> <div class="layout__region layout__region–content"> <div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder
6 sources
Cisco security advisory (AV26-547)
<article data-history-node-id="7786" about="/en/alerts-advisories/cisco-security-advisory-av26-547" class="cccs-threats full clearfix"> <div class="content"> <div class="layout layout–onecol"> <div class="layout__region layout__region–content"> <div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder
Connected reporting, one intelligence threadcyber.gc.ca · thehackernews.com · bleepingcomputer.com · 1 more source
Dashlane issues opaque advisory warning 20 encrypted vaults were stolen
There’s a lot that doesn’t add up in a security advisory password manager Dashlane published Monday, warning that