CISA Adds Microsoft Internet Key Exchange RCE Vulnerability Exploited in Attacks
The U.S. Cybersecurity and Infrastructure Security Agency has added a critical Microsoft Internet Key Exchange vulnerability, tracked as
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Cyber News
Hackers Let Microsoft 365 Users Complete MFA, Then Steal Logged-In Sessions
A sophisticated Phishing-as-a-Service (PhaaS) platform marketed as Mirage2FA is enabling threat actors to bypass multi-factor authentication (MFA) by
SilkParasite Threatens Central Asian Orgs With Flurry of RATs
A spear-phishing campaign by a Chinese-nexus group linked to FamousSparrow provides insight into geopolitical, technical, and strategic global
Exclusive: Linux Foundation’s Akrites to Go Live in September
The Linux Foundation’s Akrites initiative will become operational in September, when it will begin accepting AI-powered vulnerability reports
Microsoft 365 Service Degradation Disrupts Users Across South America
Microsoft is responding to a regional outage that may leave users in South America unable to use multiple
Former Ping Identity and CyberArk Executives Join AppViewX to Scale Machine and Agent Identity Security
New York, New York, August 19th, 2026, CyberNewswire New revenue leader and board member join as AppViewX’s identity
China-Nexus Hackers Disguise Malicious VHD as JPEG to Deploy QUICAgent Backdoor
A China-nexus cyber espionage campaign is using a convincing visual trick to reach Myanmar government and technology personnel.
US charges Iranian hackers over $3.4 billion intellectual property theft
The U.S. has charged 17 Iranians, alleged members of a hacking-for-hire company called Mabna Institute, involved in years-long
MaaS Campaign Combines ClickFix, ErrTraffic and Cruciferra
eSentire uncovered a malware campaign combining ClickFix lures with ErrTraffic and Cruciferra
Simple Scans for Cloud Metadata Service, (Wed, Aug 19th)
Cloud providers typically expose a REST API at 169.254.169.254 that allows code running on virtual machines to retrieve
Hackers Use AI Voice Calls and Fake Banking Pages to Bypass MFA and Steal Accounts
Hackers are pairing AI-generated phone calls with fake banking pages to take over customer accounts, even when multi-factor
Hundreds of Leaked Stripe Merchant Keys Expose Payment and Payout Capabilities
Hundreds of leaked Stripe merchant keys have exposed a serious risk for online businesses and their customers. The