Critical Apache Struts Vulnerabilities Enables Remote Code Execution Attacks
Four security flaws described in the supplied Apache Struts advisories could expose affected applications to remote code execution,
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Cyber News
ASOS confirms data breach after “HACKED” in-app notifications
UK fashion retailer ASOS confirmed a data breach Tuesday after hackers sent unauthorized push notifications through its mobile
LibreOffice says ‘no AI’ is now a software feature
The maker of the open source document editor says it has no plans to add AI to its
Former Infrastructure Engineer Sentenced for Sabotaging Employer’s Windows Network
A former infrastructure engineer has been sentenced to 32 months in federal prison for sabotaging his employer’s Windows
GitHub Copilot CLI Vulnerability Lets Attackers Steal Developer Secrets Using Encrypted Prompt Injection
A new GitHub Copilot CLI finding that could allow an attacker-controlled web page to guide the coding agent
From Telemetry to Defense: How SOC and MSSP Leaders Can Build Intelligence-Led Threat Monitoring
Every function in a security operations center, from alert triage to incident response, depends on how well threats
ASOS Hacked – App Users Receive Notifications Sent by Hackers
ASOS is investigating a cyber incident after customers received an unauthorized app notification claiming hackers had accessed its
Fake ChatGPT, Gemini Sites steal advertising accounts, MFA codes
A new campaign targeting ad account managers uses fake ChatGPT, Gemini, Claude, and Perplexity sites that steal login
Toyo Tires Scaled From 100 to 1,000 Machines Without Replacing Its Historian
Below are our top picks from IIoT World this week. A practical guide to historian augmentation for automotive
ClickFix Attack Hides VBScript Payload in Browser Cache
ClickFix sites stage a VBScript payload in the browser cache to bypass the Run dialog’s length limit
Aembit Extends Access Controls to Personal AI Agents
Silver Springs, United States / Maryland, October 6th, 2026, CyberNewswire Aembit, the identity control plane for AI agents,
Iranian Hackers Use Fake Dubai Airports Coding Test to Target Iraqi Critical Infrastructure
Iranian state-aligned hackers have used a fake Dubai Airports recruitment process to target Iraqi critical infrastructure with a