73 Open VSX Sleeper Extensions Linked to GlassWorm Activate New Malware Campaign
The GlassWorm supply chain attack targeting the Open VSX marketplace has escalated with the discovery of 73 new
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Cyber News
Litecoin Zero-Day Vulnerability Exploited in DoS Attack, Disrupts Major Mining Pools
A critical zero-day vulnerability in the Litecoin network was actively exploited to launch a denial-of-service (DoS) attack, temporarily
New Windows RPC Vulnerability Lets Attackers Escalate Privileges Across All Windows Versions
PhantomRPC, a newly identified architectural vulnerability in Windows Remote Procedure Call (RPC) that enables local privilege escalation to
Microsoft rolls out revamped Windows Insider Program
Microsoft says it’s rolling out a revamped Windows Insider Program experience as part of the broader plans to
Claude AI Agents Close 186 Deals in Anthropic’s Marketplace Experiment
Anthropic’s “Project Deal” has demonstrated that AI agents can autonomously negotiate and close real-world transactions, but the experiment
GPT‑5.5 Bio Bug Bounty to Strengthen Advanced AI Capabilities
OpenAI has announced a new Bio Bug Bounty program for GPT-5.5 as part of its efforts to improve
China-Linked APT GopherWhisper Abuses Legitimate Services in Government Attacks
Dubbed GopherWhisper, the group relies on multiple Go-based backdoors alongside custom loaders and injectors. The post China-Linked APT
Hackers Can Abuse Entra Agent ID Administrator Role to Hijack Service Principals
A critical scope overreach vulnerability was recently identified in the Microsoft Entra Agent Identity Platform. The newly introduced
2 sources
ADT confirms data breach after ShinyHunters leak threat
Home security giant ADT has confirmed a data breach after the ShinyHunters extortion group threatened to leak stolen
Connected reporting, one intelligence threadbleepingcomputer.com · cybersecuritynews.com
Vulnerability in Tenable Nessus Allows Arbitrary Code Execution
CERT-FR issued advisory CERTFR-2026-AVI-0489 on 24 April 2026 alerting that a vulnerability in Tenable Nessus products allows an
Microsoft Vulnerability CVE-2026-5958 Advisory
CERT-FR published advisory CERTFR-2026-AVI-0494 on 24 April 2026 informing of a vulnerability in Microsoft products, referenced as CVE-2026-5958.
Multiple Vulnerabilities in Spring Boot, 8 CVEs Identified
CERT-FR issued a critical security advisory on April 24, 2026 detailing 8 vulnerabilities (CVE-2026-40970 through CVE-2026-40977) in Spring