Researchers Confirm ExfilSquad’s Access to Sensitive Data Across 13 Organizations
Researchers have verified that ExfilSquad possesses sensitive data stolen from at least 13 victims after the extortion group
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Cyber News
Hackers exploit macOS Screen Sharing flaw to deploy Monero miner
The Netherlands’ National Cyber Security Centre (NCSC) is warning that hackers are actively exploiting a macOS authentication bypass
4 sources
Zimbra security advisory (AV26-816)
<article data-history-node-id="8114" about="/en/alerts-advisories/zimbra-security-advisory-av26-816" class="cccs-threats full clearfix"> <div class="content"> <div class="layout layout–onecol"> <div class="layout__region layout__region–content"> <div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder
Connected reporting, one intelligence threadcyber.gc.ca · darkreading.com · cybersecuritynews.com
US courts will start publishing how often the government uses spyware
The Administrative Office of the U.S. Courts told TechCrunch that it will start disclosing how many times judges
Multiple TP-Link Vulnerabilities Allow Attackers to Bypass Authentication and Escalate Privileges
TP-Link has disclosed multiple high-severity vulnerabilities affecting ISP-managed Aginet networking products, including mesh systems, routers, PON devices, and
Bring Your Own EDR Attack Turns SentinelOne Into PPL-Protected Trojan Horse to Shield Malware
A “Bring Your Own EDR” attack abuses trusted SentinelOne components to turn endpoint protection into a powerful malware
What Boards Need to Know About Tech Risk
Why do so many boards underestimate technology risk until it becomes a crisis?
The Modern Attack Chain: Rethinking Google Workspace Security in the Age of AI
Google Workspace attacks do not always begin with phishing. Stolen OAuth tokens can provide another path into Gmail,
Max severity SAP Commerce Cloud flaw now targeted in attacks
A maximum-severity SAP Commerce Cloud remote code execution vulnerability patched three days ago is already being targeted in attacks, according
New Mirai-Based Linux Botnet ‘Evooo1Bot’ Turns Victims Into Proxies
Evooo1Bot is a newly observed botnet based on the Mirai framework but equipped with advanced features, turning edge
Dysphoria Botnet Turns Compromised Routers and Cameras Into DDoS Bots and C2 Relay Nodes
Dysphoria has turned a large number of everyday internet-connected devices into a potential attack network. The botnet is
AI Agents Don’t Stop When Malware Fails, They Write Another Tool and Keep Attacking
AI agents are changing the shape of cyberattacks. Instead of relying on a fixed piece of malware, an