Zammad 0-Day Vulnerabilities Exploited to Gain Remote Code Execution and Root Access
Two critical Zammad zero-day flaws, reportedly exploited against the Dutch Institute for Vulnerability Disclosure (DIVD), could allow session
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Cyber News
Malicious Linux Implants Mimic Asian Mail Security Products
A trio of newly discovered backdoors walk and quack like legitimate edge solutions, so it’s hard to tell
Dell asks admins to patch max severity CSM flaws as soon as possible
Dell has patched two maximum severity vulnerabilities in the Container Storage Modules (CSM) that connect Dell enterprise storage
Fortinet security advisory (AV26-989)
<article data-history-node-id="8315" about="/en/alerts-advisories/fortinet-security-advisory-av26-989" class="cccs-threats full clearfix"> <div class="content"> <div class="layout layout–onecol"> <div class="layout__region layout__region–content"> <div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder
Free iCloud Account Could Let Attackers Spoof Any @icloud.com Address and Pass Email Security Checks
Security researcher Timo Longin, working with the SEC Consult Vulnerability Lab, disclosed two email spoofing flaws in Apple’s
Sony Rolls Out PS5 Security Update Following the Release of Relapse Jailbreak
Sony has moved to protect PlayStation 5 consoles with its latest system software update, as the newly released
Session Cookie Vulnerability Lets Attackers Bypass Entra ID MFA and Impersonate Users
A flaw in a custom session-cookie system allowed an unauthenticated attacker to pose as employees and administrators in
Critical Capacitor Flaw Lets Malicious Links Access App Data and Native Features
A critical vulnerability in Capacitor for Android and iOS could let a malicious link opened inside an affected
Safari History Database Tags Can Reveal What Users Were Browsing on macOS
A little-known Safari database feature could give digital forensic investigators another way to understand browsing activity on macOS.
Crypto Scammers Hijack Microsoft’s Official X Account
Hackers used the account, which has 13 million followers, to amplify a Clippy-themed cryptocurrency account. The post Crypto
In Rare Move, Alleged Iranian State Hacker Extradited to US
Amir Barati, an alleged member of the Mabna Institute, was indicted for targeting universities, private organizations, and government
Draft 5G White Paper Now Available: False Base Station
The NIST National Cybersecurity Center of Excellence (NCCoE) has released the initial public draft Cybersecurity White Paper (CSWP)