Critical Capacitor Flaw Lets Malicious Links Access App Data and Native Features
A critical vulnerability in Capacitor for Android and iOS could let a malicious link opened inside an affected
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Cyber News
Safari History Database Tags Can Reveal What Users Were Browsing on macOS
A little-known Safari database feature could give digital forensic investigators another way to understand browsing activity on macOS.
Crypto Scammers Hijack Microsoft’s Official X Account
Hackers used the account, which has 13 million followers, to amplify a Clippy-themed cryptocurrency account. The post Crypto
In Rare Move, Alleged Iranian State Hacker Extradited to US
Amir Barati, an alleged member of the Mabna Institute, was indicted for targeting universities, private organizations, and government
Draft 5G White Paper Now Available: False Base Station
The NIST National Cybersecurity Center of Excellence (NCCoE) has released the initial public draft Cybersecurity White Paper (CSWP)
Milk Dragon AiTM Kit Uses Real-Time OTP Relay and WebSocket Keylogging to Bypass MFA
Milk Dragon is a phishing kit designed to turn an attractive online bargain into a fast-moving payment fraud
Police Target KillSec Ransomware Group with Arrests and Seizures
Investigators have disrupted the operations of ransomware group KillSec and arrested several key suspects
Kiteworks Patches 126 Vulnerabilities in Massive Security Update
Kiteworks has released a major security update that addresses 126 vulnerabilities across its secure data transfer platform and
Cloudflare Launches Free Certificate Authority for the Whole Internet
Cloudflare has announced plans to become a public Certificate Authority, expanding its role in securing the global web.
OpenAI Blocks 15,000-User Campaign Trying to Extract Hidden AI Reasoning
OpenAI disrupted a coordinated campaign involving more than 15,000 users that attempted to extract protected reasoning from its
Warlock Expands SharePoint Exploitation in Critical Infrastructure Attacks
The China-based hacking group has been exploiting SharePoint vulnerabilities since July 2025. The post Warlock Expands SharePoint Exploitation
Microsoft’s X account hacked in crypto pump-and-dump scheme
On Thursday, unknown attackers hijacked the official Microsoft account on X, which has over 13 million followers, in