ClickFix Attack Abuses Signed IBM SPSS IDE to Deploy New CNCMachineRMS RAT
ClickFix campaigns are once again turning an ordinary user action into the opening move of a serious intrusion.
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Cyber News
Fresh Windows Zero-Day Exploited in North Korean Cyberattacks
The bug allowed attackers to gain full control of the victims’ systems and deploy the ForestTiger backdoor. The
Ivanti EPM Update Patches Remotely Exploitable Flaws
The vulnerabilities could be exploited to leak credentials for external SQL connections or crash an agent service. The
Top 10 Best DDoS Protection Services in 2026
Cloudflare is the best DDoS protection service for most organizations in 2026, scoring highest in our evaluation on
Microsoft Outlook Vulnerability Allows Attackers to Execute Malicious Code Remotely
Microsoft has disclosed a new remote code execution flaw in Outlook, tracked as CVE-2026-70329, as part of its
Google says Chrome cuts 7 billion unwanted Android notifications a day to fight abuse
Google says Chrome’s anti-abuse systems reduced unwanted notifications on Android by more than 7 billion per day during
DEF CON crowd suspected in fake-hotspot attack on Delta flight
On Monday, passengers aboard Delta flight 591 going from Las Vegas to Atlanta allegedly spoofed the onboard Wi-Fi,
DeadLock ransomware uses blockchain to resist infrastructure takedown
The DeadLock ransomware operation is using a decentralized infrastructure that relies on blockchain-backed services to protect its communication
Chrome adopts what may be the best protection yet against account takeovers
Google’s Chrome browser has added a new feature that could go a long way in preventing a form
Gunra Ransomware Gang Exploits Fortinet Flaws, Bypasses MFA
The ransomware-as-a-service operation is finding success against critical infrastructure targets with leaked Conti code and old flaws in
Sandworm hackers target IT pros with trojanized WireGuard VPN client
Hackers associated with the Russian threat group Sandworm have been targeting system administrators and IT professionals through fake
Ivanti security advisory (AV26-805)
<article data-history-node-id="8101" about="/en/alerts-advisories/ivanti-security-advisory-av26-805" class="cccs-threats full clearfix"> <div class="content"> <div class="layout layout–onecol"> <div class="layout__region layout__region–content"> <div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder