Storm-3168 Deletes Azure Resources in 7-Minute Destructive Cloud Attack
Storm-3168 used compromised cloud identities to carry out a destructive attack against an Azure environment in minutes. The
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Cyber News
Daemon Tools Hackers’ NeedyMantis Malware Dissected by Microsoft
The malware framework uses a modular architecture and a custom executable file format for long-term persistence. The post
Kiteworks patches critical flaw, brings customer systems online
American tech company Kiteworks has lifted a precautionary advisory asking customers to shut down systems after patching a
Critical WatchGuard API Vulnerabilities Enables Command Execution Attacks
WatchGuard has disclosed three security vulnerabilities affecting WatchGuard AP devices, including two critical flaws that could allow attackers
BotHelper RAT Uses Encrypted Payloads and Live Screen Surveillance to Spy on Windows Users
A newly documented Windows remote access trojan, dubbed BotHelper RAT, gives attackers a quiet way to watch an
Apple patches CoreGraphics zero-day flaw exploited in attacks
Apple released security updates to fix a zero-day vulnerability exploited in “extremely sophisticated” targeted attacks on iOS devices.
View intelligence · High
Critical Apple Zero-Day Vulnerability Actively Exploited in Attacks
Apple has released iOS 26.7.1 and iPadOS 26.7.1 to fix a critical zero-day vulnerability that it says may
Apple Patches Meta-Reported Zero-Day Linked to ‘Extremely Sophisticated Attack’
Apple has released iOS and macOS updates to patch the zero-day vulnerability tracked as CVE-2026-86950. The post Apple
Pentagon Data Breach – Hackers Reportedly Accessed 3 Million People’s Sensitive Data
The Pentagon has confirmed a major data breach involving a Defense Manpower Data Center (DMDC) information system, exposing
Fake VPN Extensions Hijack Browser Traffic Through Hidden Proxy Servers
A coordinated cluster of 31 Russian-language Chrome extensions that present themselves as convenient “VPN for X” tools while
Apple Emergency Patch for iOS 26/macOS26/macOS15 (CVE-2026-86950), (Mon, Sep 28th)
Apple today released patches for all of its operating systems. However, only patches for older branches include a