Hackers Distributing Malicious VBS/PowerShell RAT Chain Via Multiple DuckDNS Hosts
A newly observed malware campaign is using simple Windows scripts to open the door to remote control and
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Cyber News
Atlassian Rovo Prompt Injection Exfiltrates Jira and Confluence Data Without User Approval
RovoBlast is a one-click prompt-injection vulnerability in Atlassian Rovo that could allow attackers to exfiltrate sensitive enterprise data
Corporate Data Stolen in Levi Strauss Cyberattack
Using social engineering, a threat actor accessed the computers of three employees and exfiltrated data from them. The
Claude Code Sessions Spawn Reverse Tunnels and LaunchAgent Persistence on macOS
Claude Code activity on a macOS developer machine has raised a difficult security question: when does convenient automation
New WordPress Supply Chain Attack Compromises Themes via Poisoned API Response
A supply chain attack targeting BdThemes WordPress plugins has exposed site administrators to account takeover, webshell deployment, and
Claude Opus 5 Cuts Indirect Prompt Injection Attack Success to 2% in New Benchmark Analysis
Anthropic’s Claude Opus 5 has recorded the lowest indirect prompt injection attack success rate in Gray Swan’s latest
Critical Flaws Discovered in Belgian eID Software Used by 2 Million People
The vulnerabilities affected software used by eight of Belgium’s ten largest banks and over 60 government agencies. The
Windows 11’s Built-In Weather App Reportedly Consumes 1.2GB of RAM for Showing Forecasts
Windows 11’s default Weather app, a fixture on the taskbar for millions of users, is under fire after
Claude-Powered OpenClaw AI Agent Exploits Gym API to Steal a Workout Slot
An Australian man’s AI assistant has become the center of what is being described as the country’s first
When One Remote Path Becomes Seven States of Risk
Why shared OT architecture requires shared accountability A water-system operator loses visibility into a remote pumping station. The
Metabase 0-Day Vulnerability Exploited in the Wild to Gain Admin Access
Metabase, the widely used open-source business intelligence and data visualization platform, has confirmed that a critical zero-day vulnerability
Microsoft to Launch New Security Detection Report in Teams
Microsoft is preparing to roll out a new Security Detection Report inside the Teams admin center, giving administrators