WhatsApp rolls out new feature that flags potential scam messages
WhatsApp has begun rolling out a new optional “Scam Alert” feature, which uses a local machine learning model
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
OT / ICS
‘Jewelbug’ APT Balances State Espionage & Cryptocurrency Theft
Researchers discovered hackers-for-hire performing cyber espionage and financially motivated heists from the same Web panel.
Belgium’s eID Authentication Opens Citizen Accounts to RCE
The trust framework underlying Belgium’s electronic ID system was fully compromised by severe vulnerabilities in a key browser
“City-Forum” data-theft attacks target Salesforce, ServiceNow portals
An ongoing data theft campaign uses custom tools to steal data exposed to anonymous users through Salesforce Experience Cloud
Android malware combo takes out loans and relays victims’ credit cards
A new Android NFC relay malware called WindRelay is being used alongside the SpyNote remote administration tool (RAT)
Long-running Data Theft Campaign Targeting Salesforce, ServiceNow
The “City-Forum” campaign has been active since at least March 2025 and has targeted organizations across multiple sectors
Private Connectivity, Public Consequences
Why private industrial networks must be verified as trust boundaries, not accepted as security controls OT consultants, please
3 sources
Hackers exploit critical Adobe Commerce flaw to hijack customer accounts
Attempts to exploit a critical vulnerability (CVE-2026-71362) in Adobe’s Commerce and Magento e-commerce platforms have been detected, potentially
Connected reporting, one intelligence threadbleepingcomputer.com · securityweek.com · cybersecuritynews.com
Hundreds of fake Chrome VPN extensions route traffic through a proxy
More than 737 browser extensions published on the Chrome Web Store impersonated well-known VPN and proxy services while
Walmart’s “Trusted Agent” Approach to Purple Teaming
Walmart co-locates red and blue teams to build trust and improve security through collaborative purple teaming exercises
Plug and Pwn attack uses fake USB devices for Windows SYSTEM access
Security researchers have disclosed new “Plug and Pwn” attacks that abuse the Windows Plug and Play feature to
FBI: Hackers target online accounts to steal nude photos
The FBI warns that cybercriminals are targeting adults’ and children’s social media and other online accounts to steal