Forgotten Bootloaders Expose Secure Boot Blind Spot
Nearly a dozen vulnerable and now revoked UEFI shim bootloaders remained trusted for years, giving attackers a path
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
OT / ICS
Dutch police bust investment fraud ring stealing over €100 million
The Dutch Police announced the arrest of multiple individuals suspected of being part of an international investment fraud
Identity Attacks Overtake Exploits as Top Ransomware Cause
Email attacks overtook exploits as the top ransomware root cause last year. Multifactor authentication (MFA) was deployed in
3 sources
Zoom warns of critical account takeover vulnerability
Zoom is warning of a critical vulnerability in its desktop client and software development kit for Windows that
Connected reporting, one intelligence threadbleepingcomputer.com · cybersecuritynews.com · thehackernews.com
Guten Tag, Bonjour, Hola to Our European Cyber Defenders!
We’re thrilled to unveil the latest evolution of Dark Reading’s DR Global section — your go-to source for
Google Gemini CLI abused as a hacking agent, malware botnet operator
A Russian-speaking threat actor known as “bandcampro” used Google’s open-source Gemini CLI AI tool as a hacking agent
Is ‘Tech-xit’ Imminent? UK Steps Up Sovereignty Push Amid AI Strife
The US government’s restrictions on Anthropic and OpenAI frontier models have intensified calls in the UK and other
Claude Flaw Automatically Sends Malicious Prompts to AI Agents
When combined with another exploit, the “PromptFiction” vulnerability, which has been fixed, could have enabled an end-to-end attack
AsyncAPI npm packages infected with credential-stealing malware
Five malicious versions of AsyncAPI packages were published to the Node Package Manager (npm) in a supply-chain attack
We built a vulnerability vending machine: AI tokens in, zero-days out
Intruder built an AI-powered “vulnerability vending machine” that combines code slicing with LLMs to automatically discover complex software
2-Click Cursor Exploit Enables Dev Environment Takeover
Simple age-old bugs give bad actors access to developers’ secrets and source code-rich environments.
Nigeria Deepens Cybersecurity Efforts as Cybercriminals See More Profits
The West African country advanced rules to force organizations to disclose cyberattacks, joining other nations in a shift