The Morning After We Pull a Root of Trust, Nobody Owns It
The most valuable move any security team can make is building a certificate and key inventory.
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
OT / ICS
USA Fencing Lunges Into the Hidden Identity Challenge in Amateur Sports
The organization behind Team USA’s Olympic/Paralympic fencing teams has automated identity verification to handle growing membership, cutting manual
Anthropic’s Claude breached 3 orgs, uploaded PyPI malware during tests
One of Anthropic’s Claude models built and uploaded a malicious Python package to PyPI during a botched security
Claude uploaded malware to PyPI in Anthropic’s botched test
One of Anthropic’s Claude models built and uploaded a malicious Python package to PyPI during a botched security
South Korea fines telco giant KT $39 million for customer data breach
South Korea’s Personal Information Protection Commission (PIPC) has fined telecommunications giant KT Corporation KRW 53.979 billion ($39 million)
JetBrains warns of critical TeamCity remote code execution flaw
JetBrains is warning of a critical authentication bypass vulnerability affecting TeamCity On-Premises that could be exploited to achieve
Minnesota Water Utility Attacks Expose Sector’s Cyber-Risks
A likely Iran-backed actor targeted more than 30 community water systems in Minnesota in a sobering reminder of
AI Harnesses Burst With Potential Exploit Opps
A myriad of software makes up the typical AI harness, and trust issues between the components can create
Takepoint Signals | Isolation Planning Becomes an Operating Discipline
CISA, the Australian Signals Directorate’s Australian Cyber Security Centre, the FBI, and international partners published updated CI Fortify
Google says AI helped Chrome fix 1,072 security bugs in two releases
Google says artificial intelligence is dramatically increasing the number of security vulnerabilities it can find and fix in
Claude Mythos — Hype vs. Reality: What Security Teams Need to Know
In this edition of Reporters’ Notebook, our journalists discuss the ins and outs of Anthropic’s Claude Mythos rollout.
ShinyHunters claims Brinks Home breach, threatens to leak stolen data
Residential security company Brinks Home has disclosed that hackers breached some of its systems and are threatening to