CVE-2026-49740
Medium Severity Description TYPO3’s cache frontend (VariableFrontend) and persistent key-value store (Registry) deserialized PHP payloads without integrity validation
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Vendor Advisories
CVE-2026-49741
High Severity Description Backend users with write access to the form_definition database table were able to directly create,
USN-8044-2: alsa-lib vulnerability
USN-8044-1 fixed a vulnerability in alsa-lib. This update provides the corresponding fix for alsa-lib on Ubuntu 20.04 LTS.
Cisco SASE with Meraki: Get in the Fast Lane to SASE
Simplify your security with Cisco SASE with Meraki. Easily integrate SD-WAN with SSE for fast, automated protection across
USN-8410-1: shell-quote vulnerability
Akshat Sinha discovered that shell-quote improperly validated object-token inputs. An attacker could possibly use this issue to cause
RHSA-2026:24722: Moderate: libsoup security update
An update for libsoup is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat
SSA-967325 V1.1 (Last Update: 2026-06-09): Multiple Vulnerabilities in Palo Alto Networks PAN-OS on RUGGEDCOM APE1808 Devices
<p>Palo Alto Networks has published [1] information on vulnerabilities in PAN-OS. This advisory lists the related Siemens Industrial
SSA-870926 V1.1 (Last Update: 2026-06-09): Datakit and Parasolid Vulnerabilities in Simcenter Femap
<p>Simcenter Femap is affected by file parsing vulnerabilities in Datakit library and Parasolid Translator Component that could be
SSA-962515 V1.6 (Last Update: 2026-06-09): Out of Bounds Read Vulnerability in Industrial Products
<p>Several industrial products contain an out of bounds read vulnerability that could allow an attacker to cause a
AI brands as bait: How threat actors are using the AI hype in social engineering
In this article ChatGPT-themed lure leads to phishing kit collecting credit card data Claude-themed phishing campaign collected credentials
DSA-6331-1 keystone – security update
https://security-tracker.debian.org/tracker/DSA-6331-1
When “Hi, This Is IT” Comes Through Microsoft Teams
Attackers are increasingly targeting collaboration platforms like Microsoft Teams. Learn the risks and key steps to strengthen your