Updating the taxonomy of failure modes in agentic AI systems: What a year of red teaming taught us
In this article Why the Taxonomy Needed Updating Seven new failure modes Operational findings: What red teaming showed
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Vendor Advisories
RHSA-2026:23469: Important: kpatch-patch-5_14_0-284_104_1, kpatch-patch-5_14_0-284_117_1, kpatch-patch-5_14_0-284_134_1, kpatch-patch-5_14_0-284_148_1, and kpatch-patch-5_14_0-284_158_1 security update
An update for multiple packages is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP
2 sources
Cisco Catalyst SD-WAN Manager Authenticated Privilege Escalation Vulnerability
A vulnerability in the CLI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an authenticated, local
Connected reporting, one intelligence threadsec.cloudapps.cisco.com
RHSA-2026:23471: Important: kpatch-patch-4_18_0-477_107_1, kpatch-patch-4_18_0-477_120_1, kpatch-patch-4_18_0-477_130_1, kpatch-patch-4_18_0-477_89_1, and kpatch-patch-4_18_0-477_97_1 security update
An update for multiple packages is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP
RHSA-2026:23470: Important: kpatch-patch-4_18_0-553_109_1, kpatch-patch-4_18_0-553_40_1, kpatch-patch-4_18_0-553_53_1, kpatch-patch-4_18_0-553_72_1, and kpatch-patch-4_18_0-553_85_1 security update
An update for multiple packages is now available for Red Hat Enterprise Linux 8. Red Hat Product Security
2 sources
ZDI-26-331: (Pwn2Own) Microsoft Edge Feedback Log File Handling Directory Traversal Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Edge. User interaction is
Connected reporting, one intelligence threadzerodayinitiative.com · cybersecuritynews.com
ZDI-26-330: (Pwn2Own) Microsoft Edge Navigation Handling Universal Cross-Site Scripting Vulnerability
This vulnerability allows remote attackers to execute arbitrary cross-origin script on affected installations of Microsoft Edge. User interaction
ZDI-26-329: (Pwn2Own) Microsoft Edge Origin Validation Error Security Bypass Vulnerability
This vulnerability allows remote attackers to access restricted functionality on affected installations of Microsoft Edge. User interaction is
CVE-2026-50076
Critical Severity Description Deserialization of Untrusted Data in the Java replace-resolve path in Apache Fory fory-core Java SDK
CVE-2026-50266
Low Severity Description In OpenStack Neutron before 28.0.1, a project manager can create or update a port on
CVE-2026-49942
Critical Severity Description Net::CIDR::Set versions through 0.20 for Perl did not validate network masks. The mask portion of
DSA-6322-1 frr – security update
https://security-tracker.debian.org/tracker/DSA-6322-1