Unpacking the AsyncAPI npm supply chain compromise and import-time payload delivery
In this article Attack chain overview How the attack started: GitHub Actions pwn request Mitigation and protection guidance
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Vendor Advisories
DSA-6390-1 chromium – security update
https://security-tracker.debian.org/tracker/DSA-6390-1
CVE-2026-48863
High Severity Description A flaw was found in libsolv. A stack-based buffer overflow vulnerability exists in the PGP
CVE-2026-10797
Severity Not Scored Description CVE-2026-10797 is a CVE assigned to cover a UEFI shim bootloader security feature bypass.
CVE-2026-3842
High Severity Description A flaw was found in QEMU. This vulnerability allows a local attacker within a guest
USN-8553-1: .NET vulnerabilities
Artur Stetsko discovered that the .NET did not properly validate authentication data. An attacker could possibly use this
DSA-6389-1 ntfs-3g – security update
https://security-tracker.debian.org/tracker/DSA-6389-1
Turning threat intelligence into decisive action with Defender Experts
In this article Upstream: See the campaign before it reaches you Microsoft Defender Threat Intelligence Now Integrated into
The npm Threat Landscape: Attack Surface and Mitigations (Updated July 15)
Unit 42 analyzes npm supply chain evolution post-Shai Hulud. Discover wormable malware, CI/CD persistence, multi-stage attacks and more.
ZDI-26-443: Linux Kernel vmwgfx Integer Overflow Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel. An attacker must first
ZDI-26-442: Linux Kernel CAN ISO-TP Protocol Race Condition Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel. An attacker must first
Drupal core – Moderately critical – Information disclosure – SA-CORE-2026-010
Project: Drupal core Date: 2026-July-15 Security risk: Moderately critical 10 ∕ 25 AC:Complex/A:None/CI:Some/II:None/E:Theoretical/TD:Uncommon Vulnerability: Information disclosure Affected versions: <10.6.13 ||