Defending SaaS-based applications against ShinyHunters OAuth abuse
In this article Attack chain overview Improving visibility into Salesforce OAuth abuse Mitigation and protection guidance Learn more
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Vendor Advisories
2 sources
Microsoft Entra ID security updates: Passkeys are the default authentication method in Entra ID
As identity attacks grow more sophisticated in the AI era, organizations need stronger authentication methods that protect users
Connected reporting, one intelligence threadmicrosoft.com · cybersecuritynews.com
SSA-967325 V1.2 (Last Update: 2026-07-14): Multiple Vulnerabilities in Palo Alto Networks PAN-OS on RUGGEDCOM APE1808 Devices
<p>Palo Alto Networks has published [1] information on vulnerabilities in PAN-OS. This advisory lists the related Siemens Industrial
SSA-864900 V1.9 (Last Update: 2026-07-14): Multiple Vulnerabilities in Fortigate NGFW on RUGGEDCOM APE1808 Devices
<p><a href="https://www.fortiguard.com/psirt">Fortinet has published</a> information on vulnerabilities in FortiOS. This advisory lists the related Siemens Industrial products.</p> <p>Siemens
SSA-828211 V1.0: Denial of Service Vulnerability in SIMATIC S7-PLCSIM Advanced
<p>SIMATIC S7-PLCSIM Advanced contains a vulnerability that could allow an attacker to cause a denial of service condition.</p>
RHSA-2026:39119: Moderate: libreoffice security update
An update for libreoffice is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
CVE-2026-15625
Medium Severity Description A vulnerability was found in nextlevelbuilder GoClaw 3.11.3. Affected by this issue is the function
CVE-2026-15624
Medium Severity Description A vulnerability has been found in nextlevelbuilder GoClaw 3.13.3-beta.3. Affected by this vulnerability is the
USN-8535-1: PipeWire vulnerabilities
It was discovered that PipeWire accepted unbounded Content-Length values in its RAOP module. A remote attacker could possibly
RHSA-2026:39008: Moderate: freeipmi security update
An update for freeipmi is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions.
RHSA-2026:39007: Moderate: freeipmi security update
An update for freeipmi is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat
USN-8533-1: OpenSSH vulnerabilities
It was discovered that OpenSSH sftp did not properly constrain the location of downloaded files when connecting to