CVE-2026-11438
Medium Severity Description A vulnerability has been found in theonedev onedev up to 15.0.5. Affected by this vulnerability
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Vendor Advisories
CVE-2026-11436
Medium Severity Description A vulnerability was detected in Mage AI up to 0.9.79. This impacts the function useMutation
CVE-2026-11437
Medium Severity Description A flaw has been found in perfree go-fastdfs-web up to 1.3.7. Affected is the function
How AI and Evasion Demand a Radical Shift in Network Threat Prevention
The Future of Threat Defense Resides at the IP Layer For years, network security operated on a relatively
Reinventing Security for the Agentic NVIDIA AI Factory
Building on the momentum of NVIDIA GTC Taipei at COMPUTEX 2026, the conversation has moved beyond AI experimentation
DSA-6324-1 request-tracker5 – security update
https://security-tracker.debian.org/tracker/DSA-6324-1
DSA-6323-1 apache2 – security update
https://security-tracker.debian.org/tracker/DSA-6323-1
Securing CI/CD in an agentic world: Claude Code Github action case
Microsoft Threat Intelligence discovered that Anthropic’s Claude Code GitHub Action could expose CI/CD workflow secrets when AI agents process untrusted
CVE-2026-8714
High Severity Description A denial-of-service vulnerability exists in the RTSP server component of TP-Link Tapo C520WS v2 due
CVE-2026-48112
Medium Severity Description 7-Zip is a file archiver with a high compression ratio. Versions 9.18 through 26.00 contain
CVE-2026-7473
Medium Severity Description On affected platforms running Arista EOS where a tunnel decapsulation configuration—such as VXLAN (Virtual Extensible
USN-8394-1: YARD vulnerability
It was discovered that YARD incorrectly sanitized paths in its built-in documentation server. An attacker could possibly use