Paved With Intent: ROADtools and Nation-State Tactics in the Cloud
Open-source framework ROADtools is being misused by threat actors for cloud intrusions. Learn how to identify its malicious
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Vendor Advisories
DSA-6290-1 nss – security update
https://security-tracker.debian.org/tracker/DSA-6290-1
DSA-6289-1 openvpn – security update
https://security-tracker.debian.org/tracker/DSA-6289-1
ZDI-26-319: Progress Software Kemp LoadMaster addcountry Command Injection Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Progress Software Kemp LoadMaster. Authentication
ZDI-26-318: Progress Software Kemp LoadMaster ssodomain_killsession Command Injection Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Progress Software Kemp LoadMaster. Authentication
USN-8294-1: PostgreSQL vulnerabilities
It was discovered that PostgreSQL did not correctly enforce authorization for CREATE TYPE. An attacker could possibly use
2 sources
USN-8293-1: Bind vulnerabilities
Vitaly Simonovich discovered that Bind could exhaust memory during GSS-API TKEY negotiation. A remote attacker could possibly use
Connected reporting, one intelligence threadubuntu.com · cybersecuritynews.com
CVE-2026-48249
High Severity Description Open ISES Tickets before 3.44.2 disables TLS certificate verification in rm/incs/mobile_login.inc.php by setting CURLOPT_SSL_VERIFYPEER to
CVE-2026-46473
High Severity Description Authen::TOTP versions before 0.1.1 for Perl generate secrets using rand. Secrets were generated using Perl’s
CVE-2026-48248
High Severity Description Open ISES Tickets before 3.44.2 disables TLS certificate verification in incs/login.inc.php by setting CURLOPT_SSL_VERIFYPEER to
DSA-6287-1 chromium – security update
https://security-tracker.debian.org/tracker/DSA-6287-1
DSA-6288-1 thunderbird – security update
https://security-tracker.debian.org/tracker/DSA-6288-1