CVE-2026-45610
Medium Severity Description AVideo: 2FA toggle endpoint has no CSRF protection, letting an attacker page silently disable a
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Vendor Advisories
CVE-2026-45580
Medium Severity Description AVideo: stored XSS via unescaped stream key in modeYoutubeLive.php class attribute Read more at https://www.tenable.com/cve/CVE-2026-45580
DSA-6275-1 linux – security update
https://security-tracker.debian.org/tracker/DSA-6275-1
DSA-6273-1 chromium – security update
https://security-tracker.debian.org/tracker/DSA-6273-1
DSA-6274-1 linux – security update
https://security-tracker.debian.org/tracker/DSA-6274-1
RHSA-2026:17795: Critical: kernel security update
An update for kernel is now available for NVIDIA for RHEL 10. Red Hat Product Security has rated
7 sources
RHSA-2026:17790: Critical: nginx security update
An update for nginx is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat
Connected reporting, one intelligence threadaccess.redhat.com
Gremlin Stealer’s Evolved Tactics: Hiding in Plain Sight With Resource Files
Unit 42 analyzes the evolution of Gremlin stealer. This variant uses advanced obfuscation, crypto clipping and session hijacking
Kazuar: Anatomy of a nation-state botnet
In this article Delivery Module types Botnet operations Who is Secret Blizzard? Mitigation and protection guidance Microsoft Defender
Defense in depth for autonomous AI agents
Designing Secure Autonomous AI Agents with Defense in Depth AI agents are moving beyond assistance and into action.
When configuration becomes a vulnerability: Exploitable misconfigurations in AI apps
In this article Background What is an exploitable misconfiguration? Exploitable misconfigurations in popular AI applications Minimizing the risk:
DSA-6272-1 nodejs – security update
https://security-tracker.debian.org/tracker/DSA-6272-1