Buffer Over-read when receiving improperly sized ICMPv6 packets
Bulletin ID: AWS-2025-023 Scope: AWS Content Type: Important (requires attention) Publication Date: 2025/10/10 10:15 PM PDT We identified
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Vendor Advisories
Scaling AI Agents with Confidence
The Google Cloud and Palo Alto Networks Partnership As AI agents move into business-critical environments, they are transforming
Palo Alto Networks and Google Cloud
Expand Strategic Collaboration to Secure the AI Enterprise The transition from generative AI to agentic AI represents one
Fracturing Software Security With Frontier AI Models
Unit 42 finds frontier AI models enhance vulnerability discovery, acting as full-spectrum security researchers. They enable autonomous zero-day
When Wi-Fi Encryption Fails: Protecting Your Enterprise from AirSnitch Attacks
Unit 42 research reveals AirSnitch attacks bypass WPA2/3 Wi-Fi encryption and client isolation, exposing critical infrastructure vulnerabilities. The
2 sources
Cisco Integrated Management Controller Command Injection and Remote Code Execution Vulnerabilities
Multiple vulnerabilities in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote
Connected reporting, one intelligence threadsec.cloudapps.cisco.com
Designing for What’s Next: Securing AI-Scale Infrastructure Without Compromise
6100 Series is an ultra-high-end firewall, delivering exceptional performance, line-rate threat protection, and modular scalability at AI-ready data
Preparing for Post-Quantum Cryptography: The Secure Firewall Roadmap
Cisco Secure Firewall’s post-quantum cryptography roadmap: what’s available today, what’s coming, and how to start planning.
Drupal core – Moderately critical – Cross-site scripting – SA-CORE-2026-003
Project: Drupal core Date: 2026-April-15 Security risk: Moderately critical 13 ∕ 25 AC:Basic/A:User/CI:Some/II:Some/E:Theoretical/TD:Default Vulnerability: Cross-site scripting Affected versions: >= 11.3.0
Drupal core – Moderately critical – Gadget Chain – SA-CORE-2026-002
Project: Drupal core Date: 2026-April-15 Security risk: Moderately critical 14 ∕ 25 AC:Complex/A:Admin/CI:All/II:All/E:Theoretical/TD:Uncommon Vulnerability: Gadget Chain Affected versions: >= 8.0.0
CVE-2026-5845
High Severity Description An improper authorization vulnerability in scoped user-to-server (ghu_) token authorization in GitHub Enterprise Server allows
CVE-2026-5921
Critical Severity Description A server-side request forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed an