DSA-6521-1 ruby-oj – security update
https://security-tracker.debian.org/tracker/DSA-6521-1
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Vendor Advisories
DSA-6520-1 lemonldap-ng – security update
https://security-tracker.debian.org/tracker/DSA-6520-1
Storm-3168: Agentic-driven cloud attacks using compromised service principals
In this article Attack overview Technical analysis Mitigation and protection guidance References Learn More Microsoft Security Research has
Beyond the ransomware: Tracking Storm-2570’s consistent tradecraft across deployments
In this article Who is Storm-2570? Storm-2570 attack chain: From initial foothold to impact What Storm-2570 activity means
What’s new in Microsoft Security: September 2026
AI agents are now running on employee devices, cloud platforms, and across developer workflows. Security teams need to
CVE-2026-100865
High Severity Description Heym before 0.0.53 contains multiple independent vulnerabilities. (1) The workflow condition evaluator uses Python eval()
CVE-2026-100746
Medium Severity Description A vulnerability was found in coollabsio Coolify up to 4.1.0. This affects the function Github::redirect
CVE-2026-100864
High Severity Description heym before 0.0.91 contains a sandbox escape vulnerability in the expression engine’s DotList map/filter and
RHSA-2026:72199: Critical: unbound security update
An update for unbound is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat
CVE-2026-97162
High Severity Description Joomla Extension – lomart.fr – Various SQL injection vectors in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29
CVE-2026-97163
Critical Severity Description Joomla Extension – lomart.fr – Unauthenticated remote code installation in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29
CVE-2026-97161
Critical Severity Description Joomla Extension – lomart.fr – Various path traversal / file access vectors in UP plugin