ACR Stealer: Two observed intrusion chains amid increased threat activity
In this article Campaign 1: WebDAV-based ClickFix with Python loaders and blockchain C2 Campaign 2: MSHTA-initiated PowerShell chain
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Vendor Advisories
Least privilege for AI agents: Identity, access, and tool binding
In this article Real-world scenarios Best Practices: Identity + RBAC + Scope + Safe Tool Binding Looking Ahead
AI, Automation and Attacks: Unpacking the Unit 42 2026 Global Incident Response Report
Explore Unit 42’s perspectives on AI’s impact on cybersecurity, including key updates since the 2026 Incident Response Report.
USN-8557-1: Authlib vulnerabilities
Jay Neiva and Mauro Carrillo discovered that Authlib did not properly validate cryptographic keys embedded in JWT headers.
USN-8556-1: Ruby vulnerabilities
It was discovered that the Net::IMAP client in Ruby did not properly sanitize Symbol arguments passed to IMAP
RHSA-2026:41019: Important: Red Hat Edge Manager Version 1.1.3 Security Update
Red Hat Edge Manager Version 1.1.3 Security Update
OWASP CVE Lite CLI Graduates to Lab Project Status
CVE Lite CLI, a fast open source dependency vulnerability scanner for JavaScript and TypeScript projects, has graduated to
Announcing the General Availability of Prisma AIRS AI Gateway
Every modern enterprise is moving from an organization run by software to one orchestrated by AI, creating a
USN-8554-1: NTFS-3G vulnerabilities
It was discovered that NTFS-3G had a heap buffer overflow when reading certain NTFS images. A local attacker
USN-8555-1: Ubuntu Advantage Tools (pro client) vulnerabilities
Bilal Teke discovered that Ubuntu Advantage Tools exposed the Pro bearer token in command-line arguments when validating APT
Palo Alto Networks and AT&T – Delivering Quantum-Resilient SASE Fabric
By Yogesh Ranade from Palo Alto Networks, and Senthil Ramakrishnan from AT&T The digital world is currently navigating
RHSA-2026:40895: Important: jackson-annotations, jackson-core, jackson-databind, jackson-jaxrs-providers, and jackson-modules-base security update
An update for multiple packages is now available for Red Hat Enterprise Linux 9. Red Hat Product Security