CVE-2026-13756
High Severity Description The WP Grid Builder plugin for WordPress is vulnerable to Privilege Escalation in all versions
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Vendor Advisories
CVE-2026-55175
High Severity Description Spinnaker is an open source, multi-cloud continuous delivery platform. Prior to versions 2026.1.1, 2026.0.3, 2025.4.4,
CVE-2026-11426
Medium Severity Description The UnderConstructionPage PRO plugin for WordPress is vulnerable to Arbitrary File Read in all versions
No Manners Here: The Ruthless Rise of The Gentlemen Ransomware
Unit 42 explores The Gentlemen ransomware operations, revealing the affiliate model driving its rapid growth. Learn more here.
DSA-6386-1 opam – security update
https://security-tracker.debian.org/tracker/DSA-6386-1
Securing our future: July 2026 progress report on Microsoft’s Secure Future Initiative
Security is never finished. That conviction is where the Secure Future Initiative (SFI) started two years ago and
GigaWiper: Anatomy of a destructive backdoor assembled from multiple malware
In this article A wiper inside a backdoor Backdoor capabilities How GigaWiper was assembled Conclusion: Multiple destructive capabilities
CVE-2026-59856
High Severity Description Vim is an open source, command line text editor. Prior to 9.2.0736, the PHP omni-completion
CVE-2026-59857
Medium Severity Description Vim is an open source, command line text editor. Prior to 9.2.0725, the single-byte branch
CVE-2026-59858
High Severity Description Vim is an open source, command line text editor. Prior to 9.2.0735, the C omni-completion
2 sources
USN-8526-1: libheif vulnerabilities
Xianrui Dong discovered that libheif had an out-of-bounds read in its HEIF sequence track parser. An attacker could
Connected reporting, one intelligence threadubuntu.com
USN-8525-1: curl vulnerabilities
Harry Sintonen discovered that curl incorrectly handled credentials when following HTTP redirects in conjunction with .netrc files. An