Passkey-themed social engineering leads to identity and cloud compromise
In this article Attack chain overview Attribution Mitigation and protection guidance Learn more Microsoft Security Research is tracking
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Vendor Advisories
RHSA-2026:66327: Important: osbuild-composer security, bug fix, and enhancement update
An update for osbuild-composer is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat
RHSA-2026:66324: Important: kernel-rt security, bug fix, and enhancement update
An update for kernel-rt is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has
RHSA-2026:66282: Important: freerdp security update
An update for freerdp is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions
RHSA-2026:66281: Important: freerdp security update
An update for freerdp is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
RHSA-2026:66180: Important: kernel security, bug fix, and enhancement update
An update for kernel is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has
RHSA-2026:66248: Important: ansible-core security update
An update for ansible-core is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has
ZDI-26-647: VMware Workstation VMXNET3 TSO Segmentation Integer Overflow Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of VMware Workstation. An attacker must first
ZDI-26-646: Progress Software Kemp LoadMaster escape_quotes Uninitialized Memory Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Progress Software Kemp LoadMaster. Authentication
ZDI-26-645: Fortinet FortiSandbox write_remote_backup_to_crontab cronValue Command Injection Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fortinet FortiSandbox. Authentication is required
RHSA-2026:66204: Important: python-lxml security update
An update for python-lxml is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has
RHSA-2026:66203: Important: python3.12-lxml security update
An update for python3.12-lxml is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has