WordPress malware campaign hides payloads in Steam profiles
Nearly 2,000 WordPress websites were infected with malware that relies on Steam Community profile comments to hide command-and-control
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Latest cybersecurity news
Vulnerability Disclosure in the Age of AI
New article: “Responsible Disclosure in the Age of AI: A Call for Urgent Action,” by Melissa Hathaway. Abstract:
USN-8055-2: Evolution Data Server vulnerability
USN-8055-1 fixed a vulnerability in Evolution Data Server. This update provides the corresponding update for Ubuntu 18.04 LTS
USN-8357-1: Qt Declarative vulnerability
It was discovered that Qt Declarative did not properly validate the width and height attributes of image tags
2 sources
RHSA-2026:22325: Important: thunderbird security update
An update for thunderbird is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has
Connected reporting, one intelligence threadaccess.redhat.com
RHSA-2026:22323: Moderate: libsoup security update
An update for libsoup is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions.
5 sources
RHSA-2026:22312: Moderate: openssl security update
An update for openssl is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has
Connected reporting, one intelligence threadaccess.redhat.com
2 sources
Plesk security advisory (AV26-534)
<article data-history-node-id="7772" about="/en/alerts-advisories/plesk-security-advisory-av26-534" class="cccs-threats full clearfix"> <div class="content"> <div class="layout layout–onecol"> <div class="layout__region layout__region–content"> <div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder
Connected reporting, one intelligence threadcyber.gc.ca · cybersecuritynews.com
2 sources
Ivanti security advisory (AV26-533)
<article data-history-node-id="7771" about="/en/alerts-advisories/ivanti-security-advisory-av26-533" class="cccs-threats full clearfix"> <div class="content"> <div class="layout layout–onecol"> <div class="layout__region layout__region–content"> <div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder
Connected reporting, one intelligence threadcyber.gc.ca · cybersecuritynews.com
SmartApeSG Campaign Uses ClickFix Scripts to Infect Windows Hosts With RAT Malware
A well-known social engineering campaign called SmartApeSG is back in the spotlight, this time using ClickFix scripts to