Hackers Bypass Microsoft 365 MFA and Hijack Finance Mailbox to Steal Payments
A single phishing email was enough to give attackers access to a finance employee’s Microsoft 365 account and
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Latest cybersecurity news
Zyxel Patches Command Injection Flaw in 18 Access Points Allowing Root OS Command Execution
Zyxel has released firmware updates for a high-severity command injection vulnerability, tracked as CVE-2026-6837, affecting 18 wireless access
Atlassian, Splunk Patch Dozens of Critical, High-Severity Vulnerabilities
The flaws could be exploited to execute arbitrary code, access sensitive information, and elevate privileges. The post Atlassian,
2 sources
Using Microsoft Graph and Powershell to Mine for Information – Stale Accounts and Licenses, (Thu, Aug 20th)
Microsoft Graph is a newer API that is meant to replace several others. OK, it’s at version 2.3.9,
Connected reporting, one intelligence threadisc.sans.edu
Hackers Weaponize OpenClaw AI Agents to Push Malware and Steal Crypto Wallets
Cybercriminals are turning AI agents into a new route for malware delivery. A campaign targeting OpenClaw, an open-source
Cisco External Entity Injection Vulnerability Allows Attackers to Read Sensitive Data
Cisco has released security updates for a high-severity XML External Entity injection vulnerability in Cisco BroadWorks that could
OpenAI Pauses AI Training Amid Concerns of New Model Potentially Discovering 0-Day Flaws
OpenAI has temporarily slowed frontier AI training after internal testing suggested that its upcoming Astra model may reach
Critical Red Hat Kubernetes SSRF Flaw Exposes Internal Services Across Managed Clusters
Red Hat has disclosed CVE-2026-66794, a high-severity Server-Side Request Forgery vulnerability affecting the cluster-proxy-addon component in Multicluster Engine
Hackers Hide Malware Code Inside English Words to Infect Windows Users
A new Windows malware campaign is hiding malicious code inside ordinary English words, making the payload look less
MLflow Vulnerability Exploited for Cloud Credential Theft
The critical-severity flaw allows attackers to send HTTP requests to internal endpoints and extract sensitive information. The post
Cisco Patches Critical Crosswork, Secure Workload Vulnerabilities
The flaws could lead to remote code execution, authentication bypasses, and path traversal attacks. The post Cisco Patches