Researchers Uncover Pre-Stuxnet ‘fast16’ Malware Targeting Engineering Software
Cybersecurity researchers have discovered a new Lua-based malware created years before the notorious Stuxnet worm that aimed to
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Latest cybersecurity news
Hackers Can Abuse Entra Agent ID Administrator Role to Hijack Service Principals
A critical scope overreach vulnerability was recently identified in the Microsoft Entra Agent Identity Platform. The newly introduced
DSA-6230-1 chromium – security update
https://security-tracker.debian.org/tracker/DSA-6230-1
CVE-2026-6175
Severity Not Scored Description Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering
CVE-2026-42171
High Severity Description NSIS (Nullsoft Scriptable Install System) 3.06.1 before 3.12 sometimes uses the Low IL temp directory
2 sources
ADT confirms data breach after ShinyHunters leak threat
Home security giant ADT has confirmed a data breach after the ShinyHunters extortion group threatened to leak stolen
Connected reporting, one intelligence threadbleepingcomputer.com · cybersecuritynews.com
2 sources
The npm Threat Landscape: Attack Surface and Mitigations
Unit 42 analyzes npm supply chain evolution post-Shai Hulud. Discover wormable malware, CI/CD persistence, multi-stage attacks and more.
Connected reporting, one intelligence threadunit42.paloaltonetworks.com
3 sources
Multiple Critical Vulnerabilities in Synology DSM Enable Remote DoS and Data Compromise
CERT-FR issued an advisory covering 12 CVEs (CVE-2026-4036 through CVE-2026-40540) affecting Synology DiskStation Manager. Affected versions include DSM
Connected reporting, one intelligence threadchangeflow.com · synology.com
CERT-FR Advisory: Multiple SUSE Linux Kernel Vulnerabilities
CERT-FR published advisory CERTFR-2026-AVI-0497 on 24 April 2026 alerting to multiple vulnerabilities discovered in SUSE Linux Kernel. The
Multiple Vulnerabilities in Spring Boot, 8 CVEs Identified
CERT-FR issued a critical security advisory on April 24, 2026 detailing 8 vulnerabilities (CVE-2026-40970 through CVE-2026-40977) in Spring
Microsoft Vulnerability CVE-2026-5958 Advisory
CERT-FR published advisory CERTFR-2026-AVI-0494 on 24 April 2026 informing of a vulnerability in Microsoft products, referenced as CVE-2026-5958.