Malicious LiteLLM Releases Tied to Trivy Hack May Have Exposed 2,100+ Organizations
Two malicious LiteLLM releases sat on PyPI for about 40 minutes in March carrying credential-stealing code capable of
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Latest cybersecurity news
Google-themed Credential Phishing Attempt Delivered Through a Fake ‘New Audio MSG’ Email
A new credential phishing campaign is using a fake “New Audio MSG” email to draw recipients toward a
Top 10 Best Business VPN Solutions in 2026
The best business VPN solutions in 2026 are increasingly the ones that aren’t traditional VPNs at all. Twingate
ClickFix Attack Abuses Signed IBM SPSS IDE to Deploy New CNCMachineRMS RAT
ClickFix campaigns are once again turning an ordinary user action into the opening move of a serious intrusion.
Fresh Windows Zero-Day Exploited in North Korean Cyberattacks
The bug allowed attackers to gain full control of the victims’ systems and deploy the ForestTiger backdoor. The
Ivanti EPM Update Patches Remotely Exploitable Flaws
The vulnerabilities could be exploited to leak credentials for external SQL connections or crash an agent service. The
2 sources
RHSA-2026:54180: Important: firefox security update
An update for firefox is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
Connected reporting, one intelligence threadaccess.redhat.com
Top 10 Best DDoS Protection Services in 2026
Cloudflare is the best DDoS protection service for most organizations in 2026, scoring highest in our evaluation on
5 sources
SAP Commerce Cloud Flaw Could Let Unauthenticated Attackers Execute Arbitrary Code
SAP has released patches to address a maximum-severity security flaw impacting Commerce Cloud (Data Hub Adapter) that could
Connected reporting, one intelligence threadthehackernews.com · securityweek.com · cybersecuritynews.com
4 sources
ShieldBreak Zero-Day PoC Claims Microsoft Defender Patch Bypass With SYSTEM Access
The security researcher going by the name Chaotic Eclipse (aka INFINITE NIGHTMARE, MSNightmare, and Nightmare-Eclipse) has released a
Connected reporting, one intelligence threadthehackernews.com · securityweek.com · cybersecuritynews.com · 1 more source
2 sources
RHSA-2026:54168: Important: rhc-worker-playbook security update
An update for rhc-worker-playbook is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat
Connected reporting, one intelligence threadaccess.redhat.com