Water and Wastewater Cybersecurity Research Brief
Executive finding The most important current development is the FBI and EPA warning issued on July 30, 2026.
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Latest cybersecurity news
CVE-2026-72761
Medium Severity Description The webhook URL validator in `website/notifications/webhooks.py` uses `ip.is_global` to reject non-public addresses after DNS resolution.
CVE-2026-72760
Medium Severity Description Affected versions of MISP cti-transmute disclose users’ email addresses through the account following-list endpoint. When
CVE-2026-72759
Medium Severity Description In affected versions of MISP cti-transmute, the conversion-history details endpoint performs an incomplete authorization check.
Qualcomm security advisory (AV26-795)
<article data-history-node-id="8090" about="/en/alerts-advisories/qualcomm-security-advisory-av26-795" class="cccs-threats full clearfix"> <div class="content"> <div class="layout layout–onecol"> <div class="layout__region layout__region–content"> <div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder
3 sources
Gunra Ransomware Exploits Fortinet VPN Flaws to Bypass MFA and Steal Enterprise Data
A joint cybersecurity advisory from the FBI, CISA, the Department of Defense Cyber Crime Center, the NSA, the
Connected reporting, one intelligence threadcybersecuritynews.com
Coruna, DarkSword iOS Exploits Proliferate Globally
Sophisticated iPhone exploit chains previously limited to nation-states are spreading far and wide to organized cybercrime groups.
New StormEncryptor ransomware used by former Medusa affiliate
A financially motivated threat actor previously associated with the Medusa ransomware operation is now deploying a new ransomware
⚡ Weekly Recap: AI Goes Rogue, Metabase 0-Day, MCP Supply-Chain Attacks, and Router Backdoors
A lot of security problems still begin with someone doing a completely normal thing. Cloning a repo. Answering
3 sources
RHSA-2026:52930: Important: postgresql-jdbc security update
An update for postgresql-jdbc is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat
Connected reporting, one intelligence threadaccess.redhat.com
DSA-6426-1 icinga2 – security update
https://security-tracker.debian.org/tracker/DSA-6426-1
DSA-6425-1 openjdk-21 – security update
https://security-tracker.debian.org/tracker/DSA-6425-1