16-Year-Old Researcher Finds Microsoft Auth Vulnerability that Exposes 17.3 Trillion Stored Records
A 16-year-old security researcher known as Faav uncovered an authentication flaw in Microsoft’s internal Titan analytics service that
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Latest cybersecurity news
Kiteworks urges customers to stop using platform after warning from federal intelligence agencies
Frank Balonis, CISO at Kiteworks, told Recorded Future News that the company “received credible threat intelligence from federal
Labcorp to overhaul data security practices, pay $2.3 million fine for cybersecurity failings
Security changes include creating an incident response plan for vendor security failings, limiting how much data Labcorp shares
Friday Squid Blogging: Participatory Squid Dissection in October in Tennessee
I feel like someone who reads this blog will want to go to this: Families are invited to
RHSA-2026:72183: Critical: unbound security update
An update for unbound is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
RHSA-2026:72110: Critical: unbound security update
An update for unbound is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
DSA-6516-1 ghostscript – security update
https://security-tracker.debian.org/tracker/DSA-6516-1
DSA-6515-1 vlc – security update
https://security-tracker.debian.org/tracker/DSA-6515-1
DSA-6514-1 php8.4 – security update
https://security-tracker.debian.org/tracker/DSA-6514-1
DSA-6513-1 chromium – security update
https://security-tracker.debian.org/tracker/DSA-6513-1
3 Consulting Myths Debunked by Unit 42 Experts
Unit 42 security experts address critical cybersecurity misconceptions, offering practical insights to help your organization reinforce its enterprise
CVE-2026-96878
Medium Severity Description Improper neutralization of input during web page generation (‘cross-site scripting’) vulnerability in Mediawiki – Cargo