CVE-2026-96889
Critical Severity Description A flaw was found in librsvg. When processing an SVG document containing nested XML inclusions
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Latest cybersecurity news
CVE-2026-96826
High Severity Description Improper Neutralization of Special Elements used in an SQL Command (‘SQL Injection’) vulnerability in Shazzad
CVE-2026-96552
Low Severity Description A vulnerability was identified in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8. The affected element is the
FBI rushes to investigate if ShinyHunters hack of thousands of employees is real
The FBI is now investigating claims from a hacker group that thousands of current and former employees’ personal
EDR Evasion Stack Helps Process Injection Slip Past Defenses
A process parameter-poisoning technique evades EDR by injecting code into process initialization structures without using the Windows APIs
GitLab Email Addresses Can Be Weaponized for Supply Chain Attacks
Incoming email addresses automatically assigned to each user on the platform contain highly privileged access tokens that attackers
Placeholder domain used in dev docs now serves ClickFix attacks
The “third-party.com” domain, commonly used as a placeholder in developer documentation and code examples, is serving a fake Cloudflare
New RemControl Android banking malware targets users in Europe and Canada
A new Android malware-as-a-service (MaaS) platform called RemControl is targeting users through malvertising campaigns that impersonate the TVTap
USN-8808-1: SQL parse vulnerabilities
It was discovered that SQL parse contained multiple algorithmic complexity flaws when parsing SQL statements with deeply nested
USN-8807-1: Open-iSNS vulnerability
It was discovered that Open-iSNS contained a double-free vulnerability when decoding malformed iSNS attributes. An unauthenticated attacker could
USN-8806-1: NetworkManager vulnerability
It was discovered that NetworkManager did not properly restrict the ca-path and phase2-ca-path certificate authority settings for private
RHSA-2026:70560: Important: qt5-qtbase security update
An update for qt5-qtbase is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions.