Upbound Group Says Data Breach Led to $13 Million in Fraudulent Contract Losses
Hackers recently obtained non-sensitive customer information and other documents from the company. The post Upbound Group Says Data
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Latest cybersecurity news
2 sources
Nine-Year-Old RefluXFS Linux Flaw Gives Local Users Root on Default RHEL Installs
RefluXFS, a new Linux kernel flaw disclosed on July 22 and tracked as CVE-2026-64600, lets an unprivileged local
Connected reporting, one intelligence threadthehackernews.com · blog.qualys.com
Hackers Breach South Korea’s Diplomatic Academy and Expose Foreign Ministry Staff Data
South Korea’s diplomatic community is facing a serious security incident after hackers breached the Korea National Diplomatic Academy’s
Assaf Keren Appointed New CISO of Meta
He replaces Guy Rosen, who announced his retirement from the company after 13 years. The post Assaf Keren
2 sources
New msaRAT malware uses Chrome, Edge browsers to route C2 traffic
The Chaos ransomware gang is using a new backdoor dubbed msaRAT that hides command-and-control (C2) communication by routing
Connected reporting, one intelligence threadbleepingcomputer.com · thehackernews.com
Microsoft working to fix Exchange Online mailbox quarantine issue
Microsoft is working to resolve an ongoing Exchange Online issue that has been mistakenly quarantining customers’ mailboxes since
Swiss train maker Stadler refuses Everest $12 million ransomware demand
Stadler Rail said it will not make a $12.3 million ransom payment after cybercriminals stole technical data from
RHSA-2026:42881: Important: OpenJDK 11.0.32 ELS Security Update for Portable Linux Builds
An update is now available for OpenJDK. Red Hat Product Security has rated this update as having a
RHSA-2026:42880: Important: Java 11 OpenJDK ELS Security Update
An update for java-11-openjdk with Extended Lifecycle Support is now available for Red Hat Enterprise Linux 7, Red
2 sources
CVE-2026-9729
Medium Severity Description The Webpushr Push Notifications plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the
Connected reporting, one intelligence threadtenable.com
2 sources
CVE-2026-59678
High Severity Description An Incorrect Authorization vulnerability in Linux-Gaming PortProtonQt allows any users to mount and unmount arbitrary
Connected reporting, one intelligence threadtenable.com