USN-8584-1: GStreamer Good Plugins vulnerabilities
It was discovered that GStreamer Good Plugins incorrectly handled certain Matroska files. An attacker could possibly use this
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Latest cybersecurity news
USN-8583-1: GIFLIB vulnerabilities
It was discovered that GIFLIB incorrectly handled certain GIF image files. If a user or automated system were
RHSA-2026:43575: Moderate: gnutls security update
An update for gnutls is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat
TrickBot Ditches HTTP for DNS Tunneling in Latest Variant
New TrickBot variant hides C2 communication inside DNS queries, replacing decade-old HTTP pattern
Royal Ransomware Uses Qbot and Cobalt Strike to Rapidly Compromise Windows Domains
Royal ransomware turned ordinary Windows compromises into enterprise-wide crises by pairing a phishing foothold with fast domain takeover.
SolarWinds Patches 15 Critical Serv-U Flaws That Could Hand Attackers Root Access
SolarWinds has released important security updates for its Serv-U file transfer software, addressing 15 vulnerabilities that could allow
Critical Meta Vulnerability Exposed Customer Support Emails, Chats, and Uploaded Files
A broken access control flaw in Meta’s shared customer support systems exposed sensitive user data, including emails, chat
Russian Intelligence Hijacks IP Cameras to Monitor Weapons Deliveries to Ukraine
Russian intelligence services have been accused of turning everyday internet-connected cameras into surveillance tools for tracking weapons deliveries
Suno, Paidwork Data Breaches Affect Tens of Millions of Accounts
Hackers leaked names, email addresses, phone numbers, passwords, and financial information stolen from the two platforms. The post
Palo Alto Networks to Acquire Observability Platform Provider Embrace
Acquisition follows January’s Chronosphere deal, deepening Palo Alto Networks’ push beyond core security into observability. The post Palo
Flaw in Adobe Extension With 300M Installs Enabled WhatsApp Data Theft
An attacker only needed to convince the targeted user to visit a malicious website to exfiltrate WhatsApp messages
New InfraTrust report reveals infrastructure flaws admins should patch first
Eclypsium has launched InfraTrust, a new infrastructure cybersecurity knowledge base and monthly InfraTrust Pulse report designed to help