ClickFix attacks are tricking Mac and Windows users into hacking themselves
If you clicked on a fake HBO Max ad on Reddit in the past week, you might have
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Latest cybersecurity news
New York Seizes a Dozen Celebrity Deepfake Websites
In the biggest-ever legal action against harmful deepfake websites, the Manhattan District Attorney’s Office has seized 12 sites
New DDRop Attack Breaks Intel TDX and AMD SEV-SNP Confidential Computing
Researchers have disclosed a new hardware attack, called DDRop, that breaks the memory protection in Intel and AMD
Red Heron Exploits Gitea RCE to Compromise 13 Organizations Across Six Countries
A Chinese threat actor tracked as Red Heron has been attributed to the rapid exploitation of a recently
WordPress Adds Automated Plugin Reviews to Block High-Risk Updates Before Distribution
WordPress has announced it’s launching an automated security review for every release of a plugin before it’s distributed
USN-8757-1: cgit vulnerability
It was discovered that cgit incorrectly handled repository paths when HTTP cloning was enabled. A remote attacker could
USN-8756-1: Yelp vulnerability
It was discovered that Yelp allowed help documents to execute arbitrary scripts. An attacker could possibly use this
USN-8755-1: libvips vulnerability
It was discovered that libvips incorrectly handled specially crafted TIFF images when saving them as HEIF images. An
USN-8754-1: Freeciv vulnerability
It was discovered that Freeciv incorrectly handled certain network packets, resulting in a stack overflow. A remote attacker
USN-8753-1: libinput vulnerability
It was discovered that libinput did not properly escape device properties. A local attacker could possibly use this
RHSA-2026:67461: Important: redis security update
An update for redis is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat
RHSA-2026:67450: Important: podman security update
An update for podman is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat