USN-8930-1: U-Boot vulnerabilities
Shahriyar Jalayeri and Mehrun P. Hunter discovered that U-Boot incorrectly handled certain NFS READ and NFS READLINK responses.
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Latest cybersecurity news
Unit 42 Uncovers PEERSTITCH, a Stealthy FortiGate Implant
We investigated an intrusion where attackers exploited CVE-2024-47575 to target 500+ firewalls and deploy PEERSTITCH, a memory-resident ARM64
Fridge hack costing millions and sparking fires stemmed from poor security
Earlier this week, a mass hack of refrigeration systems at an estimated 700 supermarkets throughout Europe caused them
Flock CEO says its microphones detect ‘just gunshots’ — its website says different
Langley’s comments come amid mounting scrutiny of Flock from privacy advocates, including the ACLU, and members of the
Ivanti ICS Zero-Day Attacks Highlight Vendor Patching Hurdles
CVE-2026-104935, a high-severity authentication bypass + RCE vulnerability, was only partially discovered and patched in July, leaving an
Yam Store: The Phishing Network Behind a Billion Messages
A sprawling cybercrime marketplace supplied cloud infrastructure and phishing kits that helped fuel more than 1 billion phishing
North Macedonian police arrest alleged administrator behind OLVX cybercrime market
A raid on a home in a North Macedonian village led to the arrest of the suspected administrator
Brooklyn DA’s office disrupts crypto scam targeting Russian community
Russian-speaking Brooklyn residents began tipping off local authorities to a cryptocurrency fraud scheme three years ago, leading to
CVE-2026-96596
Medium Severity Description Loop with Unreachable Exit Condition (‘Infinite Loop’) vulnerability in Erlang OTP stdlib (erl_tar module), hexpm
CVE-2026-94200
High Severity Description Improper Validation of Consistency within Input vulnerability in Erlang OTP ssl (tls_handshake_1_3, ssl_handshake and tls_client_ticket_store
CVE-2026-93637
Low Severity Description An authentication rate-limit bypass in Zimbra Collaboration Suite 10.1.0 through 10.1.21 allows unauthenticated attackers to
Flock CEO: We haven’t ‘fired’ any police departments as customers
Flock CEO Garrett Langley said that the surveillance company has not canceled contracts of any police department or