Chrome V8 Zero-Day Exploited in the Wild Enables Code Execution Inside Sandbox
Google on Thursday released updates to patch 230 security vulnerabilities, including one that has come under active exploitation
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Latest cybersecurity news
New cPanel Flaw Lets a Hosting Account With Mail Privileges Run Code as Root
cPanel has patched a flaw that it says lets a single hosting account take control of an entire
F5 BIG-IP APM Malware Injects a PHP Web Shell Into Memory, Evading Disk Scans
Malware linked to break-ins at F5 BIG-IP Access Policy Manager appliances hides a PHP web shell in memory
2 sources
Researcher Drops New Microsoft Defender PoC Showing ShieldBreak Patch Can Be Bypassed
The security researcher known as Chaotic Eclipse has dropped a proof-of-concept (PoC) for yet another zero-day in Microsoft
Connected reporting, one intelligence threadthehackernews.com · cybersecuritynews.com
SAP Patches CVSS 10.0 Kernel Flaw Enabling Unauthenticated Remote Code Execution
SAP has released security updates to address multiple vulnerabilities, including a maximum-severity flaw in SAP Extended Passport (EPP)
RHSA-2026:65855: Important: freerdp security update
An update for freerdp is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
RHSA-2026:65816: Important: qt6-qt5compat security update
An update for qt6-qt5compat is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has
SAP Patches Maximum Severity “Overpass” Flaw
Onapsis urges SAP customers to patch “Overpass” vulnerability, which has a CVSS score of 10.0
Windows BitLocker Vulnerability Allows Attackers to Execute Malicious Code Remotely
Microsoft has disclosed a new security flaw in Windows BitLocker, the operating system’s built-in disk encryption feature, that
CISA Warns Chinese AI Firms Extract Billions of Tokens From Claude, GPT, Gemini and Grok
A new U.S. government advisory has raised concerns over large-scale attempts to copy the capabilities of leading artificial
New cPanel Vulnerability Allows Attacker to Gain Full Control of the Server
cPanel has disclosed CVE-2026-67401, a critical SQL injection flaw in EmailTrack that could let authenticated attackers gain root-level
Top 10 Best Application Control & Allowlisting Tools in 2026
Allowlisting inverts the security model: instead of detecting bad software, only approved software runs. Done well, it stops