AsyncAPI npm packages infected with credential-stealing malware
Five malicious versions of AsyncAPI packages were published to the Node Package Manager (npm) in a supply-chain attack
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Latest cybersecurity news
We third-party tested our firewall built for AI-scale. The test tools hit their limit first.
We tested Cisco Secure Firewall 6160 with NetSecOPEN for AI-scale. It delivered 5X more throughput than previously tested
HPE security advisory (AV26-700)
<article data-history-node-id="7985" about="/en/alerts-advisories/hpe-security-advisory-av26-700" class="cccs-threats full clearfix"> <div class="content"> <div class="layout layout–onecol"> <div class="layout__region layout__region–content"> <div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder
US charges Russian ‘bulletproof’ web hosts over cyberattacks that netted $62M from cybercrime victims
The 2024 indictment, now unsealed, accuses three Russians and two web hosts of aiding hackers and profiting from
Phishing Campaign Abuses eCards to Deploy RMM Tools
Six-month phishing campaign used seasonal eCard lures to plant legitimate RMM tools on victims
Insignary Launches Clarity On-Demand: SBOMs, No Annual Commitment Required
Toronto, Canada, July 15th, 2026, CyberNewswire Enterprise-grade binary software verification for one project, one team, or one compliance
Hacker Used Gemini CLI to Build a Live C&C Botnet in 6 Minutes
A Russian-speaking threat actor known as “bandcampro” has weaponized Google’s Gemini CLI AI agent to migrate, deploy, and
Unpatched Cursor Vulnerability Exposes Users to Code Execution
An attacker can create a malicious repository containing a git.exe in the project root, and Cursor executes it
Dutch police dismantle global crypto investment scam, arrest alleged mastermind
Authorities said Wednesday that the group operated like a legitimate international business since at least 2021, running about
LAPD sidelines relationship with license-plate reader company Flock Safety
The Los Angeles Police Department is the latest U.S. municipal agency to rethink its relationship to ALPR company