US: Pentagon Suspends CMMC Phase II Requirements for Defense Contractors
The US Department of Defense announced the immediate suspension of the CMMC Phase II requirements until further review
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Latest cybersecurity news
FortiSandbox Vulnerability Exposes VNC Server to Unauthenticated Attackers
Fortinet has disclosed a high-severity vulnerability in FortiSandbox that could let unauthenticated attackers gain access to the VNC
2 sources
AsyncAPI npm Packages With 2M Weekly Downloads Compromised via GitHub Actions
A supply chain compromise has placed AsyncAPI npm packages at the center of a developer security incident. Five
Connected reporting, one intelligence threadcybersecuritynews.com
Miasma Turns Trusted npm Packages Into Persistent Backdoors for Developer Machines
Miasma has returned through software packages that many developers would normally trust. Four AsyncAPI packages on npm were
Maximizing SOC Efficiency: How to Eliminate Alert Overload and Cut MTTR by 21 Minutes Per Case
Security Operations Centers (SOCs) face overwhelming challenges not due to a lack of alerts but because each alert
LastPass, Bitwarden users targeted with fake security alerts
LastPass is warning users about an ongoing phishing campaign that is using fake security notices to direct them
One Manufacturer Cut Energy 20% and Saved $35 Million
The AI Architecture Behind $35 Million in Energy Savings An automotive manufacturer used AI to cut energy usage
July 2026 Security Update
Ivanti releases standard security patches on the second Tuesday of every month. In today’s rapidly evolving technology and
8 sources
ServiceNow security advisory (AV26-693)
<article data-history-node-id="7977" about="/en/alerts-advisories/servicenow-security-advisory-av26-693" class="cccs-threats full clearfix"> <div class="content"> <div class="layout layout–onecol"> <div class="layout__region layout__region–content"> <div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder
Connected reporting, one intelligence threadcyber.gc.ca · cybersecuritynews.com · securityweek.com · 2 more sources
Mozilla security advisory (AV26-692)
<article data-history-node-id="7976" about="/en/alerts-advisories/mozilla-security-advisory-av26-692" class="cccs-threats full clearfix"> <div class="content"> <div class="layout layout–onecol"> <div class="layout__region layout__region–content"> <div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder
Telegram’s shortlink domain is back online after day-long suspension
Telegram CEO Pavel Durov confirmed an outage in a tweet, saying that shortlinks to the messaging app had
Turkish Banks Targeted by 8,400 Phishing Domains and 6,600 Social Media Scam Ads
Turkey’s banking customers are facing a large fraud campaign built around fake websites and social media advertisements. Criminals