CVE-2026-13508
Critical Severity Description A flaw has been found in khoj-ai khoj up to 2.0.0-beta.28. This impacts an unknown
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Latest cybersecurity news
CVE-2026-13507
Critical Severity Description A vulnerability was detected in volcengine OpenViking up to 0.3.21. This affects the function str_to_uint64
DSA-6373-1 lxd – security update
https://security-tracker.debian.org/tracker/DSA-6373-1
DSA-6372-1 tor – security update
https://security-tracker.debian.org/tracker/DSA-6372-1
Data breach exposes up to 14.2 million email logins at six ISPs
Japanese telecommunications operator KDDI Corporation disclosed a data breach where threat actors gained access to one of its
YARA-X 1.18.0 and 1.19.0 Release, (Sun, Jun 28th)
YARA-X’s 1.18.0 release brings 3 improvements and 2 bugfixes.
CVE-2026-49416
High Severity Description The CONS_HISTORY ioctl handler did not adequately validate the requested history size. A large value
CVE-2026-49414
High Severity Description The ELF image activator cleared per-process ASLR preference flags for setuid binaries after the code
CVE-2026-49417
High Severity Description Second, the audio buffer backing a mapping could be freed when the device was closed