LokiBot Campaign Uses JScript Attachment, .NET Injector, and Process Injection to Steal Credentials
LokiBot, one of the oldest credential-stealing malware families still active today, has resurfaced in a new multi-stage campaign
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Latest cybersecurity news
Shai-Hulud Payload Steals GitHub, npm, Cloud, CI/CD, and SSH Credentials From Developers
A new wave of malicious npm packages is targeting developers who work with cloud and serverless infrastructure. The
ThreatsDay Bulletin: Smart TV Proxyware, 24-Year curl Bug, AI Crime Forums + 13 More Stories
It’s dumb out there again. This week has the usual smell of prod on fire and nobody wanting
Twenty Million US IP Connections Used by Proxy Services
Digital Citizens Alliance report claims that millions of Americans may have unwittingly had IP connections used by cybercriminals
AWS AiTM Phishing Kit Steals Console Credentials and MFA Codes in Real Time
A newly discovered phishing kit is targeting Amazon Web Services users by silently stealing login credentials and multi-factor
RHSA-2026:29898: Moderate: libpng security update
An update for libpng is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has
HPE security advisory (AV26-632)
<article data-history-node-id="7907" about="/en/alerts-advisories/hpe-security-advisory-av26-632" class="cccs-threats full clearfix"> <div class="content"> <div class="layout layout–onecol"> <div class="layout__region layout__region–content"> <div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder
Drupal security advisory (AV26-631)
<article data-history-node-id="7906" about="/en/alerts-advisories/drupal-security-advisory-av26-631" class="cccs-threats full clearfix"> <div class="content"> <div class="layout layout–onecol"> <div class="layout__region layout__region–content"> <div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder
Trust in Automated AI Vulnerability Scanning Collapses to 9%, New Study Finds
Cobalt study finds 20-percentage-point drop in number of organizations relying solely on AI automation for testing
New CISA Guide Helps Agencies Adopt SASE For Zero Trust
New CISA guidance shows federal agencies how to use SASE to move from legacy TIC 2.0 to zero
Rust macOS Backdoor Uses Interactive Shell and Telegram File Uploads for Data Theft
A newly identified Rust-based macOS backdoor has raised alarms across the security community, combining a hidden interactive shell