Hackers Abuse Compromised M365 Accounts to Scale CodeStorm Phishing Operations
Hackers are taking phishing to new levels by abusing legitimate Microsoft 365 accounts to supercharge an operation known
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Latest cybersecurity news
Scattered Spider Hackers Who Breached London Transport Network Plead Guilty
Two members of the Scattered Spider cybercriminal group have pleaded guilty to a cyberattack on Transport for London
OpenAI Refocuses Cybersecurity Efforts on Patching Over Discovery
OpenAI has expanded its Daybreak cybersecurity initiative with a new suite of tools and partnerships. The post OpenAI
Russian Initial Access Broker Behind FortiBleed Campaign
Using a custom sniffer, the threat actor has captured over 110 million credentials since at least February 2026.
Scattered Spider Teens Convicted of TfL Cyber-Attack
Two young British men have pleaded guilty to hacking Transport for London as part of a Scattered Spider
15 Best Linux Network Monitoring Tools in 2026
The “Linux network monitoring” concept describes keeping monitors on and evaluating a network’s performance, capacity, and overall health.
Researcher Earns $148,337 for Google Cloud Production RCE Vulnerability
A researcher has earned a total of 148,337 USD from Google for uncovering a set of flaws in
New Phishing Attack Abuses Outlook and Microsoft 365 Groups Features to Attack Users
Phishing attacks have grown more sophisticated, and attackers are no longer relying on clunky fake emails or obvious
Canadian Electricity Provider London Hydro Discloses Data Breach
Hackers stole customers’ names, addresses, email addresses, phone numbers, and account information. The post Canadian Electricity Provider London
Malicious npm Packages Pose as PostCSS Tools to Deliver Windows RAT
Cybersecurity researchers have discovered a set of malicious npm packages that are designed to deliver a Windows-based remote
Five Eyes Group Issues Urgent Call to Tackle Frontier AI Threats
The Five Eyes Alliance has published a rare call to action for organizations facing AI threats
2 sources
Critical libssh2 Vulnerability Allows Attackers to Execute Remote Code Via Malicious SSH packets
A critical security vulnerability has been identified in the widely used libssh2 library, allowing remote attackers to execute
Connected reporting, one intelligence threadcybersecuritynews.com