Microsoft Fixes 1,118 Vulnerabilities in October Patch Tuesday and Introduces New Risk Cohorts
Microsoft’s October 2026 Patch Tuesday briefing outlines 1,118 vulnerabilities across 15 risk groups, alongside a new approach designed
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Latest cybersecurity news
Ivanti Zero-Day Chain Gave Attackers Root Access to Fully Patched VPN
CVE-2026-104935 affects Ivanti Connect Secure and it can be exploited for unauthenticated remote code execution with elevated privileges.
UK Housing Ombudsman Service investigates ‘security incident’
The U.K. Housing Ombudsman Service is investigating a third-party IT security incident that impacted its case management system
Arbitrary file write in grpc phQueryMaster
CVSSv3 Score: 9.4 An Improper limitation of a pathname to a restricted directory (‘path traversal’) [CWE-22] in FortiSIEM
Broken authorization
CVSSv3 Score: 3.4 A missing authorization vulnerability [CWE-862] in FortiSIEM GUI may allow an authenticated attacker to execute
Double free in signal handler
CVSSv3 Score: 2.1 A Double Free vulnerability [CWE-415] in FortiOS, FortiProxy and FortiSwitch may allow a local authenticated
Pluto Security raises $42M as AI gives enterprise security teams a new headache
The problem with giving everyone in a company access to AI tools is that people will use them
Critical FortiSandbox GUI Vulnerability Allows Remote Attackers to Bypass Authentication
Fortinet disclosed a critical authentication-bypass vulnerability in the FortiSandbox graphical user interface that could let remote attackers access
TFG London Cyberattack Disrupts IT Systems Used by Phase Eight, Hobbs, and Whistles Brands
TFG London has confirmed a cyberattack that disrupted IT systems supporting Phase Eight, Hobbs, and Whistles. South Africa’s
Adobe Patches 140 Vulnerabilities Across 10 Products
The flaws affect products such as Commerce, Photoshop, ColdFusion, Substance 3D, Dimension, FrameMaker and Bridge. The post Adobe
Google Partially Reverses Chrome Bug Bounty Cuts
Google is restructuring bug bounty rewards with a focus on complex memory safety vulnerabilities. The post Google Partially