Crypto Clipper Campaign Abuses Fake Reviews, AI Narrators, and VirusTotal Comments
An unknown threat actor has been observed leveraging paid or promoted posts on legitimate news websites to drum
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Latest cybersecurity news
USN-8442-1: kitty vulnerabilities
It was discovered that kitty incorrectly handled certain image data. An attacker able to write to the terminal’s
RHSA-2026:26018: Important: Red Hat build of Quarkus 3.27.4.SP1 security update
An update is now available for Red Hat build of Quarkus. Red Hat Product Security has rated this
SVD-2026-0614: OS Command Injection in the btool Configuration Helper in Splunk AI Toolkit
In Splunk AI Toolkit versions below 5.7.4, a user who holds the “admin” Splunk role could execute arbitrary
SVD-2026-0613: Insecure Default Domain Allowlist in Splunk AI Toolkit
In Splunk AI Toolkit versions below 5.7.4, a low-privileged user that does not hold the “admin” or “power”
Atlassian security advisory (AV26-608)
<article data-history-node-id="7880" about="/en/alerts-advisories/atlassian-security-advisory-av26-608" class="cccs-threats full clearfix"> <div class="content"> <div class="layout layout–onecol"> <div class="layout__region layout__region–content"> <div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder
Google Cloud Vertex AI Allows Attacker to Hijack Victim’s Model and Poison it
A newly disclosed vulnerability in Google Cloud Vertex AI could have allowed attackers to hijack machine learning model
GitBait Phishing Campaign Abuses GitHub Pages to Attack Financial Institutions
A sophisticated phishing campaign called “GitBait” has been caught targeting Mexico’s financial sector with a level of precision
Hackers Abuse Cloud Logging Services to Evade Detection and Defender’s Visibility
Threat actors are increasingly targeting cloud logging services to evade detection and maintain persistent visibility into compromised environments,
SpyCloud Report Finds Phishing Attacks Surge as Employee Data Is Exposed at 86% of Fortune 100 Companies
Austin, TX, USA, June 17th, 2026, CyberNewswire New SpyCloud research highlights the expansion of phishing attacks as AI
URL Phishing Is Draining SOCs, How to Cut Triage Time and Catch Incidents Early
URL phishing is becoming harder to triage at scale. Suspicious links can hide behind redirects, fresh domains, and browser-side
EU grants Ukraine access to cybersecurity reserve for major attacks
As Kyiv takes steps toward formal accession to the EU, the bloc is integrating Ukraine with its pool