Cl0p Hackers Exploit PTC Windchill Flaw to Steal Passwords and Sensitive Company Data
Cl0p, also tracked as Cl0P, has returned with a campaign aimed at PTC Windchill servers, putting engineering files,
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Latest cybersecurity news
Hunting MacSync Stealer infrastructure through behavioral pivots
In this article Activity overview Discovery of additional rotating infrastructure Attack chain overview Mitigation and protection guidance References
Critical Microsoft Copilot CoSnitch Vulnerability Lets Attackers Steal Sensitive Data With One Click
A critical vulnerability in Microsoft Copilot Personal, tracked as CVE-2026-24301 and nicknamed CoSnitch, lets attackers silently siphon sensitive
Irregular Pushes Stronger Containment Standards for Secure Frontier AI Cyber Evaluations
Irregular has detailed an investigation into an AI cyber-evaluation incident in which internet access unintentionally allowed models to
3 sources
RHSA-2026:56521: Important: gstreamer1-plugins-bad-free security update
An update for gstreamer1-plugins-bad-free is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has
Connected reporting, one intelligence threadaccess.redhat.com
China-Linked Hacker Shows AI Capabilities in APAC Attack
In the first purported “near-autonomous” attack on a nation-state, a Chinese-language operator used a complex AI framework to
DSA-6450-1 srt – security update
https://security-tracker.debian.org/tracker/DSA-6450-1
DSA-6449-1 swift – security update
https://security-tracker.debian.org/tracker/DSA-6449-1
HTTP/2 Bomb CVE-2026-49975
CVSSv3 Score: 5.8 CVE-2026-49975Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server’s mod_http leads to denial
2 sources
USN-8629-3: Linux kernel (HWE) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the
Connected reporting, one intelligence threadubuntu.com
3 sources
RHSA-2026:56524: Critical: Red Hat build of Keycloak 26.6.6 Images Security Update
New images are available for Red Hat build of Keycloak 26.6.6 and Red Hat build of Keycloak 26.6.6
Connected reporting, one intelligence threadaccess.redhat.com
Threat Brief: Mitigating Large-Scale Credential Attacks (Updated August 18)
We provide guidance for preparing for and mitigating large-scale credential attacks, focusing on recent campaigns targeting security vendors’