New Shai-Hulud attack trojanizes 19 science-focused PyPI packages
Hackers compromised 19 packages on the PyPI, collectively downloaded hundreds of thousands of times, in a new Shai-Hulud supply-chain
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Latest cybersecurity news
UK gives big tech 3 months to create device controls to block nude images of kids
The companies “must activate built-in features or implement technical solutions on smartphones and tablets to detect and block
4 sources
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active
Connected reporting, one intelligence threadcisa.gov · cybersecuritynews.com · thehackernews.com
Real Tools. Real Tactics. Real Tradecraft. What to Expect at Secure Your Fortress 2026
Free virtual cybersecurity training from SANS on April 30. 14 sessions on AI security, detection, OSINT, & more.
The Quantum Threat Isn’t Coming—It’s Already Here
Quantum threats are active today. Join SANS experts to understand HNDL attacks, navigate NIST PQC standards, and prepare
OWASP’s New AI Vulnerability Scoring System: What Defenders Need to Know
OWASP’s new AI Vulnerability Scoring System (AIVSS) measures agentic AI risks that traditional CVSS can’t capture. Learn what
Automate Your Defense: Harnessing Python for Rapid Incident Response
Learn how Python automation transforms incident response. Discover forensic techniques, free resources, and training to detect threats commercial
The Wrong Question About AI Security (and What To Ask Instead)
AI agents can open new attack vectors. Learn how to deploy them safely with expert insights, real attack
SANS OUCH! Newsletter June 2026: World Cup Fever: Don’t Let Scammers Score
The SANS OUCH! Newsletter is a great way to stay up-to-date on the latest threats and vulnerabilities, as
SANS OUCH! Newsletter May: The Power of the Passphrase: Why Longer Beats Smarter
The SANS OUCH! Newsletter is a great way to stay up-to-date on the latest threats and vulnerabilities, as
New China-Linked Threat Cluster OP-512 Targets IIS Servers With Cryptographically Unique Web Shell Framework
A newly identified threat cluster with suspected ties to China has been caught targeting Internet Information Services (IIS)