Shadow hVNC Gives Attackers Remote Desktop Control Without Moving the Victim’s Mouse
Shadow hVNC is a remote access tool built to operate where victims cannot see it. Instead of taking
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Latest cybersecurity news
CISA: Windows Task Host flaw now exploited by ransomware gangs
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has confirmed that ransomware gangs are also exploiting a high-severity
Can AI Coexist With Privacy? Proton’s Andy Yen Says It Will Have To
Proton’s CEO is a champion of encryption for everyone. So why is he going all in on un-encryptable
The Cop Who Took On Flock
After Noel Pichardo called out his city’s embrace of Flock surveillance cameras, he was subjected to five internal
LLMs and Contextual Integrity
I have been thinking a lot about AI and integrity. Part of that is contextual integrity. I recently
4 sources
RHSA-2026:56029: Important: pipewire security update
An update for pipewire is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat
Connected reporting, one intelligence threadaccess.redhat.com
Three-quarters of Ransomware Attacks Target Mid-Market Firms
Black Kite finds mid-market is the sweet spot for ransomware as manufacturers are most likely to be hit
Heights Finance Data Breach Impacts at Least 1.2 Million Individuals
Hackers stole names, addresses, phone numbers, Social Security numbers, and financial information from a third-party platform. The post
Microsoft confirms outage affecting search in Microsoft 365 apps
Microsoft says some users are experiencing issues searching in Microsoft 365 apps, including Outlook on the web, Outlook
SafePal Hardware Wallet Maker Says Flaw Exposed Data of Nearly 40,000 Customers
SafePal has disclosed that an authorization flaw in an order-tracking plug-in exposed the names, email addresses, shipping addresses,
5 sources
CVE-2026-15748
Critical Severity Description The Forminator Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions
Connected reporting, one intelligence threadtenable.com · securityweek.com · cybersecuritynews.com · 1 more source
CVE-2026-75151
Medium Severity Description A vulnerability has been found in SourceCodester Onlne Examination & Learning Management System 1.0. Affected