Hackers exploit macOS Screen Sharing flaw to deploy Monero miner
The Netherlands’ National Cyber Security Centre (NCSC) is warning that hackers are actively exploiting a macOS authentication bypass
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Latest cybersecurity news
4 sources
Zimbra security advisory (AV26-816)
<article data-history-node-id="8114" about="/en/alerts-advisories/zimbra-security-advisory-av26-816" class="cccs-threats full clearfix"> <div class="content"> <div class="layout layout–onecol"> <div class="layout__region layout__region–content"> <div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder
Connected reporting, one intelligence threadcyber.gc.ca · darkreading.com · cybersecuritynews.com
US courts will start publishing how often the government uses spyware
The Administrative Office of the U.S. Courts told TechCrunch that it will start disclosing how many times judges
Multiple TP-Link Vulnerabilities Allow Attackers to Bypass Authentication and Escalate Privileges
TP-Link has disclosed multiple high-severity vulnerabilities affecting ISP-managed Aginet networking products, including mesh systems, routers, PON devices, and
Bring Your Own EDR Attack Turns SentinelOne Into PPL-Protected Trojan Horse to Shield Malware
A “Bring Your Own EDR” attack abuses trusted SentinelOne components to turn endpoint protection into a powerful malware
What Boards Need to Know About Tech Risk
Why do so many boards underestimate technology risk until it becomes a crisis?
The Modern Attack Chain: Rethinking Google Workspace Security in the Age of AI
Google Workspace attacks do not always begin with phishing. Stolen OAuth tokens can provide another path into Gmail,
Max severity SAP Commerce Cloud flaw now targeted in attacks
A maximum-severity SAP Commerce Cloud remote code execution vulnerability patched three days ago is already being targeted in attacks, according