“City-Forum” data-theft attacks target Salesforce, ServiceNow portals
An ongoing data theft campaign uses custom tools to steal data exposed to anonymous users through Salesforce Experience Cloud
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Latest cybersecurity news
Android malware combo takes out loans and relays victims’ credit cards
A new Android NFC relay malware called WindRelay is being used alongside the SpyNote remote administration tool (RAT)
Terabytes of credentials leaked in massive supply-chain attack
Terabytes worth of credentials, many belonging to the world’s biggest and most sensitive organizations, have been exposed in
Long-running Data Theft Campaign Targeting Salesforce, ServiceNow
The “City-Forum” campaign has been active since at least March 2025 and has targeted organizations across multiple sectors
Private Connectivity, Public Consequences
Why private industrial networks must be verified as trust boundaries, not accepted as security controls OT consultants, please
2 sources
USN-8634-1: Linux kernel vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the
Connected reporting, one intelligence threadubuntu.com
3 sources
USN-8631-1: Linux kernel vulnerabilities
Siebe Devroe, Héloïse Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not
Connected reporting, one intelligence threadubuntu.com
Shaping the NVD for the Future: We Need Your Feedback on AI-Enabled Vulnerability Management
For over two decades, the NIST National Vulnerability Database (NVD) has served as the U.S. government repository for
3 sources
Hackers exploit critical Adobe Commerce flaw to hijack customer accounts
Attempts to exploit a critical vulnerability (CVE-2026-71362) in Adobe’s Commerce and Magento e-commerce platforms have been detected, potentially
Connected reporting, one intelligence threadbleepingcomputer.com · securityweek.com · cybersecuritynews.com
RHSA-2026:54435: Important: Streams for Apache Kafka 3.2.1 release and security update
Streams for Apache Kafka 3.2.1 is now available from the Red Hat Customer Portal. Red Hat Product Security
DSA-6434-1 lemonldap-ng – security update
https://security-tracker.debian.org/tracker/DSA-6434-1
DSA-6432-1 flatpak – security update
https://security-tracker.debian.org/tracker/DSA-6432-1