Attackers Move Past Typosquatting to Realistic Package Impersonation
Most malicious open source packages now mimic real code rather than rely on typosquatting
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Latest cybersecurity news
Critical OpenVPN Connect for macOS Vulnerability Let Attackers Execute Arbitrary Commands
A critical privilege escalation vulnerability has been discovered in OpenVPN Connect for macOS, enabling local attackers to execute
Hackers Deploy VIP Keylogger Through Phishing Emails Masquerading as Business Documents
Hackers are using deceptive phishing emails dressed up as routine business documents to spread a dangerous malware strain
ClearFake Uses BSC Testnet Smart Contracts for Takedown-Resistant Command and Control
A new and dangerously clever malware campaign called ClearFake has been caught using blockchain smart contracts to run
New Linux CIFSwitch Kernel Vulnerability Allows Attackers to Gain Root Access
A newly disclosed Linux local privilege escalation (LPE) vulnerability dubbed “CIFSwitch” enables low-privileged users to gain root access
Malicious Websites Track Visitors by Analyzing their SSD Timing Activity
Malicious websites can track visitors by measuring tiny changes in SSD access times, turning normal browser activity into
Agentic AI Isn’t Risky; the Way Orgs Deploy It Is
AI agents aren’t black boxes — they’re models interacting with software tools. The risk lies in their overlap.
The Pentagon Knew Enemies Could Track Troops’ Phones for Years. Now They Are
The US military has long known that cheap fixes could stop location data from exposing its troops. It
Threat Actors Exploit Critical FortiClient EMS Flaw to Deploy Credential Stealer
Threat actors are continuing to exploit a critical, now-patched security flaw impacting FortiClient Endpoint Management Server (EMS) deployments
ABB EIBPORT
View CSAF Summary ABB is aware of vulnerabilities in the product versions listed as affected in the advisory.
Jinan USR IOT Technology Limited (PUSR) USR-W610 RS232/485 to Wi-Fi/Ethernet Converter
View CSAF Summary Successful exploitation of this vulnerability could result in an attacker gaining administrator access to the
ABB Busch-Welcome 2 Wire Door Opener Actuator
View CSAF Summary ABB is aware of vulnerabilities in the product versions listed as affected in the advisory.