Apple Private Cloud Compute Flaw Enables Root File Writes and AI Inference Telemetry Leakage
CVE-2026-20685 is a path traversal vulnerability affecting Apple’s Private Cloud Compute (PCC), potentially allowing attackers to write files
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Latest cybersecurity news
Malicious Solidity Pro VS Code Extension Steals Crypto Wallets, API Keys and SSH Keys via Telegram
Malicious extensions are turning a routine developer task into a route for theft. A package named Solidity Pro,
Interlock Turns the Tools Incident Responders Use Into Weapons for Stealing Windows Passwords
Interlock ransomware is taking a familiar Windows security tool and using it for credential theft. The group has
New Jersey, Alabama Join States Targeted in Water Cyberattacks
Hackers linked to Iran targeted industrial control systems (ICS) at water facilities in at least a dozen US
Metabase Patches Vulnerability Exploited as Zero-Day
The security defect allows unauthenticated, remote attackers to gain administrative access to Metabase instances. The post Metabase Patches
Valve notifies Steam hardware customers of a data breach
Video game publisher and digital distribution giant Valve is notifying Steam hardware customers in Europe that hackers stole
Python Now Has a Post-Quantum Encryption Library
This is good: Post-quantum cryptography is now one pip-install away for the entire Python ecosystem. With funding from
RHSA-2026:52772: Important: perl-DBI:1.641 security update
An update for the perl-DBI:1.641 module is now available for Red Hat Enterprise Linux 8. Red Hat Product
“Ghostjacking” Exploits AI Agents’ Trusted Access to Evade Firewall Controls
Tenet reported that half of Fortune 500 companies are vulnerable to the Ghostjacking technique, which involves tricking AI
New 5G White Paper Available: Initial Non-Access Stratum Message Security
The NIST National Cybersecurity Center of Excellence (NCCoE) has released the initial public draft Cybersecurity White Paper (CSWP)