Fake Adobe and Zoom Updates Install ScreenConnect for Persistent Remote Access
Cybersecurity researchers have disclosed details of an active, multi-wave campaign that employs social engineering lures themed around Adobe
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Latest cybersecurity news
10 sources
N-able security advisory (AV26-769)
<article data-history-node-id="8063" about="/en/alerts-advisories/n-able-security-advisory-av26-769" class="cccs-threats full clearfix"> <div class="content"> <div class="layout layout–onecol"> <div class="layout__region layout__region–content"> <div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder
Connected reporting, one intelligence threadcyber.gc.ca · cybersecuritynews.com · thehackernews.com · 3 more sources
The Frontier AI Vulnerability Burst: Industrializing Autonomous Zero-Day Discovery in Open-Source Software
Frontier AI is reshaping vulnerability discovery. Learn how our NOVA system found 14,000+ unknown vulnerabilities across the open-source
CVE-2026-66884
Low Severity Description Cross-Site Request Forgery vulnerability in Erlang Ecosystem Foundation oidcc_plug (Oidcc.Plug.AuthorizationCallback module) allows an attacker to
CVE-2026-66883
Medium Severity Description Improper Handling of Case Sensitivity vulnerability in Erlang Ecosystem Foundation oidcc_plug (Oidcc.Plug.Authorize module) renders the
CVE-2026-10050
High Severity Description In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as
Cybercriminals Bypass AI Safety Controls by Splitting Malicious Tasks Across Multiple Sessions
Talos read attacker prompt logs and found guardrails fell to task splitting and ownership claims
NIST Joins National Genesis Mission to Accelerate AI Innovation
NIST will execute two of its efforts through its Centers for AI in Manufacturing and Critical Infrastructure.
Six Flowise RCE Flaws Let Attackers Execute Code on AI Workflow Servers
Flowise servers used to build AI agents and automated workflows are facing six newly disclosed remote code execution
DarkSword iOS Exploit Kit Spreads Across 180 Web Properties and 27 Hosts
DarkSword has expanded from a leaked iOS exploit chain into a broad and fast-changing network of malicious web
OWASP Subtractive Security Top 10 Project Released to Identify and Reduce Cyber Risks
The Open Worldwide Application Security Project, or OWASP, has introduced the Subtractive Security Top 10 Project, a security
Weaponized Email AI Assistants Could Help Attackers Hijack Accounts
Researchers demonstrate how attackers could abuse built-in email chatbots to evade detection, impersonate trusted employees, compromise executive accounts,