FBI Arrests Another Suspected ShinyHunters Hacker Linked to FBIJobs.gov Breach
The FBI has arrested another suspected ShinyHunters co-conspirator as investigators pursue the group believed to be behind the
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Latest cybersecurity news
Karaoke Giant Reveals Data Breach Impacting Eight Million
Daiichi Kosho says a supply chain breach has exposed personal data on over eight million karaoke customers
Microsoft Power BI Phishing Campaign Deploys Rogue ScreenConnect RMMs for Persistent Access
A phishing campaign is abusing Microsoft Power BI to deliver rogue ScreenConnect installations and give attackers lasting remote
3 sources
Critical SonicWall Vulnerability Exploited Days After Disclosure
CVE-2026-102255 is a pre-authenticated SSRF flaw that could allow attackers to perform unauthorized operations. The post Critical SonicWall
Connected reporting, one intelligence threadsecurityweek.com · cybersecuritynews.com · thehackernews.com
CyberXero Uses Claude Code in Campaign That Stole Over 628,000 Ukrainian Records
Cybersecurity researchers have disclosed details of a two-pronged artificial intelligence (AI)-augmented initial access campaign targeting WordPress sites, e-commerce
GitLab Critical Patch Release: 19.4.2, 19.3.4, 19.2.8
On October 8, 2026, we released versions 19.4.2, 19.3.4, 19.2.8 for GitLab Community Edition (CE) and Enterprise Edition
Decepticon – Autonomous Red Team Agent that Integrates Claude and Codes
Decepticon is an open-source autonomous red team agent that connects AI reasoning with hands-on security testing. Its integration
CISA Warns of Apache Struts Command Injection Vulnerability Exploited in Attacks
CISA has added a long-standing Apache Struts flaw, tracked as CVE-2016-3081, to its Known Exploited Vulnerabilities catalog after
Midnight Mimosa Infects Android Phones Before Users Even Turn Them On
Midnight Mimosa is reaching Android phones before their owners even press the power button. The malware arrives inside
Let’s Encrypt Cuts Default Certificate Validity to 64 Days Ahead of 45-Day Switch
Beginning February 2027, all newly issued certificates will have a 64-day validity period by default. The post Let’s
RHSA-2026:80605: Critical: cjose security update
An update for cjose is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has