GitHub says hackers stole data from thousands of internal repositories
The code hosting giant GitHub said it was investigating a breach, but said there was no evidence of
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Latest cybersecurity news
Anthropic Silently Patches Claude Code Sandbox Bypass
The researcher who found it says the vulnerability could have been chained with a prompt injection to exfiltrate
Drupal critical update to fix bug with high exploitation risk
Drupal has announced a “core security release” scheduled for later today, warning that threat actors might develop exploits
RHSA-2026:18068: Important: Red Hat build of MicroShift 4.18.42 security update
Red Hat build of MicroShift release 4.18.42 is now available with updates to packages and images that include
RHSA-2026:19609: Important: libtiff security update
An update for libtiff is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions.
RHSA-2026:19608: Important: libtiff security update
An update for libtiff is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions.
RHSA-2026:19601: Important: PackageKit security update
An update for PackageKit is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat
RHSA-2026:17446: Important: OpenShift Container Platform 4.18.42 packages and security update
Red Hat OpenShift Container Platform release 4.18.42 is now available with updates to packages and images that fix
China-Linked Webworm APT Evolves Tactics, Expands to European Targets
China-linked Webworm APT expands beyond Asia, targeting European government organizations and refining its cyber espionage tactics, according to
Hackers Use Single-Letter Go Module Typosquat to Deploy DNS-Based Backdoor
A seemingly innocent typo in a Go module name has been quietly serving a live backdoor for nearly
Microsoft Python Client DurableTask Compromised by TeamPCP Hackers
Three consecutive releases of Microsoft’s official Python workflow SDK were poisoned with a multi-cloud credential-stealing worm, continuing the