24 npm Packages Abuse unpkg Mirrors to Host Fake Cloudflare CAPTCHA Pages
Cybersecurity researchers have disclosed details of a new campaign that uses a cluster of 24 npm packages as
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Latest cybersecurity news
E4del and PINHOLE RATs Turn FTP Banners Into Dead Drops for Malware Commands
Cybersecurity researchers are calling attention to a new campaign that employs FTP banners as dead drop resolvers (DDRs)
Frontier AI: Vulnerability Management’s Systemic Revolution
Vulnerability management has been a staple of security programs since the dawn of the cybersecurity discipline. The symbiotic
RHSA-2026:59372: Moderate: assertj-core security update
An update for assertj-core is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has
RHSA-2026:59347: Low: httpd security update
An update for httpd is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has
Identity Everywhere: Bringing Infrastructure Identity to Agentic IT
Segmentation limits attacker movement, contains AI-era threats, and strengthens cyber resilience with Zero Trust.
CVE-2026-79652
Medium Severity Description A flaw was found in the JWT Bearer authorization grant implementation within the keycloak-services component
CVE-2026-78863
Medium Severity Description A vulnerability was found in liketrek TREK up to 3.0.22. Impacted is the function loginUser
CVE-2026-59335
High Severity Description Improper handling of case sensitivity (CWE-178) in the identity zone authorization check in the Identity
Fake Recruiter Scams Target Corporate Credentials on Mobile
RecruitTrap campaigns use mobile-optimized phishing pages to target enterprise credentials
Multiple Zscaler Client Connector Vulnerabilities Enable RCE Attacks
Multiple vulnerabilities affecting Zscaler Client Connector have been disclosed, potentially allowing remote code execution on vulnerable systems. Tracked
91 Spring Vulnerabilities Impact 209,000+ Software Components Across Open-Source Ecosystem
Broadcom has released a major batch of Spring security advisories, with Sonatype tracking 91 CVEs across Spring Framework