USN-8599-1: HTTP-Date vulnerability
It was discovered that HTTP-Date incorrectly handled parsing certain date strings. An attacker could possibly use this issue
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Latest cybersecurity news
USN-8598-1: rsyslog vulnerabilities
It was discovered that rsyslog incorrectly handled regex-based TCP framing in the imptcp module. A remote attacker could
AegisAI, founded by former Google security execs, lands $36M to stop AI-driven spear phishing
The Series A was led by Battery Ventures, bringing AegisAI total funding to $49 million.
Hackers Abuse Notepad++ Plugins to Compromise Your System Silently
A stealthy new campaign in which the UAC-0099 threat cluster hijacks a legitimate Notepad++ plugin to quietly plant
For Taylor Swift, Madison Square Garden’s Controversial Cameras Briefly Went Dark
MSG’s sprawling surveillance system can monitor guests down to the second. Its owners made an exception for the
Weintek cMT3092X
View CSAF Summary Successful exploitation of these vulnerabilities could allow a non-privileged user to escalate privileges or view
US government says Iran-linked hackers are disrupting American water and energy providers
An updated government advisory warns that Iranian hackers are exploiting systems used by water and energy providers.
International alert spotlights Russia-linked attacks on Zimbra webmail
A Kremlin-backed group known as Laundry Bear has been using a zero-click phishing technique to break into Zimbra
State Department imposes visa restrictions on foreign cyber scammers
Individuals connected to transnational cyber-scam operations face U.S. visa restrictions under a new policy announced by Secretary of
ThreatsDay: Android Spyware, PLC Attacks, AI Image Prompt Injection + 12 More Stories
Most of this week’s trouble came dressed as something useful. A package stole data. A fake extension opened
RHSA-2026:44480: Moderate: compat-openssl10 security update
An update for compat-openssl10 is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
DSA-6398-1 webkit2gtk – security update
https://security-tracker.debian.org/tracker/DSA-6398-1