Attackers Weaponize SAP npm Packages to Steal GitHub, Cloud, and AI Coding Tool Secrets
A new supply chain attack is targeting the SAP developer ecosystem through poisoned npm packages. The campaign uses
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Latest cybersecurity news
DigiCert Revokes Certificates After Support Portal Hack
Hackers delivered malware via a customer chat channel, infected an analyst’s system, and accessed the internal support portal.
How Dark Reading Lifted Off the Launchpad in 2006
Twenty years ago, this media brand didn’t have a print edition to attract eyeballs and sponsors. Top-notch content
2 sources
Progress warns of critical MOVEit Automation auth bypass flaw
Progress Software warned customers to patch a critical authentication bypass vulnerability in its MOVEit Automation enterprise-grade managed file
Connected reporting, one intelligence threadbleepingcomputer.com · thehackernews.com
Webinar: Why MSPs must rethink security and backup strategies
Security breaches don’t just test your defenses—they test your recovery. Join Kaseya in our upcoming webinar to learn
2026: The Year of AI-Assisted Attacks
On December 4, 2025, a 17-year-old was arrested in Osaka under Japan’s Unauthorized Access Prohibition Act. The young
Silver Fox Deploys ABCDoor Malware via Tax-Themed Phishing in India and Russia
The China-based cybercrime group known as Silver Fox has been linked to a new campaign targeting organizations in
Stronger Cybersecurity, Stronger Business: NIST Celebrates 2026 National Small Business Week
Happy National Small Business Week! For over 60 years, the U.S. Small Business Administration has led this initiative
Apache MINA Vulnerabilities Enables Remote Code Execution Attacks
The Apache MINA project has issued urgent security updates to address two critical vulnerabilities that could allow attackers
CISA says ‘Copy Fail’ flaw now exploited to root Linux systems
CISA has warned that threat actors have started exploiting the “Copy Fail” Linux security vulnerability in the wild, one