ZDI-26-442: Linux Kernel CAN ISO-TP Protocol Race Condition Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel. An attacker must first
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Latest cybersecurity news
Forgotten Bootloaders Expose Secure Boot Blind Spot
Nearly a dozen vulnerable and now revoked UEFI shim bootloaders remained trusted for years, giving attackers a path
Dutch police bust investment fraud ring stealing over €100 million
The Dutch Police announced the arrest of multiple individuals suspected of being part of an international investment fraud
Trump administration unveils AI-supported clearinghouse for cyber vulnerabilities
The Gold Eagle program will allowe industry, critical infrastructure operators and the government to use artificial intelligence to
Here’s the Truth About Whether Meta’s NameTag Face Recognition Tech ‘Exists’
Since WIRED reported on Meta’s NameTag face recognition system, company executives have made confusing and conflicting remarks about
Identity Attacks Overtake Exploits as Top Ransomware Cause
Email attacks overtook exploits as the top ransomware root cause last year. Multifactor authentication (MFA) was deployed in
2 sources
Drupal core – Moderately critical – Cross-site scripting – SA-CORE-2026-011
Project: Drupal core Date: 2026-July-15 Security risk: Moderately critical 14 ∕ 25 AC:Basic/A:User/CI:Some/II:Some/E:Theoretical/TD:All Vulnerability: Cross-site scripting Affected versions: >=11.3.0 <11.3.14
Connected reporting, one intelligence threaddrupal.org
Drupal core – Moderately critical – Information disclosure – SA-CORE-2026-010
Project: Drupal core Date: 2026-July-15 Security risk: Moderately critical 10 ∕ 25 AC:Complex/A:None/CI:Some/II:None/E:Theoretical/TD:Uncommon Vulnerability: Information disclosure Affected versions: <10.6.13 ||
Cisco security advisory (AV26-706)
<article data-history-node-id="7993" about="/en/alerts-advisories/cisco-security-advisory-av26-706" class="cccs-threats full clearfix"> <div class="content"> <div class="layout layout–onecol"> <div class="layout__region layout__region–content"> <div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder
Oracle security advisory (AV26-526) – Update 2
<article data-history-node-id="7761" about="/en/alerts-advisories/oracle-security-advisory-av26-526" class="cccs-threats full clearfix"> <div class="content"> <div class="layout layout–onecol"> <div class="layout__region layout__region–content"> <div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder
Windows 0-day drops the same day Microsoft releases record number of patches
Right on the heels of Microsoft releasing a record number of security patches, a researcher has published exploit
3 sources
Zoom warns of critical account takeover vulnerability
Zoom is warning of a critical vulnerability in its desktop client and software development kit for Windows that
Connected reporting, one intelligence threadbleepingcomputer.com · cybersecuritynews.com · thehackernews.com