Popular WordPress redirect plugin hid dormant backdoor for years
The Quick Page/Post Redirect plugin, installed on more than 70,000 WordPress sites, had a backdoor added five years ago
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Latest cybersecurity news
DSA-6237-1 openjdk-17 – security update
https://security-tracker.debian.org/tracker/DSA-6237-1
DSA-6236-1 firefox-esr – security update
https://security-tracker.debian.org/tracker/DSA-6236-1
Reverse Engineering With AI Unearths High-Severity GitHub Bug
Wiz used an AI reverse-engineering tool to pinpoint a vulnerability that previously would have been too costly and
2 sources
Hackers exploit RCE flaws in Qinglong task scheduler for cryptomining
Hackers are exploiting two authentication bypass vulnerabilities in the Qinglong open-source task scheduling tool to deploy cryptominers on
Connected reporting, one intelligence threadbleepingcomputer.com · cybersecuritynews.com
AI Finds 38 Security Flaws in Electronic Health Record Platform
Flaws in OpenEMR’s platform — used by more than 100,000 healthcare providers — enabled database compromise, remote code
Hackers arrested for hijacking and selling 610,000 Roblox accounts
The Ukrainian police have arrested three individuals who hacked more than 610,000 Roblox gaming accounts and sold them
RHSA-2026:11804: Moderate: oci-seccomp-bpf-hook security update
An update for oci-seccomp-bpf-hook is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions.
RHSA-2026:11749: Important: buildah security update
An update for buildah is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat
SonicWall security advisory (AV26-405)
<article data-history-node-id="7619" about="/en/alerts-advisories/sonicwall-security-advisory-av26-405" class="cccs-threats full clearfix"> <div class="content"> <div class="layout layout–onecol"> <div class="layout__region layout__region–content"> <div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder
9 sources
cPanel security advisory (AV26-404)
<article data-history-node-id="7618" about="/en/alerts-advisories/cpanel-security-advisory-av26-404" class="cccs-threats full clearfix"> <div class="content"> <div class="layout layout–onecol"> <div class="layout__region layout__region–content"> <div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder
Connected reporting, one intelligence threadcyber.gc.ca · cybersecuritynews.com · securityweek.com · 1 more source
Lazarus Hackers Attacking macOS Users With ‘Mach-O Man’ Malware Kit
North Korea’s state-sponsored Lazarus Group has unleashed a newly identified, modular macOS malware kit dubbed “Mach-O Man” a