End of support for cipher suites using the CBC mode
On July 19th, 2023, at 9am PST, Juniper Mist will end support of cipher suites using the Cipher
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Latest cybersecurity news
RADIUS Protocol Vulnerability (Blast-RADIUS)
CVE-2024-3596 On July 9, 2024 researches announced a protocol level vulnerability in the RADIUS protocol with the ability
SVD-2026-0408: Third-Party Package Updates in Splunk Operator for Kubernetes Add-on – April 2026
Splunk remedied common vulnerabilities and exposures (CVEs) in Third Party Packages in Splunk Operator for Kubernetes Add-on version
SVD-2026-0407: Sensitive Information Disclosure in `_internal` index in Splunk MCP Server app
In Splunk MCP Server app versions below 1.0.3 , a user who holds a role with access to
SVD-2026-0406: Third-Party Package Updates in Splunk IT Service Intelligence (ITSI) – April 2026
Splunk remedied common vulnerabilities and exposures (CVEs) in Third Party Packages in the Splunk IT Service Intelligence (ITSI)
April 2026 Security Update
Ivanti releases standard security patches on the second Tuesday of every month. Our vulnerability management program is central
March 2026 Security Update
Ivanti releases standard security patches on the second Tuesday of every month. Our vulnerability management program is central
February 2026 Security Update
Ivanti releases standard security patches on the second Tuesday of every month. Our vulnerability management program is central
Out-Of-Bounds Write in administrative interface
CVSSv3 Score: 6.7 An out-of-bounds write vulnerability [CWE-787] in FortiWeb CGI daemon may allow a remote privileged attacker
2FA request can be replayed without a valid token after one successful request
CVSSv3 Score: 6.7 An Improper authentication vulnerability [CWE-287] in FortiSOAR web GUI may allow an unauthenticated attacker to
Arbitrary directory delete on vmimages delete feature
CVSSv3 Score: 6.2 An Improper Limitation of a Pathname to a Restricted Directory (‘Path Traversal’) vulnerability [CWE-22] in
SSA-981622 V1.0: Improper Certificate Validation Vulnerability in Siemens Analytics Toolkit
<p>Multiple Siemens applications are affected by improper certificate validation in Siemens Analytics Toolkit. This could allow an unauthenticated