Major medical device manufacturer notifies nearly 4 million of breach
Information like Social Security numbers and health-related data was accessed, but the company said it had “no evidence
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Latest cybersecurity news
3 sources
16-Year-Old Linux KVM Flaw Lets Guest VMs Escape to Host on Intel and AMD x86 Systems
A use-after-free bug in Linux’s KVM hypervisor can be triggered from a guest virtual machine to corrupt the
Connected reporting, one intelligence threadthehackernews.com · arstechnica.com · cybersecuritynews.com
5 insights from Frost & Sullivan’s 2025 Frost Radar™ for Cloud Security Posture Management
Cloud security posture management (CSPM) is being redefined as two forces collide: Cloud environments are becoming more interconnected—spanning
BeyondTrust security advisory (AV26-660)
<article data-history-node-id="7940" about="/en/alerts-advisories/beyondtrust-security-advisory-av26-660" class="cccs-threats full clearfix"> <div class="content"> <div class="layout layout–onecol"> <div class="layout__region layout__region–content"> <div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder
Microsoft Device Code Phishing Attack Steals Tokens Through Legitimate Login Page
A new phishing technique is tricking users into handing over their Microsoft account tokens without a fake website
JadePuffer: The First Complete LLM-Driven Ransomware Attack
An “agentic threat actor” successfully exploited a Langflow flaw to steal data from a production database server and
Japanese teen arrested over cyberattack that disrupted anime streaming service
The unnamed student, who lives in a city near Tokyo, allegedly exploited a flaw in a subscription-based anime
2 sources
Threat Actors Probe Gitea Docker Flaw CVE-2026-20896 13 Days After Disclosure
Threat actors have been observed attempting to exploit a recently patched critical security flaw in Gitea Docker images,
Connected reporting, one intelligence threadthehackernews.com · securityweek.com
Gemini Live Voice Session Flaw Enables Tool Injection Through Misconfigured Ephemeral Tokens
A security flaw in how developers implement Google’s Gemini Live API allows attackers to hijack browser-based AI voice
USN-8514-1: OpenSSH vulnerability
It was discovered that OpenSSH incorrectly handled file permissions when downloading files as root using the legacy scp
USN-8502-1: GnuTLS vulnerabilities
It was discovered that GnuTLS had a timing side-channel when processing malformed ciphertexts in RSA-PSK ClientKeyExchange. A remote