8-Year-Old Samsung KNOX Vulnerability Exposes Galaxy Devices to Kernel Attacks
A critical use-after-free (UAF) vulnerability in Samsung’s proprietary KNOX security subsystem, which has been hidden for over eight
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Latest cybersecurity news
LastPass Customer Data Exposed in Klue Supply Chain Attack
LastPass has disclosed a supply chain security incident involving its third-party vendor, Klue, that resulted in unauthorized access
DifyTap Flaws Allow Attackers to Wiretap AI Data Across Tenants – 1M+ Apps Impacted
Multiple critical vulnerabilities in Dify could expose sensitive AI data across tenants and potentially impact more than one
Five-Eye Agencies Call for “Whole-of-Organization and Whole-of-Society Response” to Stop Cyber Threats
The Five Eyes cyber security agencies have issued a joint warning urging governments, businesses, and critical infrastructure operators
Nearly Half of Apps Across LG and Samsung TV’S are Selling Your IP Address
New research found that 2,058 of 6,038 apps across the LG webOS and Samsung Tizen ecosystems included residential
The Exploit Doesn’t Exist. You Can Still Prove It Works Against You
Attackers can now weaponize newly disclosed vulnerabilities far faster than most organizations can patch them. Picus Security explains
GitHub Updates actions/checkout to Block Common Pwn Request Attack Patterns
GitHub is moving to strengthen software supply chain security by updating “actions/checkout” to block pwn request attacks that
Guarding AI memory
In this article What AI memory is (and why it matters) What is an agent memory attack? How
One intrusion, two cyberattackers: Uncovering parallel threat activity
What began as a routine ransomware investigation quickly revealed something far more complex. In this ninth cyberattack series
Trump Issues Executive Order to Fast-Track Post-Quantum Migration
All US federal agencies will have to complete their post-quantum cryptography transition by 2031, according to a new
Hackers Use Velociraptor, Cloudflare Tunnels, Zoho Assist, and VS Code SSH for Persistence
A routine ransomware investigation turned into something far more alarming when security researchers uncovered two separate threat actors
FlutterShell macOS Backdoor Abuses Flutter Framework and WKWebView for Stealthy Attacks
A newly analyzed macOS backdoor called FlutterShell has been quietly targeting Mac users by disguising itself as legitimate