CVE-2026-56411
Medium Severity Description xmlwf in libexpat before 2.8.2 has an integer overflow in endDoctypeDecl via NOTATION declarations. Read
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Latest cybersecurity news
CVE-2026-56410
Medium Severity Description xmlwf in libexpat before 2.8.2 has an integer overflow in resolveSystemId. Read more at https://www.tenable.com/cve/CVE-2026-56410
DSA-6360-1 squid – security update
https://security-tracker.debian.org/tracker/DSA-6360-1
DSA-6359-1 gst-plugins-good1.0 – security update
https://security-tracker.debian.org/tracker/DSA-6359-1
DSA-6358-1 libhttp-daemon-perl – security update
https://security-tracker.debian.org/tracker/DSA-6358-1
DSA-6357-1 pillow – security update
https://security-tracker.debian.org/tracker/DSA-6357-1
DSA-6356-1 imagemagick – security update
https://security-tracker.debian.org/tracker/DSA-6356-1
AryStinger botnet infected thousands of D-Link routers worldwide
A previously undocumented malware botnet named AryStinger has compromised more than 4,000 outdated routers to turn them into
DSA-6355-1 linux – security update
https://security-tracker.debian.org/tracker/DSA-6355-1
GentleKiller Ransomware Abuses Vulnerable Drivers to Disable 400+ EDR Security Processes
A highly sophisticated EDR-killing framework, dubbed GentleKiller, was used by the Gentlemen ransomware-as-a-service (RaaS) gang to systematically disable