CVE-2026-56211
High Severity Description A remote code execution vulnerability was found in libaom, the reference AV1 codec implementation. Insufficient
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Latest cybersecurity news
CVE-2026-56210
High Severity Description A heap-buffer-overflow read vulnerability was found in libaom, the reference AV1 codec implementation. A missing
CVE-2026-56209
High Severity Description An arbitrary address write vulnerability was found in libaom, the reference AV1 codec implementation. A
2 sources
Hackers exploit info disclosure bug in Gravity SMTP WordPress plugin
Threat actors are exploiting an unauthenticated information disclosure vulnerability in the WordPress plugin Gravity SMTP, active on 100,000
Connected reporting, one intelligence threadbleepingcomputer.com · thehackernews.com
DSA-6354-1 libconfig-inifiles-perl – security update
https://security-tracker.debian.org/tracker/DSA-6354-1
DSA-6353-1 gst-libav1.0 – security update
https://security-tracker.debian.org/tracker/DSA-6353-1
Unpatchable ‘usbliter8’ Exploit Breaks Apple A12 and A13 SecureROM Boot Chain
Security researchers at Paradigm Shift have published a working exploit, dubbed usbliter8, that achieves arbitrary code execution inside the SecureROM of
The Gentlemen RaaS Uses GentleKiller EDR Framework Targeting 400 Security Processes
The Gentlemen ransomware-as-a-service (RaaS) operation is actively developing and maintaining a suite of endpoint detection and response (EDR)
[Control systems] Mitsubishi Electric security advisory (AV26-616)
<article data-history-node-id="7890" about="/en/alerts-advisories/control-systems-mitsubishi-electric-security-advisory-av26-616" class="cccs-threats full clearfix"> <div class="content"> <div class="layout layout–onecol"> <div class="layout__region layout__region–content"> <div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder
Texas govt data breach exposes over 3 million driver’s licenses
The Texas Parks and Wildlife Department (TPWD) disclosed a data breach at its license system vendor that exposed
Chrome Extensions’ Critical Flaws Let Attackers Easily Compromise Millions of Browsers
Critical security flaws discovered in widely used Chrome extensions SiderAI and MaxAI are putting millions of users at
Gcore Helps Ucom Safeguard Public Live Broadcast Infrastructure During Armenia’s Parliamentary Elections
Luxembourg, Luxembourg, June 19th, 2026, CyberNewswire Gcore’s Network Layer DDoS Protection helped Ucom maintain service continuity and operational