Inside Caller-as-a-Service Fraud: The Scam Economy Has a Hiring Process
Fraud operations now operate like call centers, complete with hiring, training, and performance tracking. Flare reveals how cybercriminals
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Latest cybersecurity news
New DinDoor Backdoor Abuses Deno Runtime and MSI Installers to Evade Detection
A newly identified backdoor called DinDoor is using the legitimate Deno JavaScript runtime and MSI installer files to
Most Serious Cyberattacks Against the UK Now From Russia, Iran and China, Cyber Chief Says
British businesses need to prepare themselves to defend against cyberattacks because the U.K. could be targeted “at scale,”
New Wiper Malware Targeted Venezuelan Energy Sector Prior to US Intervention
Dubbed Lotus Wiper, the malware targets recovery mechanisms, overwrites drives, and systematically deletes files. The post New Wiper
2 sources
New npm supply-chain attack self-spreads to steal auth tokens
A new supply chain attack targeting the Node Package Manager (npm) ecosystem is stealing developer credentials and attempting
Connected reporting, one intelligence threadbleepingcomputer.com · thehackernews.com
Microsoft Teams to get efficiency mode on PCs with limited resources
Microsoft is preparing to roll out a new Efficiency Mode for Microsoft Teams for systems with limited CPU
Compromised Namastex npm Packages Deliver TeamPCP-Style CanisterWorm Malware
A serious supply chain threat has surfaced in the npm ecosystem. Malicious versions of packages belonging to Namastex.ai
Massive SIM Farm-as-a-Service Network Exposes 87 Control Panels Across 17 Countries
A global investigation has uncovered an industrial-scale mobile proxy ecosystem powered by a shared control platform called ProxySmart,
Mirai Botnet Targets Flaw in Discontinued D-Link Routers
The exploitation of the command injection vulnerability started one year after public disclosure and PoC exploit code publication.
Are SBOMs Failing? Supply Chain Attacks Rise as Security Teams Struggle With SBOM Data
Researcher says the missing piece is a governance-driven intelligence layer that turns SBOM and VEX data into explainable
2 sources
Claude Mythos Finds 271 Firefox Vulnerabilities
All the flaws could have also been found by an elite human researcher, according to Mozilla. The post
Connected reporting, one intelligence threadsecurityweek.com · cybersecuritynews.com
2 sources
North Korean Hackers Use AppleScript, ClickFix in Fresh macOS Attacks
The campaigns focus on financial organizations, including cryptocurrency, venture capital, and blockchain entities. The post North Korean Hackers
Connected reporting, one intelligence threadsecurityweek.com · darkreading.com