USN-8431-1: Ruby vulnerabilities
It was discovered that Ruby’s Net::IMAP library did not properly verify that Transport Layer Security (TLS) encryption was
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Latest cybersecurity news
RHSA-2026:26054: Important: osbuild-composer security update
An update for osbuild-composer is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat
CVE-2026-9863
High Severity Description Fortra BoKS Manager contains an OS command injection vulnerability in the client upgrade and patch
2 sources
CVE-2026-9862
Critical Severity Description Fortra’s Core Privileged Access Manager (BoKS) contains an OS command injection vulnerability in the boks_autoregisterd
Connected reporting, one intelligence threadtenable.com · cybersecuritynews.com
CVE-2026-9595
Medium Severity Description Impact: When a user-configured proxy on webpack-dev-server has a broad context (e.g. /) and ws:
The US government’s Anthropic models ban was never about an AI jailbreak
The Trump administration’s decision that forced Anthropic to pull its latest cybersecurity models could be reactionary, retaliatory, or
Copilot ‘SearchLeak’ Attack Allows 1-Click Data Theft
The critical, three-stage attack is now patched, but it’s part of a new group of AI prompt-injection issues
SimpleHelp bug lets hackers create rogue remote support accounts
A vulnerability in the SimpleHelp remote management software allows unauthenticated attackers to create privileged technician accounts on servers
Chinese Hackers Abused Google Workspace Rules to Steal Research and Defense Emails
A China-linked espionage group hid inside North American medical, academic, and military research networks for more than a
North Korean Hackers Are Turning Developer Tools Into Malware Delivery Channels
Cybersecurity researchers have flagged two malicious cyber campaigns that exhibit similarities with a persistent North Korean threat cluster
Maine closes data breach portal to the public after fake reports
Maine is still allowing companies to report breaches, but won’t make the portal easily available to the public