SVD-2026-0610: Third-Party Package Updates in Splunk Enterprise – June 2026
Splunk remedied common vulnerabilities and exposures (CVEs) in Third Party Packages in Splunk Enterprise versions 10.4.0, 10.2.4, 10.0.7,
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Latest cybersecurity news
CVE-2026-8637
High Severity Description A potential uncontrolled search path vulnerability was reported in the LanSchool Classic client application that
CVE-2026-8335
High Severity Description A missing authentication check on the Aix‑DB “/llm/process_llm_out” endpoint allows unauthenticated clients to execute arbitrary
FreePBX security advisory (AV26–579)
<article data-history-node-id="7842" about="/en/alerts-advisories/freepbx-security-advisory-av26-579" class="cccs-threats full clearfix"> <div class="content"> <div class="layout layout–onecol"> <div class="layout__region layout__region–content"> <div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder
Jenkins security advisory (AV26-578)
<article data-history-node-id="7841" about="/en/alerts-advisories/jenkins-security-advisory-av26-578" class="cccs-threats full clearfix"> <div class="content"> <div class="layout layout–onecol"> <div class="layout__region layout__region–content"> <div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder
Cybersecurity researchers aren’t happy about the guardrails on Anthropic’s Fable
Cybersecurity researchers are complaining that Anthropic’s new model Fable has guardrails that are too strict for any cybersecurity
Fake Software Tutorials on TikTok Spread Vidar Stealer
Threat actors push fake free-software tutorials on TikTok and Instagram to spread Vidar stealer
New SilabRAT Trojan Hijacks Sessions to Steal Crypto
MaaS trojan SilabRAT uses HVNC and browser cloning to hijack sessions and steal crypto
Cybersecurity Software Fails to Detect Fifth of Brower-Based Phishing Attacks
Menlo Security research warns that as enterprise applications become increasingly browser based, traditional cybersecurity tools leave them vulnerable
Hackers Abuse Fake Utility Downloads to Install ScreenConnect and Mine Cryptocurrency
Hackers are turning everyday software searches into a trap. A sophisticated cryptojacking campaign is actively targeting users who
Hackers Use Tax Phishing Emails to Deploy In-Memory Malware on Windows Systems
Hackers are using fake tax notification emails to trick Windows users into downloading dangerous multi-stage malware that runs
ServiceNow Confirms Vulnerability Allowing Unauthorized Access to Customer Instance Tables
ServiceNow has confirmed a security vulnerability that could allow unauthorized actors to query customer instance tables, raising concerns