CISA to transform how it assesses cyber vulnerabilities and risks, Andersen says
A binding operational directive being released Wednesday will direct federal agencies to change the way they address vulnerabilities
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Latest cybersecurity news
HPE security advisory (AV26-571)
<article data-history-node-id="7818" about="/en/alerts-advisories/hpe-security-advisory-av26-571" class="cccs-threats full clearfix"> <div class="content"> <div class="layout layout–onecol"> <div class="layout__region layout__region–content"> <div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder
Adobe security advisory (AV26-570)
<article data-history-node-id="7817" about="/en/alerts-advisories/adobe-security-advisory-av26-570" class="cccs-threats full clearfix"> <div class="content"> <div class="layout layout–onecol"> <div class="layout__region layout__region–content"> <div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder
2 sources
Microsoft Patches 200 Vulnerabilities
Three of the vulnerabilities fixed with the latest Patch Tuesday updates were publicly disclosed before Microsoft addressed them.
Connected reporting, one intelligence threadsecurityweek.com · infosecurity-magazine.com
USN-8156-2: GDK-PixBuf vulnerability
USN-8156-1 fixed a vulnerability in GDK-PixBuf. This update provides the corresponding update for Ubuntu 16.04 LTS, Ubuntu 18.04
USN-8412-1: QEMU vulnerabilities
Felipe Franciosi, Raphael Norwitz, and Peter Turschmid discovered that the iSCSI block driver in QEMU incorrectly handled certain
USN-8413-1: Cyborg vulnerabilities
It was discovered that Cyborg did not properly enforce project ownership in the Accelerator Request (ARQ) API. An
USN-8411-1: Lodash vulnerabilities
It was discovered that Lodash was vulnerable to a prototype pollution issue in the zipObjectDeep function. An attacker
CISA gives US federal agencies three days to fix a VPN bug under attack by a ransomware gang
Check Point said hackers broke into dozens of organizations by exploiting a VPN bug in several of its
New MagicAd Android Malware Flood Device With Ads Bypassing Restrictions
A newly discovered Android trojan called MagicAd has been found flooding infected devices with ads, cleverly slipping past
New Browser-in-the-Browser Phishing Attack to Steal Microsoft 365 Logins
A new and sophisticated Browser-in-the-Browser phishing campaign has been discovered targeting Microsoft 365 users, using a fake login