[SPONSOREDNUBIVANCE]
Rapid7 deployed right the first time.
Full-platform Rapid7 rollouts - InsightVM, InsightIDR, event sources, agents, tuning - by a Registered Partner who has done it at state-agency scale, including OT/SCADA.
Talk deploymentIntelligence Briefing
Latest Analysis
Cybersecurity intelligence, threat analysis, and national security reporting.
B-21 Raider Conducts First Live Weapon Release Test
The B-21 Raider has taken a major step forward in its development, successfully releasing a conventional weapon for the first time during a test at Edwards Air Force Base in California. This milestone validates the aircraft's digital models and open systems architecture, paving the way for its future strike capabilities.
UK to Bolster Mine-Hunting Capabilities with New Drone Motherships
The UK is taking a giant leap in mine-hunting tech with a deal to acquire drone motherships that keep sailors safer, thanks to a partnership with Norway. This game-changing move is part of the UK's biggest defense spending boost since the Cold War.
Eisenkot Emerges as Israel's Top Contender
Gadi Eisenkot is taking a cautious approach to forming a new government, urging restraint from the current administration until a new one is sworn in. With 67 Knesset members backing him, he's in a strong position to take power, but needs 61 votes to secure the top spot.
US Navy Destroyers End Record-Breaking Deployments
Meet the heroes of the high seas: the USS Spruance and USS Michael Murphy, two US Navy destroyers that just shattered records with deployments of 357 and 346 days, respectively - the longest since World War II. These mighty ships, part of the Abraham Lincoln Carrier Strike Group, have finally returned home after an incredible journey.
AI Fraudsters Arrested for $129M Impersonation Scam
A massive impersonation scam has been busted, with three individuals arrested in Spain and the UK for swindling over $129 million from companies worldwide, including in the US, between 2024 and 2026. The Department of Justice cracked down on the multi-year scheme, which spanned borders and corporate lines.
Northrop Grumman Bolsters Hermeus' Quarterhorse Drone with Mission Systems
Northrop Grumman is teaming up with Hermeus to supercharge the Quarterhorse drone with cutting-edge mission systems, giving warfighters a game-changing boost in speed, range, and flexibility. By integrating electronic warfare, communications, and sensing capabilities, Northrop Grumman is helping to create a new class of aircraft that seamlessly integrates into the existing Force.
Beretta Unveils LIVET Counter-Drone System with Eight-Barrel Turret
Meet the LIVET Counter-Drone System, a game-changing defense solution featuring a powerful eight-barrel turret packed with Italian-made Benelli M4 shotguns, designed to take down small, close-range drones with unprecedented firepower and precision. This innovative system combines remote operation with AI-driven target tracking to revolutionize drone defense.
Microsoft Patch Tuesday Fixes Over 1,000 Vulnerabilities
Microsoft just dropped a massive Patch Tuesday update, fixing a whopping 1,093 vulnerabilities in Windows and supported software, including 63 critical flaws and a zero-day exploit in Outlook that could leave you exposed. This critical update tackles nearly 535 privilege elevation issues and 63 critical flaws, many of which are remote code execution vulnerabilities that hackers could exploit with ease.
US Air Force Scrambles Response to Suspected Drone Activity Over RAF Lakenheath
The US Air Force sprang into action at RAF Lakenheath after detecting suspicious drone activity, scrambling a response from its Security Forces personnel. Thankfully, the base reported no damage, injuries, or disruptions to personnel, aircraft, or infrastructure.
NATO's China Focus Sparks Beijing's Security Concerns
Beijing sees NATO as a relic of the Cold War and a potential threat to Asia, viewing its expansion and interventions as a destabilizing force that could be heading its way. China and Russia appear to be on the same page about NATO's intentions.
Ukraine-Founded Drone Maker Uforces Eyes Global Expansion
Meet Uforces, a Ukraine-founded drone maker on a mission to revolutionize the industry, with a bold approach that sees them rolling up their sleeves and getting things done. With a recent $700 million Series A funding round, they've achieved a staggering $6 billion valuation and are now setting their sights on global expansion.
Zhuhai Airshow Prepares for Global Debuts
Get ready for the ultimate aviation spectacle! The 16th edition of Airshow China, celebrating its 30th anniversary, is set to take to the skies in Zhuhai, Guangdong from December 7-13, 2026.
Ransomware Targets Hypervisor Layer via Legitimate VMware Interfaces
In a shocking attack, hackers destroyed an organization's entire virtualization infrastructure - including four ESXi hosts and all connected backups - in just 10 days, using legitimate VMware interfaces to carry out the devastating blow. The culprits, known as BlackNevas, pulled off a management-plane compromise, executing malicious actions through authentic VMware management channels.
AI Hacking Poses Systemic Threats Beyond Software
Imagine a future where artificial intelligence isn't just a tool for hackers - but a powerful hacker in its own right, capable of finding and exploiting vulnerabilities in our social, economic, and political systems. According to expert Bruce Schneier, this threat is not only real, but potentially the most destabilizing of all.
Global Industry Unveils Guidelines for Commercial Cyber Intrusion Tools
The UK and French foreign ministries have unveiled industry guidelines to promote responsible use of commercial cyber intrusion tools, aiming to curb reckless activity and boost transparency for regulators, vendors, and customers. This move has now gained US endorsement, marking a significant step towards a more secure digital landscape.
Vulnerability disclosures surge past 100K in 2026, fueled by AI-driven discoveries
The number of vulnerability disclosures has skyrocketed past 100,000 in 2026, with AI-driven discoveries fueling the dramatic increase, and experts warn that this staggering number may soon seem modest. VulnCheck's director of coordinated vulnerability disclosure, Josh Bressers, attributes the surge to AI-powered vulnerability hunting, which is driving the majority of new disclosures.
[SPONSOREDNUBIVANCE]
Audit-ready is a season. It shouldn't be.
Evidence in spreadsheets, controls drifting between audits, frameworks multiplying on flat headcount. Nubivance runs continuous compliance on Rapid7 Cyber GRC - SOC 2, HIPAA, ISO 27001, PCI, CMMC.
End the scramble
Pentagon Rebrands AI Office as Super Intelligence Office
The Department of Defense has given its AI office a bold new name: the Super Intelligence Office, reflecting its mission to tap into the full potential of super intelligence and secure a dominant military edge. This rebrand aligns with a broader government effort to supercharge America's AI capabilities.
Trezor Uncovers Crypto-Stealing Implants in Hardware Wallets
Trezor has confirmed that a rogue reseller, CryptoBilis, sold three compromised Safe 5 hardware wallets containing crypto-stealing implants to unsuspecting customers, prompting an 80% reduction in its global reseller network. The sneaky implants, disguised as an extra circuit board, can secretly monitor the wallet's screen and send sensitive info to hackers.
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Authenticated RCE Bug
Big news for database admins: PostgreSQL just patched a whopping 52 security flaws, including a 22-year-old vulnerability that could let hackers run code on your server - and we’re breaking down the details on the most critical one. The update fixes a type-confusion flaw, known as CVE-2026-6460, that allowed database users to exploit a weakness and gain control of the server.
Cyberattack Targets German Military Drone Maker Quantum Systems
German military drone maker Quantum Systems was hit by a cyberattack when a malicious update was delivered to customers through its QBase software, highlighting the growing threat to the European defense industry. The breach is part of a larger trend of targeted attacks on companies supporting Ukraine's security efforts.
Rogue Cloud Hosts Exploit AMD SEV-SNP Flaws to Steal VM Secrets
Malicious cloud hosts are exploiting flaws in AMD's SEV-SNP security feature to siphon off sensitive data from virtual machines, with researchers uncovering two alarming techniques that allow attackers to read - and even modify - protected data. This breakthrough enables rogue hosts to breach SEV-SNP defenses, putting VM secrets at risk.
Microsoft Outage Losses Mount as Global Disruptions Persist
Microsoft reports encouraging recovery progress, but the economic toll of its recent outage is staggering, with estimated global productivity losses reaching as high as $7 billion. The massive disruption has sparked concerns about the far-reaching impact on the global economy.
Check Point Gateways Targeted in PHP2Shell Attacks Deploying ESXi Wiper
Hackers are exploiting two critical PHP flaws, CVE-2026-109618 and CVE-2026-109619, to breach Check Point Security Gateways and deploy a destructive VMware ESXi wiper in some attacks. The vulnerabilities were patched on October 21, but exploitation attempts began just four days earlier.
Trezor Wallets Targeted by Hidden Implants from CryptoBilis Resale
Beware if you've bought a Trezor Safe 5 wallet from CryptoBilis - some devices have been compromised with a sneaky hidden implant that can steal your recovery phrases. Trezor has confirmed that three wallets sold by this reseller between August and September contain the malicious circuit board.