Cybersecurity intelligence, threat analysis, and national security reporting.
Good news for Windows users: Microsoft has squashed a pesky USB audio issue with its latest security updates, including the November 10, 2026 update (KB5132061) and later versions. Installing the latest update will not only fix the audio problem but also bring important improvements and issue resolutions.
CISA is warning of a serious vulnerability in Cisco BroadWorks that's being actively exploited - a flaw that lets attackers read sensitive config info by sending a malicious XML message. This weakness was caused by an improper restriction of XML External Entity reference handling, allowing unauthenticated remote attacks.
This Patch Tuesday, Microsoft tackles a massive 1,235 vulnerabilities, including a zero-day flaw that's being actively exploited - and experts warn that one particularly sneaky bug lets attackers slip past Outlook's usual security warnings.
The alarming truth is that many industrial organizations are woefully unprepared for a cyber attack, with most yet to answer critical questions about who will take the reins and how they'll recover if disaster strikes. A recent SANS Institute survey revealed a steep 55% increase in OT/ICS incidents over the past year, with 34% of respondents reporting at least one incident.
Microsoft has fixed a frustrating issue affecting on-premises Exchange servers, where users couldn't sign in to Outlook on the web or send emails after installing October's Windows security updates. The problem was caused by a new memory limit introduced in the updates, affecting Windows Server 2019 and later systems.
Mines don't have to be sophisticated to cause damage, but spotting and disarming them can be a painstaking process - one that's being revolutionized by remote systems as traditional mine hunting vessels decline. Navies are turning to a high-tech find, fix, and finish approach to clear mined waters and keep our seas safe.
Microsoft researchers have made a startling discovery: a mere 10 rarely used neurons in an AI model can be edited to create a hidden backdoor, allowing the model to be hijacked and turned into a remote-execution tool. This vulnerability, dubbed Lazarus, can be exploited without needing to retrain the model.
Microsoft's November Patch Tuesday tackles a massive 1,094 vulnerabilities across Windows, Office, Azure, and more, with a whopping 726 fixes for Windows alone. This significant update aims to shield users from potential threats, but experts warn that exploitation in the wild is still a concern.
Evidence in spreadsheets, controls drifting between audits, frameworks multiplying on flat headcount. Nubivance runs continuous compliance on Rapid7 Cyber GRC - SOC 2, HIPAA, ISO 27001, PCI, CMMC.
End the scramble
Allen Control Systems is stepping up the fight against rogue drones with the launch of its new Directed Energy division, delivering high-energy lasers to help US and allied militaries outpace the growing threat of low-cost weaponized drones. This move underscores ACS's commitment to developing cutting-edge, cost-effective solutions to safeguard national security.
Railway customers are reeling after a security breach led to $740,000 in unauthorized charges from AI providers, with the company struggling to provide refunds. Despite promising to cover costs when AI providers won't, Railway currently can't reimburse customers for compromised API key spending.
Australia is bolstering its northern defences with a $2.4 billion boost to its Air 6500 program, aiming to create a seamless air and missile defence system by linking sensors, decision-makers, and weapons like never before. This move is set to revolutionise the country's defensive capabilities.
The House has effectively put the brakes on Rep. Thomas Massie's effort to impeach Defense Secretary Pete Hegseth, voting 211 to 204 to send the impeachment resolution to the Judiciary Committee rather than moving forward with a floor vote. This move likely dooms the effort, as the committee is not required to take it up and the current Congress is set to adjourn soon.
The US leads the world in quantum technologies, but now it's time to turn that scientific superiority into real-world industrial powerhouses - think factories, foundries, and supply chains that can deliver game-changing systems. Deputy Secretary of Commerce Paul Dabbar is pushing companies to make that crucial leap from lab breakthroughs to manufacturing dominance.
The US Army is accelerating its air defense capabilities, aiming to deploy palletized short-range air defense systems by 2029 and achieve Initial Operational Capability in 2030. By the end of 2029, a battalion-sized palletized air defense element will be equipped and ready for action.
As the Philippines heads to the polls in May 2028, the nation's future foreign policy hangs in the balance - and with it, the stability of the Indo-Pacific region. A new administration could quickly reset Manila's alliances, leaving partners like Australia, Japan, and the US exposed.
Meet the Super Ice, Rafael's game-changing cruise missile that's redefining long-range strikes with cutting-edge AI capabilities and a powerful 1,000-pound warhead. This strategic powerhouse can be launched from air, land, or sea to take out high-value targets, from air-defense systems to hardened bunkers and naval vessels.
Full-platform Rapid7 rollouts - InsightVM, InsightIDR, event sources, agents, tuning - by a Registered Partner who has done it at state-agency scale, including OT/SCADA.
Talk deployment
Pakistan just made a game-changing move in the air force arena with the successful test of its first homegrown beyond-visual-range missile, Fa'az, which was launched from a JF-17 combat fighter and boasts an impressive top speed of Mach 3.5. This cutting-edge tech could shift the balance of power in the region.
The nomination of Palantir's Michael LoSapio to lead CISA raises red flags about his independence, sparking concerns from lawmakers who worry about the potential impact on the nation's cybersecurity infrastructure. Senators Maggie Hassan, Gary Peters, and Rep. Bennie Thompson are urging caution, citing the Trump administration's history of undermining CISA.
This exploited Outlook bug is a hacker's dream come true, allowing them to turn a single opened file into a stolen identity and gain easy access to a company's sensitive data.
CISA has added two new vulnerabilities to its list of actively exploited flaws, warning that hackers are using them to launch real-world attacks on Cisco BroadWorks and Openwave Messaging systems. Immediate action is needed to mitigate these risks and protect your systems from harm.
Nation-states are quietly infiltrating critical infrastructure like energy, water, and transportation systems using "low and slow" cyber tactics, patiently positioning themselves for future leverage. This stealthy approach allows them to secretly gain a foothold, converting essential services into tools of geopolitical influence.
OpenAI just launched a rapid shutdown system, called Control Room, to quickly detect and halt research models in case of safety or security concerns. This central kill switch is already live across their research infrastructure, giving them greater control over potential risks.
Microsoft just dropped a massive patch update, fixing a whopping 1,094 bugs - including a critical zero-day flaw that's already being exploited by hackers. This marks the second month in a row with over 1,000 CVEs, serving as a stark reminder for defenders to stay vigilant.
In a sophisticated attack, hackers exploited multiple vulnerabilities in Railway's infrastructure, probing various entry points simultaneously to ultimately generate $740,000 in fraudulent charges. The attackers used a multi-pronged approach, analyzing Railway's internal source code to uncover new routes into the platform.