Cybersecurity intelligence, threat analysis, and national security reporting.
A recent malware campaign is actively targeting managed service providers (MSPs) by exploiting cloud-hosted ScreenConnect instances, with six compromised MSPs and 286 affected endpoints across 47 organizations already identified. The threat is still growing, with the number of affected systems continuing to climb.
Baker Tilly recently alerted clients to a concerning data breach, revealing that sensitive personal information was exposed through a third-party service provider. The incident, discovered on September 6, 2026, put certain client data at risk, but details on the breach and affected parties are still limited.
Notion revealed a security breach at its AI partner Fireworks AI, which exposed chat transcripts from a small number of workspaces, but fortunately, the compromised data was unattributable, meaning it didn't contain identifiable information about who wrote the chats or which workspace they came from. The breach was caused by an attacker accessing Fireworks' development environment via a third-party cloud provider.
eMudhra has revoked eight more intermediate certificate authority (CA) certificates, bringing the total to 16, after an internal investigation uncovered sloppy handling of private keys during a custom certificate-generation process. This move shakes up the certificate trust landscape, impacting TLS and code-signing certificates issued by the affected CAs.
N-able is racing against time to patch 33 alleged zero-days in its N-central product after a mass disclosure, with the company's CEO criticizing the move as giving attackers a head start. A critical security hotfix, N-central 2026.4 Hotfix 2, has been released to address the most vulnerable issues.
Zoom just patched a major security flaw that could let hackers escalate their privileges remotely, giving them almost total control over your Windows device - but fortunately, the company has released software updates to fix the problem. The vulnerability, CVE-2026-108186, scored a concerning 9.6 on the CVSS scale, highlighting the severity of the risk.
Despite uncovering nearly 38,000 potential vulnerabilities through Project Glasswing, a staggering gap remains: only 217 have been publicly fixed seven months after launch. This raises pressing questions about the pace of remediation and the effectiveness of vulnerability disclosure initiatives.
Researchers have spotted malicious actors leveraging AI-powered pentesting tools, specifically AntiFox, to target sensitive AWS secrets and cloud services, with some intrusions linked to Alibaba Cloud systems. This open-source platform is designed to automate penetration testing, making it a double-edged sword in the world of cybersecurity.
Evidence in spreadsheets, controls drifting between audits, frameworks multiplying on flat headcount. Nubivance runs continuous compliance on Rapid7 Cyber GRC - SOC 2, HIPAA, ISO 27001, PCI, CMMC.
End the scramble
Maersk recently disclosed a data breach affecting a single local system after falling victim to a ransomware attack by WhiteArmor, and fortunately, no other systems or customer data appear to have been compromised. The hackers are demanding $5 million in bitcoin, claiming Maersk's contract-logistics arm handles fulfilment for many top consumer brands.
Meet CopperDragon, a suspected digital quartermaster that's been secretly supplying China-nexus hackers with powerful malware tools, including the Sparrow framework and Melofee backdoor. This mastermind is thought to be the behind-the-scenes developer and supplier of software and infrastructure to multiple threat groups.
Meet the underground actors who are turning eBPF into a powerful tool for Linux rootkits, exploiting its ability to run sandboxed programs inside the Linux kernel to manipulate system activity undetected. They're using it to hide processes, encrypt C2 traffic, and more, forcing us to rewrite the rootkit playbook.
Security researchers have uncovered a sneaky tactic used by hackers to steal AWS credentials, involving the exploitation of AntiFox AI on Alibaba Cloud systems to launch attacks on internet-facing web services and associated AWS environments. This alarming method allows attackers to make authenticated requests to Amazon Web Services APIs using valid AWS identities.
In October 2026, hackers launched a lightning-fast, three-minute attack on several EU-based Qlik Sense servers, attempting to deploy sneaky PowerShell reverse shells. The intruders' tactics eerily resembled a 2023 Cactus Qlik intrusion, sparking concerns of a repeat threat.
A staggering 35,578 out of 37,571 Grok-built apps were left exposed, allowing anyone to access them without a sign-in, thanks to misconfigured access settings. This massive security lapse was uncovered by Claroc, a company that helps secure AI-built apps.
eMudhra's troubles continue to mount with the revocation of 8 more Certificate Authorities, all linked to a faulty in-house Python script used for key transport back in April 2025. This latest setback follows a similar incident in October, highlighting a concerning pattern of errors in the company's trust operations.
N-able sprang into action, rolling out emergency hotfixes to tackle zero-day flaws in its remote monitoring platform after a researcher publicly disclosed the critical vulnerabilities. The swift response appears to have paid off, with the number of exposed N-central servers dropping sharply from 1,338 to just over 148.
Full-platform Rapid7 rollouts - InsightVM, InsightIDR, event sources, agents, tuning - by a Registered Partner who has done it at state-agency scale, including OT/SCADA.
Talk deployment
Maersk is investigating a potential data theft incident and has found no evidence of sensitive information being compromised so far. The company swiftly launched an inquiry and secured the affected system, prioritizing cybersecurity to minimize any impact on customers.
Meet Rehearsal, a browser agent built by Token that got a little too good at its job - and exposed some serious security gaps when it inherited a human session without a distinct identity, scope, or delegation record. The surprising results serve as a concrete lesson in what can go wrong when AI agents aren't properly secured.
Good news for Windows users: Microsoft has squashed a pesky USB audio issue with its latest security updates, including the November 10, 2026 update (KB5132061) and later versions. Installing the latest update will not only fix the audio problem but also bring important improvements and issue resolutions.
CISA is warning of a serious vulnerability in Cisco BroadWorks that's being actively exploited - a flaw that lets attackers read sensitive config info by sending a malicious XML message. This weakness was caused by an improper restriction of XML External Entity reference handling, allowing unauthenticated remote attacks.
This Patch Tuesday, Microsoft tackles a massive 1,235 vulnerabilities, including a zero-day flaw that's being actively exploited - and experts warn that one particularly sneaky bug lets attackers slip past Outlook's usual security warnings.
The alarming truth is that many industrial organizations are woefully unprepared for a cyber attack, with most yet to answer critical questions about who will take the reins and how they'll recover if disaster strikes. A recent SANS Institute survey revealed a steep 55% increase in OT/ICS incidents over the past year, with 34% of respondents reporting at least one incident.
Microsoft has fixed a frustrating issue affecting on-premises Exchange servers, where users couldn't sign in to Outlook on the web or send emails after installing October's Windows security updates. The problem was caused by a new memory limit introduced in the updates, affecting Windows Server 2019 and later systems.
Mines don't have to be sophisticated to cause damage, but spotting and disarming them can be a painstaking process - one that's being revolutionized by remote systems as traditional mine hunting vessels decline. Navies are turning to a high-tech find, fix, and finish approach to clear mined waters and keep our seas safe.