
Know a small business winging it on security?
No IT department, no security budget, real exposure. Nubivance builds right-sized security foundations for small companies. Send them this.
Send it alongCybersecurity intelligence, threat analysis, and national security reporting.

A single misplaced access key on a third-party AI provider's platform was all it took for hackers to breach Cursor's system, exposing 5,000 developers to malicious code via a tampered extension. The attackers used the compromised key to inject unauthorized code into the Cursor VS Code extension marketplace.

The US government has just thwarted a massive North Korean crypto heist, disrupting a sophisticated social engineering scam that swindled over $400 million in cryptocurrency. The cleverly designed scheme, dubbed FaceStealer, used deepfakes, fake video meetings, and account hijacking to deceive victims in the crypto and Web3 sectors.

UnrealIRCd servers are under attack by exploiters who are taking advantage of a high-severity flaw, CVE-2026-114713, that allows them to inject malicious commands with server-level privileges. The vulnerability has a CVSS score of 8.6 and can be exploited by any user on a network with linked servers.

Big news from the Naval Submarine League Annual Symposium: Vice Adm. Rob Gaucher announced that submarine maintenance delays have plummeted by 40% to 780 days, down from 1,400 days in previous years. This massive reduction marks a significant milestone in the US submarine fleet's improved performance.
The Senate has given a significant boost to space safety efforts, allocating an additional $50 million to the Commerce Department's space tracking program to monitor non-military satellites. This funding injection, championed by Senate Appropriations Committee Chair Susan Collins, is a major win for the Office of Space Commerce.

The FAA has issued an emergency ground stop for all US airports due to a communications outage affecting multiple Air Route Traffic Control Centers, causing widespread flight disruptions. Departures across the country have been halted until further notice, with technicians racing to resolve the issue.

Meet Cmdr. David Nicolas, who's part of a remarkable team that just wrapped up a grueling 346-day deployment - a true test of endurance for sailors, ships, and families. The guided-missile destroyer Michael Murphy's homecoming at Pearl Harbor was a joyous celebration, complete with hula dancers and a rainbow over the channel.

As the Indo-Pacific region faces rising tensions, building resilient networks and robust cyber defenses has become crucial for military readiness and deterrence. Senior leaders and experts are converging to tackle these challenges and shape the future of digital defense in the region.

No IT department, no security budget, real exposure. Nubivance builds right-sized security foundations for small companies. Send them this.
Send it along
Experts are calling out tech giants like Google, Microsoft, and Meta for allegedly doing the bare minimum to meet their online safety duties, despite the UK's Online Safety Act requiring them to take more substantial action to protect users. A panel of experts, including Professor Clare McGlynn, told Parliament that these companies can do better by taking a systematic approach to minimizing risks.

Join the weekend conversation on Bunker Talk, where readers come together to chat about the latest happenings in a relaxed, off-topic space. With a set of PRIME DIRECTIVES guiding the discussion, participants are encouraged to engage respectfully and thoughtfully, even when tackling tough topics like politics.

Researchers uncovered 14 high-severity flaws in Dixell's internet-connected refrigeration units, giving attackers potential administrative access to infected devices. These vulnerabilities, with severity scores of up to 9.8, are already being exploited in the wild, posing a significant risk to device security.

The B-21 Raider has taken a major step forward in its development, successfully releasing a conventional weapon for the first time during a test at Edwards Air Force Base in California. This milestone validates the aircraft's digital models and open systems architecture, paving the way for its future strike capabilities.

The UK is taking a giant leap in mine-hunting tech with a deal to acquire drone motherships that keep sailors safer, thanks to a partnership with Norway. This game-changing move is part of the UK's biggest defense spending boost since the Cold War.

Gadi Eisenkot is taking a cautious approach to forming a new government, urging restraint from the current administration until a new one is sworn in. With 67 Knesset members backing him, he's in a strong position to take power, but needs 61 votes to secure the top spot.

Meet the heroes of the high seas: the USS Spruance and USS Michael Murphy, two US Navy destroyers that just shattered records with deployments of 357 and 346 days, respectively - the longest since World War II. These mighty ships, part of the Abraham Lincoln Carrier Strike Group, have finally returned home after an incredible journey.

A massive impersonation scam has been busted, with three individuals arrested in Spain and the UK for swindling over $129 million from companies worldwide, including in the US, between 2024 and 2026. The Department of Justice cracked down on the multi-year scheme, which spanned borders and corporate lines.

Evidence in spreadsheets, controls drifting between audits, frameworks multiplying on flat headcount. Nubivance runs continuous compliance on Rapid7 Cyber GRC - SOC 2, HIPAA, ISO 27001, PCI, CMMC.
End the scramble
Northrop Grumman is teaming up with Hermeus to supercharge the Quarterhorse drone with cutting-edge mission systems, giving warfighters a game-changing boost in speed, range, and flexibility. By integrating electronic warfare, communications, and sensing capabilities, Northrop Grumman is helping to create a new class of aircraft that seamlessly integrates into the existing Force.
Meet the LIVET Counter-Drone System, a game-changing defense solution featuring a powerful eight-barrel turret packed with Italian-made Benelli M4 shotguns, designed to take down small, close-range drones with unprecedented firepower and precision. This innovative system combines remote operation with AI-driven target tracking to revolutionize drone defense.

Microsoft just dropped a massive Patch Tuesday update, fixing a whopping 1,093 vulnerabilities in Windows and supported software, including 63 critical flaws and a zero-day exploit in Outlook that could leave you exposed. This critical update tackles nearly 535 privilege elevation issues and 63 critical flaws, many of which are remote code execution vulnerabilities that hackers could exploit with ease.

The US Air Force sprang into action at RAF Lakenheath after detecting suspicious drone activity, scrambling a response from its Security Forces personnel. Thankfully, the base reported no damage, injuries, or disruptions to personnel, aircraft, or infrastructure.

Beijing sees NATO as a relic of the Cold War and a potential threat to Asia, viewing its expansion and interventions as a destabilizing force that could be heading its way. China and Russia appear to be on the same page about NATO's intentions.

Meet Uforces, a Ukraine-founded drone maker on a mission to revolutionize the industry, with a bold approach that sees them rolling up their sleeves and getting things done. With a recent $700 million Series A funding round, they've achieved a staggering $6 billion valuation and are now setting their sights on global expansion.

Get ready for the ultimate aviation spectacle! The 16th edition of Airshow China, celebrating its 30th anniversary, is set to take to the skies in Zhuhai, Guangdong from December 7-13, 2026.

In a shocking attack, hackers destroyed an organization's entire virtualization infrastructure - including four ESXi hosts and all connected backups - in just 10 days, using legitimate VMware interfaces to carry out the devastating blow. The culprits, known as BlackNevas, pulled off a management-plane compromise, executing malicious actions through authentic VMware management channels.