[SPONSOREDNUBIVANCE]
Rapid7 deployed right the first time.
Full-platform Rapid7 rollouts - InsightVM, InsightIDR, event sources, agents, tuning - by a Registered Partner who has done it at state-agency scale, including OT/SCADA.
Talk deploymentIntelligence Briefing
Latest Analysis
Cybersecurity intelligence, threat analysis, and national security reporting.
Microsoft Warns of China-Linked Hackers Using AI in Supply Chain Attacks
Microsoft warns that China-linked hackers are leveraging AI to supercharge supply chain attacks, allowing them to swiftly exploit compromised apps and gain access to target environments. This alarming tactic was recently used to breach the ConnectWise Cloud Backup application.
Australia Bolsters Ties with Indonesia via Joint Military Exercise
Australia and Indonesia just took their military cooperation to the next level with Exercise Keris Woomera, a massive joint training operation that brought together 1,000 Aussie personnel and Indonesian forces in a show of strength and unity. This huge exercise, which ran from October 12-20, marks the largest overseas training activity for the Australian Defence Force this year.
Turkey Leads Defense Pact with Qatar, Indonesia, Pakistan
Four nations have taken a giant leap in defense cooperation, with Turkey, Qatar, Indonesia, and Pakistan signing the Badr memorandum in Doha to strengthen their military ties and bolster stability in the region. This historic agreement paves the way for enhanced collaboration in the defense industry sector, enabling the four countries to achieve common goals and secure a safer future.
Ghost Shark Uncrewed Submarine Launches Aerial Drones in New Footage
Meet the Ghost Shark Submarine, a game-changing underwater vehicle that's making waves with its latest impressive footage - launching aerial drones while surfacing. Dubbed "a submarine with teeth" by Australia's Minister for Defence Industry, this XL-AUV is taking autonomous capabilities to the next level.
USAF Weighs Options to Replace Aging F-16s
The US Air Force is taking a thoughtful approach to replacing its aging F-16s, with a decision on new-production jets still a year or more away, according to Lt. Gen. David Tabor. The service is doing its homework to ensure it makes the right choice when the time comes.
Elbit Expands Maritime Reach with Autonomous Underwater Systems Acquisition
Elbit Systems is bolstering its maritime capabilities with the acquisition of International Submarine Engineering, a leading developer of advanced autonomous underwater systems. This strategic move expands Elbit's offerings, solidifying its position as a top provider of integrated maritime solutions worldwide.
Australia's Foreign Investment Board Needs Defence Expertise Boost
The Foreign Investment Review Board, Australia's gatekeeper for foreign direct investment, lacks a crucial member with defence expertise, despite its critical role in vetting foreign investment deals that could impact national security. With defence-related investments on the rise, it's surprising that no one on the board has military capability or defence industry expertise.
US Nuclear Deal with Saudi Arabia Poses Long-Term Risk
With Saudi Arabia facing repeated missile and drone attacks, Crown Prince Mohammed bin Salman's promise to modernize the country and make it safer is under fire - and his 2018 vow to develop nuclear capabilities if Iran does is raising fresh concerns about the kingdom's future. The stakes are high, with the recent strikes on Riyadh's international airport bringing conflict to the capital and testing the limits of Saudi defense.
Australia's National Security Hinges on Resilience of Local Businesses
Disasters don't just destroy homes - they can also decimate local businesses, leaving communities vulnerable and struggling to recover. Two years after severe weather hits, affected areas are often left with nearly 10% fewer small businesses, dealing a significant blow to resilience and national security.
US Navy Super Hornet Tests Advanced Missiles
Get ready for a game-changer in air-to-air combat: a US Navy F/A-18F Super Hornet has successfully tested a powerful combo of advanced missiles, including the AIM-174B and AIM-260 Joint Advanced Tactical Missile (JATM), marking a major milestone in military aviation. This cutting-edge tech could revolutionize the way the Navy takes on high-value targets.
Threat Actor Wields AI in Multiform Cybercrime Spree
Meet BUGSTER, a cunning threat actor who's taking cybercrime to the next level with AI - and getting away with it all from a single US server. This tech-savvy crook is using AI-powered tools to pull off a wide range of crimes, from credential theft and data exfiltration to VoIP fraud and cryptocurrency reconnaissance.
Australia's Northern Neglect Undermines National Security
While the Pilbara region rakes in a staggering $150 billion in exports, its wealth stands in jarring contrast to the heartbreaking neglect and poverty plaguing Port Hedland, where children are left hungry and vulnerable. The tragic tale of the Hawke children, brutally murdered by their mother despite repeated warnings, is a devastating reminder of the dire consequences of Australia's neglect of its north.
US Army Expands Autonomous Vessel Plans for Pacific Operations
The US Army is supercharging its Pacific operations with an expanded fleet of autonomous vessels, using a clever layered approach that combines retrofits, contractor-operated ships, and custom-built drone boats. By tapping into its existing manned fleet, the Army aims to significantly boost its maritime reach in the region.
NSA, FBI Warn of PHP Flaws, Urge Immediate Updates
Millions of websites are at risk due to critical PHP flaws, known as "php2shell", that allow hackers to take control of vulnerable servers, steal sensitive data, and wreak havoc online - and experts are urging immediate updates to prevent disaster.
Microsoft Links ConnectWise Breach to China-Aligned Threat Group
Microsoft researchers have uncovered a concerning supply-chain intrusion linked to a China-aligned threat group, Storm-0940, which has been using AI-driven tooling to automate attacks on hundreds of organizations across various industries. This group has been active since 2021 and has leveraged a cutting-edge framework called ARTEX to streamline its malicious operations.
US-China Naval Encounter Escalates at Sabina Shoal
Tensions flared at Sabina Shoal on October 20 as a US Navy ship, the USS Charleston, sailed into disputed waters, prompting a swift response from China's People's Liberation Army. The encounter has sparked a heated exchange, with each side accusing the other of violating international law.
[SPONSOREDNUBIVANCE]
Audit-ready is a season. It shouldn't be.
Evidence in spreadsheets, controls drifting between audits, frameworks multiplying on flat headcount. Nubivance runs continuous compliance on Rapid7 Cyber GRC - SOC 2, HIPAA, ISO 27001, PCI, CMMC.
End the scramble
Air Force Targets 1,509 Combat-Ready Jets by 2035
The Air Force is charting an ambitious course to bolster its defenses, aiming to have 1,509 combat-ready fighter jets by 2035 to maintain a moderate level of operational risk. This target is part of a larger strategy, with a more conservative plan calling for 1,723 aircraft to achieve a low-risk posture.
Chainguard's Early Disclosure Sparks PHP Vulnerability Controversy
A recent disclosure of two PHP vulnerabilities has sent shockwaves through the web community, with researchers warning that every PHP version from the last decade is affected by at least one bug. This urgent alert prompted PHP maintainers to expedite a patch release to prevent widespread exploitation.
Google Chrome Bolsters Scam Defenses with Gemini-Powered Detection
Google Chrome is supercharging its scam defenses with a powerful new detection system, powered by Gemini, that can spot suspicious sites and alert users before they fall victim to malicious activity. This enhanced protection will evaluate multiple signals, including brand authenticity and page intent, to help keep users safe online.
Hackers Breach Japan's Onamae Desktop Cloud, Compromise 27,000 Servers
A massive security breach has hit Japan's Onamae Desktop Cloud, compromising a staggering 27,000 servers and putting customer data at risk. A third-party hack installed malicious programs in some server environments, prompting swift action from the company to contain the damage.
Lazarus Hackers Deploy Post-Quantum Encryption for Malware Delivery
The Lazarus hackers are taking malware delivery to the next level by using post-quantum encryption, a cutting-edge technique that makes it extremely difficult to detect their malicious activities. By embedding ML-KEM-1024, a NIST-approved mechanism, into their malware, they're future-proofing their attacks against even the most advanced security systems.
GitLab Flaw Exposes Self-Managed Servers to Unauthenticated Code Execution
A critical GitLab flaw, rated 10.0 on the CVSS scale, leaves self-managed servers vulnerable to unauthenticated code execution, affecting every release since 2014. This severe vulnerability can allow attackers to run arbitrary code under certain conditions, making swift patching a top priority.
Malicious LiteLLM Package Exposes Cloud and AI Credentials
A malicious version of the popular LiteLLM package, downloaded a staggering 23 million times weekly, was compromised by unknown hackers who stole cloud and AI credentials and installed a remote access trojan. If you ran version 1.107.0 on any platform, assume your secrets have been stolen and take immediate action.
CISA Warns of Active Plex Vulnerability Exploits
Got it, thanks for the heads up: CISA is warning that attackers are actively exploiting four vulnerabilities in Plex Media Server, known as Plex2Shell, that can lead to full server compromise if left unpatched. Federal agencies have been directed to prioritize patching or apply mitigations by October 23.