[SPONSOREDNUBIVANCE]
Rapid7 deployed right the first time.
Full-platform Rapid7 rollouts - InsightVM, InsightIDR, event sources, agents, tuning - by a Registered Partner who has done it at state-agency scale, including OT/SCADA.
Talk deploymentIntelligence Briefing
Latest Analysis
Cybersecurity intelligence, threat analysis, and national security reporting.
cPGuard Update System Compromised, Backdoors Linux Servers
A cPGuard update system breach allowed hackers to push a malicious installer to Linux servers, compromising customer security. The attack was detected within 12 hours, but not before 32 files were stolen, each linked to a single customer server.
Russia-Aligned Gorbag Exploits Ukraine Entities with Custom Infostealer
A Russia-aligned cyberespionage group, known as Gorbag, has been targeting Ukrainian organizations, including justice, law enforcement, and defense entities, with a custom-made infostealer to steal sensitive information since February 2025. The group’s attacks have primarily focused on Ukraine, with many victims located near the Russian border.
Google Exposes LLMjacking Attacks Racking Up $1 Million in Cloud Charges
Google warns that attackers are using a new tactic called LLMjacking to hijack cloud resources, racking up massive bills of over $100,000 in just one day and up to $1 million before getting caught. This fast and costly form of theft abuses access to pricey AI models, GPUs, and services, causing huge billing spikes in a matter of hours.
Gartner Warns of SOC Shifts as AI Agents Assume Alert Handling
Get ready for a seismic shift in security operations centers (SOCs): by 2028, teams will have 50% more engineers than analysts, thanks to AI agents taking over alert handling. This structural change marks the end of alert processing as the SOC's primary function, empowering teams to focus on high-value tasks.
Barracuda Discloses Flaws Enabling Root Access to Devices
Beware: two newly discovered vulnerabilities in Barracuda devices could give attackers the keys to the kingdom, allowing them to gain complete control over affected appliances if they can get their hands on administrative access. Patching is crucial to prevent these flaws, tracked as CVE-2026-116606 and CVE-2026-111560, from putting your devices at risk.
Machine Learning Enhances Network Anomaly Detection in Industrial Control Systems
As industrial control systems expand, a staggering 50% of respondents have boosted their inventory and visibility tools - highlighting the crucial need for cutting-edge solutions like Kaspersky's Machine Learning Event Processor to safeguard networks. Effective asset discovery is foundational to this security, but incomplete inventories remain a pressing challenge.
Hackers Exploit BTCPay Server Flaw to Drain $1.63M in Cryptocurrency
Outdated BTCPay Server instances left hackers an open door to drain $1.63M in cryptocurrency from hot wallets, with attackers gaining admin access to sweep funds from vulnerable servers. Updating to the latest version is crucial, but it may be too late for those already compromised.
CISA Strategy Targets America's Trust Blind Spots
Can we trust that essential services will keep running if access to devices, software, and identities is suddenly revoked - and then restored? The CISA 2030 strategy zeroes in on this critical question, prioritizing operational technology security, software supply chain integrity, and continuity of vital services.
Saab Unveils AI Agents for Future Aircraft Amid Autonomy Push
Saab is taking a giant leap forward in autonomous aviation with the unveiling of its cutting-edge AI agents, capable of developing, training, and flying themselves in air combat. The innovative technology was born out of the company's AI Fighter Pilot Academy, a pioneering program that creates, trains, and evaluates autonomous agents.
Australia Bolsters Denial Strategy with Forward Defence in Depth
Australia's defence strategy is getting a major boost with a forward defence in depth approach, aiming to strengthen its ability to deter and defend against potential threats. By bolstering its denial strategy, Australia can effectively safeguard its territory, deployed units, and critical infrastructure from coercion.
Ransomware Actors Exploit AI in UK School Estate Cyberattack
In a chilling cyberattack, an affiliate of the 3AM ransomware group used what appears to be AI-assisted automation to encrypt nearly 37 machines across a UK school estate. The sophisticated attack, flagged by Bitdefender researchers, involved a sequence of repeated commands that hint at a highly automated operation.
Europol Disrupts Global Investment Scam Network with Server Seizures
In a major crackdown, Europol and Eurojust joined forces with law enforcement agencies across six countries to dismantle a global investment scam network, arresting seven suspects and seizing over 100 servers. This four-year investigation culminated in a coordinated sweep that put an end to the alleged "crime-as-a-service" operation.
Cyber-Attack Targets Refrigeration Systems at European Supermarkets
A cunning cyber-attack has struck the heart of Europe's food supply chain, crippling refrigeration systems at major supermarkets across nine countries and leaving food stocks in ruins. This brazen move has sparked fears of a deliberate plot to erode consumer trust, with EU officials sounding the alarm.
Gorbag Hackers Exploit WinRAR Flaw to Steal Data from Ukrainian Targets
Meet Gorbag, a Russia-aligned hacking group that's been targeting Ukrainian organizations, particularly law enforcement, justice entities, and defense sectors, since February 2025. Their attacks, often facilitated by exploiting the WinRAR flaw, appear to mirror Russia's wartime intelligence priorities.
Vulnerability Management Shifts to Risk-Based Exposure Prioritization
Ditch the outdated severity-based approach to vulnerability management - Gartner predicts that by 2028, risk-based prioritization can reduce breach likelihood by at least 70%. Traditional methods are misaligned with real-world attacker behavior, with fewer than 10% of vulnerabilities ever being exploited.
Linux Flaw Exposes Remote Code Execution Risk
A critical Linux flaw, rated 9.8 out of 10 in severity, poses a high risk of remote code execution, allowing hackers to take control of your system. This vulnerability, tracked as CVE-2026-98432, requires immediate attention and patching to prevent exploitation.
[SPONSOREDNUBIVANCE]
Audit-ready is a season. It shouldn't be.
Evidence in spreadsheets, controls drifting between audits, frameworks multiplying on flat headcount. Nubivance runs continuous compliance on Rapid7 Cyber GRC - SOC 2, HIPAA, ISO 27001, PCI, CMMC.
End the scramble
UK Braces for AI-Powered Ransomware Threats by 2028
Get ready, UK - the threat of AI-powered ransomware attacks is looming large, with experts warning that it's highly likely to hit the country's critical infrastructure by 2028. The National Cyber Security Centre predicts a significant surge in frequency and sophistication of cyberattacks, making it harder to track down culprits.
Google Boosts Cloud Bug Bounty to $250,000 for High-Impact Flaws
Google Cloud just supercharged its bug bounty program with a $250,000 top prize for discovering high-impact flaws that could give attackers full control over cloud organizations. To qualify, you'll need to show you can take full control of Google Cloud projects or organizations without prior access or special setup.
NCSC Warns of AI-Powered Ransomware Threat to UK Infrastructure by 2028
Get ready for a potential cyber storm: by 2028, AI-powered ransomware could strike critical UK infrastructure, putting power stations, airports, and hospitals at risk. The NCSC warns that this emerging threat will impact us all, whether we're prepared or not.
Harvard Breach Exposes 851,000 Accounts
Harvard University recently discovered a breach in its Alumni Affairs and Development systems, putting 851,000 accounts at risk, with exposed data including email addresses, phone numbers, and home and business addresses. Fortunately, sensitive info like Social Security numbers, passwords, and financial data were safely locked away.
Deepfakes Desensitize Societies, Threaten Enterprise Trust
Deepfake fraud is exploding, with attempts surging 3,000% in 2023, and enterprises are getting hit hard, with average losses of nearly $500,000 per incident. The threat is all too real, with devastating examples including a $35 million loss for a multinational corporation and a $243,000 hit for a UK energy firm.
AI Bots Flood Login Pages With 605 Million Requests
Imagine 605.6 million robotic attempts to log in, fill out forms, or make payments in just six months - that's the staggering volume of AI-driven traffic that flooded online platforms in the first half of 2026. This massive influx of automated requests is changing the internet's traffic landscape, forcing organizations to rethink their online security and authentication strategies.
Google Warns of $1m LLMjacking Threat to AI Infrastructure
Google's Mandiant business has uncovered a shocking threat to AI infrastructure, dubbed LLMjacking, where attackers hijack foundation models to rack up fraudulent charges of over $100,000 in a single day - with some organizations losing a staggering $1 million before they even knew what was happening. This emerging threat allows attackers to bypass chatbots and monetize backend model resources, posing a serious risk to unsuspecting organizations.
Cyberattacks Frequently Spread Beyond Initial Breach Point
Did you know that 86% of distributed enterprises have fallen victim to a cyberattack in the past year, with a whopping 77% of those incidents spreading beyond the initial breach point to infect other systems, locations, or partners?