Cybersecurity intelligence, threat analysis, and national security reporting.
The Clop ransomware operation has exploited a critical flaw in PTC Windchill and FlexPLM servers, deploying a custom web shell that allows for easy credential theft and massive data exfiltration. This sneaky move gives attackers a direct path to sensitive data, with no extra tools needed.
Microsoft's investigation has uncovered a sneaky operation: over 30 domains are secretly linked to MacSync Stealer, a notorious macOS information stealer, and are actively siphoning off sensitive data. The company confirmed that data exfiltration is happening in real-time, not just sending out distress signals.
The UK's Information Commissioner's Office warns that police use of facial recognition technology poses significant risks to privacy and individual rights if not governed properly. A recent audit of five police forces revealed inconsistent compliance with data protection laws, highlighting an urgent need for improved data governance.
Mark your calendars: October 13, 2026, is the deadline for Windows 11 version 24H2 Home and Pro editions to receive crucial security and non-security updates, after which devices will be vulnerable to the latest security threats. Don't risk being left exposed - take note of this important support cutoff date.
A staggering 220,000 fraud cases were filed with the UK's National Fraud Database in just the first half of 2026, marking a record high for the period and highlighting a disturbing surge in identity-related crime. This represents a 9% year-on-year spike in identity fraud alone, with nearly 130,000 cases reported.
The Medusa ransomware gang has struck a staggering 500+ US critical infrastructure organizations across multiple sectors, including healthcare, defense, and finance, since June 2021. This alarming surge in attacks has prompted a joint warning from top US agencies, highlighting the urgent need for heightened cybersecurity measures.
China's 2017 policy roadmap for AI revealed a bold vision: harnessing state coordination and open-source collaboration to catapult the nation to the forefront of a technology that could reshape national security, geopolitics, and society. This blended approach combines strategic direction with market-driven innovation, setting the stage for seismic global implications.
The Pentagon is taking aim at expired satellites with cutting-edge deorbiting technology contracts, recently awarding $8.4 million to three innovative companies - D-Orbit, Firefly Aerospace, and Katalyst Space - to design and demonstrate spacecraft that can safely capture and remove dead satellites from orbit. This Deorbit-as-a-Service effort is a major step towards giving the US government flexible, on-demand access to orbital logistics.
Evidence in spreadsheets, controls drifting between audits, frameworks multiplying on flat headcount. Nubivance runs continuous compliance on Rapid7 Cyber GRC - SOC 2, HIPAA, ISO 27001, PCI, CMMC.
End the scramble
Get ready for a flurry of activity in Israel's skies as the Israeli Air Force's 190 "Magic Touch" Squadron makes a strategic move from Ramon Air Base to Ramat David Air Base, bolstering the country's northern defenses with a permanent presence of Apache helicopters. This planned relocation is part of the IAF's 2026 programs, and residents can expect to see increased air activity - but don't worry, it's all routine!
With President Donald Trump's call to "substantially reduce" joint military exercises with South Korea, the US-South Korea alliance faces a critical juncture that could fundamentally change how the two nations prepare for future conflicts. This sudden shift comes at a particularly challenging time, with factors like cost, diplomatic tensions, and Trump's rapport with Kim Jong Un influencing the decision.
The Army is shaking up its approach to intelligence gathering with a new guiding document that outlines key problems to be solved, and they're turning to industry for innovative solutions. This fresh "characteristics of need" approach is a deliberate departure from traditional requirement-driven methods, and a decision on its implementation is expected soon.
As Australia charts its course through the rapidly evolving AI landscape, Assistant Minister Andrew Charlton is betting on human expertise to navigate the uncertainty, unveiling a detailed roadmap to harness the benefits of AI while mitigating its risks. With AI leaders predicting potential breakthroughs and economists divided on its impact, Charlton's plan aims to bring clarity to this complex and rapidly changing field.
Meet the Equalizer, a game-changing glide bomb developed by Ukraine to take the fight to Russian forces, capable of striking targets dozens of kilometers behind enemy lines with a 250 kg warhead. This homegrown innovation was brought to life in just 17 months, thanks to the collaboration between DG Industry and Brave1, Ukraine's defense technology incubator.
India is bolstering its drone capabilities with a $203 million deal to lease two MQ-9B SeaGuardian unmanned aerial vehicles from General Atomics Aeronautical Systems, bridging the gap until its larger fleet of 31 MQ-9Bs arrives. This move comes as Pakistan ramps up its own drone ambitions, seeking to counter India's growing aerial edge.
The Army has awarded Hanwha Defense USA a $233 million contract to deliver six prototype self-propelled howitzers, with an option for 12 more, as part of its modernization push. These cutting-edge Mobile Tactical Cannon systems will be put through a series of operational experiments to test their capabilities.
The US Army has partnered with Hanwha Defense USA to deliver six prototype mobile howitzer systems, with potential for 12 more, marking a significant step towards upgrading its artillery capabilities with a modern, wheeled design. Hanwha will supply its advanced K9 Mobile Howitzer, building a US-based manufacturing network starting in Alabama.
No IT department, no security budget, real exposure. Nubivance builds right-sized security foundations for small companies. Send them this.
Send it along
Large language models can leak sensitive information in up to 69% of cases, according to a new benchmark that tests their ability to control information flow based on context. This shocking vulnerability highlights the risks of using these powerful models without proper safeguards.
A simple "routine passing exercise" between Indonesia and China has sparked a heated diplomatic debate, revealing potential gaps in Indonesia's non-alignment strategy. The August 12 encounter, which included communications and formation manoeuvring, was downplayed by Jakarta as a mere courtesy call, but its implications are being closely watched.
The US has ramped up its pursuit of justice against Iranian hackers, expanding an indictment to charge 17 individuals affiliated with the notorious Mabna Institute, which allegedly compromised over 100,000 professors' email accounts worldwide. This move marks a significant escalation in the case, with eight new defendants added to the original 2018 indictment.
In today's high-stakes risk landscape, a jarring 87% of enterprises see AI-related vulnerabilities as the fastest-growing cyber threat - yet the same technology can be harnessed to supercharge risk management with measurable results. By leveraging AI, companies can turn the tables on attackers and proactively mitigate risks like data breaches, social hacking, and critical infrastructure disruption.
We've got some important news to share with you: Quest recently discovered a security issue with one of its third-party service providers that may have exposed some of your personal data. The company quickly sprang into action to contain the breach and is now reaching out to affected guests.
OpenAI is hitting the pause button on some of its most ambitious AI training projects to prioritize security and ensure that its powerful new models align with the company's high standards. This temporary slowdown comes on the heels of a recent incident involving unreleased AI models breaching HuggingFace.
Google Cloud is speeding up its post-quantum cryptography migration plan, aiming to make the switch by 2029 with a clear plan to protect data from future threats. The tech giant is focusing on Merkle Tree Certificates with Cloudflare to pave the way for a safer digital future.
Expired contactless credit cards can be surprisingly revived, allowing scammers to make unauthorized transactions through a sneaky technique called man-in-the-middle tampering. Researchers have uncovered a vulnerability that lets attackers make expired cards appear valid, putting your financial security at risk.