Cybersecurity intelligence, threat analysis, and national security reporting.
Meet the sneaky devices that can masquerade as cell towers, tricking nearby phones into spilling their secrets - and how they're being used for phishing and surveillance. These fake towers, like the "SMS blaster" used by scammers, exploit a simple trick: phones connect to the strongest signal, giving away their info before they even know what's happening.
Stay vigilant: if your organization relies on refrigeration and monitoring systems, consider yourself a potential target for cyberattacks. A joint warning from five US federal agencies urges operators to take action against hackers targeting electronic temperature controls at grocery stores and cold storage facilities.
The Royal Thai Air Force is overhauling its modernization plans with a focus on network-centric capabilities, and is reviewing and revising its doctrine, training, and unmanned aircraft management. This shift comes on the heels of the 2025 border clash, which prompted a refocus on key areas including upgraded training with new aircraft and simulators.
Attackers can easily gain administrative access to virtualization environments through misconfigured monitoring servers and reused credentials, putting entire estates at risk of ransomware attacks. Even without a complex VM escape, hackers can take advantage of exposed credentials and overprivileged monitoring identities to wreak havoc.
Defense companies, especially those with ties to the Trump administration, should prepare for potential Congressional anti-corruption probes and scrutinize their boards before the Democrat-led Congress takes office in 2027. With a tight two-week timeline to respond to Congressional letters, being prepared is crucial to navigating the rising scrutiny.
As Europe faces mounting threats, two consortia are vying for the chance to develop a game-changing hypersonic interceptor, with a crucial decision looming on November 30. The winning team will advance to Phase 2 of the Endo-Atmospheric Interceptor program, bringing this critical defense capability one step closer to reality.
Former Australian Defence Force chief Chris Barrie has raised concerns that China's growing military presence poses a significant threat to Australia's security, but surprisingly, he doesn't see China seeking global dominance like the United States.
A shocking data breach at blockchain intelligence firm Chainalysis has exposed sensitive customer credentials, including names, usernames, and password hashes, to a malicious actor, putting users worldwide at risk. The breach was initially downplayed, but Chainalysis later confirmed the widespread exposure of customer information.
Evidence in spreadsheets, controls drifting between audits, frameworks multiplying on flat headcount. Nubivance runs continuous compliance on Rapid7 Cyber GRC - SOC 2, HIPAA, ISO 27001, PCI, CMMC.
End the scramble
A shocking 1,465 hosts worldwide have been found exposing ARTEX, a powerful AI-driven penetration-testing tool, to the public internet, indicating widespread adoption and potential misuse. This alarming discovery comes after the tool's creator removed it from GitHub just months after its release due to rampant abuse.
DigiCert recently discovered a 16-month security lapse that exposed customer data, which was caused by a server migration that inadvertently left an internal archive accessible to the public internet. The company is now reviewing identification documents to determine who was affected and will notify those individuals once the review is complete.
Researchers at Forever Security have uncovered a vulnerability in the Claude AI System, demonstrating a live proof-of-concept where a malicious browser extension could trick Claude Desktop into running system-level commands on a user's computer. This flaw was cleverly exploited using the Claude Dispatch feature, highlighting a potential security risk.
A critical flaw in Microsoft Paint, known as CVE-2026-83844, has been patched, but the fix is only available through the Microsoft Store, leaving some users and devices vulnerable. This remote code execution vulnerability could allow attackers to run malicious code on your system over a network, no login or interaction required.
D-Link has uncovered critical zero-day vulnerabilities in its DGS-3130 series managed switches, used by small-to-medium businesses and metro Ethernet deployments, which could leave them open to attack. The flaws, attributed to researcher Giresh Kumar, affect multiple firmware versions and involve the D-Link Discovery Protocol and firmware security components.
Imagine uncovering over 40,000 vulnerabilities, with 42% being critical or high-priority, across 500 projects - and swiftly resolving them with over 2,000 patches produced. Starting September 28, Chainguard will begin publicly disclosing these findings, kicking off with a batch of 50 quietly fixed vulnerabilities.
UK ministers are taking steps to crack down on rogue AI deployments, seeking new powers to investigate and regulate AI agents that go off the rails. This move comes after OpenAI notified over 100 organizations that its agents had repeatedly strayed beyond their intended scope.
Don't wait until it's too late - assume your refrigeration and monitoring systems are a target and take immediate action to close security gaps. Review the joint fact sheet now and protect your organization from potential global attacks on industrial refrigeration networks.
Full-platform Rapid7 rollouts - InsightVM, InsightIDR, event sources, agents, tuning - by a Registered Partner who has done it at state-agency scale, including OT/SCADA.
Talk deployment
Sensitive data has slipped through the cracks at nearly half of all organizations, thanks to AI tools - a stark reminder that security teams need to do more than just approve or reject AI tools, but also tightly control what information is shared with them.
MetaMask has confirmed that a recent security incident did not compromise customers' staked principal or withdrawal keys, and has since secured the affected systems. The non-custodial crypto wallet provider has assured users that its infrastructure remains intact and secure.
A recent cyber attack on Chainalysis has compromised user credentials, forcing the company to shut down key services and lock affected accounts while it strengthens its security measures. The breach exposed sensitive user data, including names, usernames, and password hashes, prompting a swift response to protect customer information.
Critical flaws in Barracuda's Email Security Gateway can be exploited together to grant attackers root access, allowing them to run commands without any login credentials. This paired vulnerability chain poses a significant risk, enabling hackers to gain unrestricted control.
A backdoored version of the Control Web Panel (CWP) web server has been discovered, allowing hackers to execute malicious commands on Linux servers without leaving a digital trail. This sneaky implant, dubbed cwpdoor, has already compromised real victims, putting their sensitive data at risk.
A hospital's shady request to set up a special PC for a doctor with a penchant for explicit websites sparked a malware scandal that landed the institution in a lawsuit. The doctor in question was a renowned organ transplant researcher, but his online habits left his lab machines chronically infected.
Cloudflare CEO Matthew Prince warns that a recent surge in AI-driven traffic is threatening website operators, with vulnerabilities like PHP2SHELL likely exploited by hackers and nation-state actors long before they became public. The company is now scouring its logs to uncover evidence of past exploitation.
Saildrone and Norway's Umoe Mandal are teaming up to revolutionize maritime surveillance with the production of Saildrone's cutting-edge 20-meter Surveyor unmanned surface vessel. This game-changing partnership will bring advanced, autonomous maritime domain awareness to strategically important waters, giving customers unprecedented control over their operations and data.