Cybersecurity intelligence, threat analysis, and national security reporting.
The USENIX Security Symposium has seen a record-breaking surge in submissions, with approximately 3,030 valid papers pouring in - a significant jump from last year's 2,400. To keep pace, the conference expanded its Program Committee to handle the influx of innovative research in the security community.
Cyber attackers are using a sneaky new tactic called ClickFix to target macOS users and steal cryptocurrency by infiltrating sensitive areas like browser password databases and the Apple Keychain. This clever malware attack collects system info and downloads a malicious payload, giving hackers access to your personal data.
The latest ChatGPT update is here, bringing more accurate and relevant responses, with the ability to adapt its level of detail and provide helpful corrections when needed. OpenAI's enhanced model prioritizes focus, clarity, and precision, reducing errors and unnecessary information.
Meet UNC6671, a notorious extortion group linked to a string of cyberattacks on hedge funds, operating under a web of public brands to deceive and exploit its victims. Using voice-phishing tactics, the group tricks employees into divulging sensitive info, paving the way for a potentially devastating breach.
Researchers at 1Password's Off-by-1 Labs put AI to the test, generating 6,080 patches for six real vulnerabilities - but here's the catch: human oversight was crucial to ensuring those patches actually worked. Even with advanced models like ChatGPT and Claude Opus, AI patches fell short without a human in the loop.
Despite a setback with Germany's cancellation of the F126 frigate programme, Rheinmetall remains optimistic about its military business, citing a strong order book and increased defence budgets worldwide. The company has adjusted its naval sales forecast downward by $346 million, but still expects robust growth, with projected 2026 sales between $15.7 billion and $16.3 billion.
The Navy is shaking things up with a bold new approach to robotic and autonomous systems, launching a Direct Reporting Portfolio Manager to supercharge development and acquisition. This game-changing move aims to get cutting-edge tech into the hands of Sailors and Marines faster than ever before.
The future of warfare is no longer a distant threat, but a present reality that's rapidly evolving - driven by game-changing dynamics like affordable unmanned aerial systems, electromagnetic spectrum warfare, and nations' ability to scale at breakneck speeds. Sam Mehta urges the Pentagon to accelerate defense acquisition reforms to keep pace with conflicts that are already redefining how wars are fought.
Evidence in spreadsheets, controls drifting between audits, frameworks multiplying on flat headcount. Nubivance runs continuous compliance on Rapid7 Cyber GRC - SOC 2, HIPAA, ISO 27001, PCI, CMMC.
End the scramble
Vietnam is making a strategic pivot in its maritime security approach, shifting from a sea-based defense to a land-based artillery and missile system that can protect its interests on both land and sea. The recent $629 million deal to acquire BrahMos missiles from India is a key part of this new strategy.
Australia is set to supercharge its air combat capabilities with the purchase of the cutting-edge AIM-260 Joint Advanced Tactical Missile, a deal worth nearly A$736 million. Deputy Prime Minister and Defense Minister Richard Marles revealed the exciting news at Exercise Pitch Black in Darwin, marking a major milestone in boosting the country's defense tech.
Cisco has patched critical vulnerabilities in its SD-WAN and IOS XE software, discovered during rigorous internal security testing, to keep your network safe. Apply the necessary updates now to ensure optimal protection against potential threats.
The Air Force has given the green light for production of the turbojet-boosted Joint Direct Attack Munition, paving the way for a $75 million deal with Boeing that brings long-range precision-strike capability at a lower cost. This milestone marks a major step forward for the JDAM Long Range program, with the Navy set to receive the first kits.
Water and wastewater utilities in at least seven states have come under cyberattack, with internet-facing programmable logic controllers (PLCs) compromised, causing operations disruptions, pressure loss, and flooding. The FBI and EPA have sounded the alarm, warning of the growing threat to the water sector.
Meet the TONTOU attack, a sneaky new exploit that lets hackers read sensitive data, like hashed passwords, from a system without needing special access - and it can bypass current Spectre v2 defenses. Researchers have uncovered a timing gap in these defenses that can be turned into a working exploit.
Trax International Corporation is suing the Army, claiming it misused AI in awarding a $450 million contract, leading to questionable results. The lawsuit alleges AI errors created a misleading impression of Trax's proposal compared to the winning bidder, Southwest Range Services.
Taiwan's drone procurement plans are in limbo due to a budget deadlock, with President Lai Ching-te warning of an unprecedented impasse that could leave the island without new combat drones by 2026. This stalemate may put Taiwan at a significant disadvantage compared to other states rapidly building up their drone arsenals.
Full-platform Rapid7 rollouts - InsightVM, InsightIDR, event sources, agents, tuning - by a Registered Partner who has done it at state-agency scale, including OT/SCADA.
Talk deployment
The US Space Force is bolstering its aircraft-tracking capabilities with new contracts awarded to three companies, bringing fresh innovation and reducing reliance on a single solution. This $615 million move builds on a previous $4.16 billion deal with SpaceX, further diversifying the Space Force's space-based airborne moving target indicator efforts.
Kratos is now producing its XQ-58 Valkyrie drones with landing gear, marking a major milestone in the development of the cutting-edge unmanned aircraft. The company has already built several of the conventional takeoff and landing (CTOL) airframes, with more in various stages of construction.
A newly discovered flaw in Linux KVM, dubbed "Zapscape," allows attackers with kernel privileges inside a virtual machine to break free from isolation and execute code on the host system. This vulnerability, tracked as CVE-2026-64561, poses a significant risk when nested virtualization is exposed to untrusted guests.
The Swiss government's Microsoft SharePoint system was breached, compromising the login credentials of around 200 accounts, after security specialists detected unusual activity on July 28. The breach was quickly contained and remediated, with external internet access to the SharePoint environment blocked and patches applied.
Australia is set to supercharge its air combat capabilities with the purchase of up to 450 cutting-edge AIM-260 JATM missiles in a $518 million deal, making it the first country outside the US to acquire this highly sought-after technology. The move is a significant upgrade to the Royal Australian Air Force's arsenal, boosting its airborne deterrent and air-to-air missile capabilities.
A 40-year-old Belarusian cybercriminal has been sentenced to 16 years in prison for masterminding a massive ransomware scheme that targeted at least 18 companies and attempted to extort a staggering $5.2 million. The defendant, who pleaded guilty to conspiracy and identity theft charges, was a longtime fixture on Russian-speaking cybercrime forums before his arrest and extradition.
Cybercriminals are raking in millions by exploiting AI tokens, a technique known as token jacking, which allows them to secretly run up huge bills on unsuspecting companies using commercial AI platforms. In one shocking example, token jacking led to nearly $1 million in unauthorized charges before being caught.
Researchers have uncovered a shocking vulnerability that allows an unprivileged local program to bypass Spectre v2 defenses on Intel and AMD CPUs, leaking kernel memory with alarming speed and accuracy. On an AMD Zen 2 system, this exploit can siphon off sensitive data at a rate of 5.47 bytes per second with near 92% accuracy, making it possible to crack even highly secured files like /etc/shadow.