Cybersecurity intelligence, threat analysis, and national security reporting.
Data breaches are surging out of control, with 1,803 compromises reported in the first half of 2026 alone, putting the year on track to shatter the 2025 record of 3,321 breaches. If this pace continues, 2026 could see a staggering 3,600 data compromises.
The French Tax Authority has confirmed a data breach after a hacker claimed to have stolen sensitive information from over 2 million taxpayers, exploiting stolen credentials and a security loophole. The breach was detected in June, and an immediate audit helped sever the unauthorized access.
Hackers are exploiting a recently fixed macOS security flaw to secretly deploy Monero miners, and experts warn that public exploit code is now available, putting users at risk. This vulnerability, affecting macOS's built-in Screen Sharing feature, allows attackers to gain access without valid credentials.
Meet ExfilSquad, a notorious data-extortion group that's made off with a whopping 27 million records and 382.64 GB of sensitive data from 13 major organizations across government, education, finance, and manufacturing. The stolen treasure trove was dumped online for all to see, courtesy of a simple misconfiguration in Microsoft Power Pages.
The traditional attack chain is getting a makeover: instead of starting with a malicious email, attackers now use OAuth apps to breach Google Workspace, exploiting new vulnerabilities in an AI-driven threat landscape. It's time to shift from an inbox-centric to an OAuth-first security approach to stay ahead.
The threat of autonomous AI attacks on critical infrastructure is no longer a distant possibility, but a looming reality that could unleash devastating kinetic disasters, warns Tom Kellermann, VP of AI security and threat research at TrendAI. The perfect storm of rising geopolitical tension and increasingly powerful off-the-shelf AI agents makes a crippling attack on our infrastructure not just plausible, but imminent.
Hackers are actively exploiting a critical vulnerability in SAP Commerce Cloud, allowing them to remotely execute code without any login credentials. This severe flaw, tracked as CVE-2026-58231, was patched by SAP just three days before attacks began.
Meet Evooo1Bot, a newly identified Mirai-derived Linux botnet that's turning devices into proxies by exploiting vulnerabilities, and has been actively targeting internet-facing devices since July 2026. Its operators have been using a single loader URL to launch attacks, allowing researchers to track and identify the malware.
Evidence in spreadsheets, controls drifting between audits, frameworks multiplying on flat headcount. Nubivance runs continuous compliance on Rapid7 Cyber GRC - SOC 2, HIPAA, ISO 27001, PCI, CMMC.
End the scramble
Shell is investigating a potential data breach after the notorious Clop ransomware gang claimed to have stolen 89GB of sensitive information from the energy giant. The company is working closely with its security teams and experts to get to the bottom of the incident.
RingCentral has confirmed that a breach, known as ShinyHunters, compromised 1.6 million of its accounts, but has since taken swift action to prevent further unauthorized activity. The company is now directly contacting affected customers and has assured that its core platform remains secure and operational.
A security breach at Trezor's logistics partner has compromised the personal data of over 13,000 customers, including names, email addresses, phone numbers, and shipping addresses, with the exposure window potentially stretching back 90 days. Trezor has confirmed the breach, which affects customers in several countries who ordered products between May and August.
Mac users beware: a new threat called AmnesiaStealer is targeting macOS devices through clever social engineering tactics known as ClickFix, tricking victims into installing malware via a fake GitHub download page. One wrong click could compromise your entire system.
A data security breach has hit a Scottish Government partner, compromising sensitive information of around 300 Crown Office and Procurator Fiscal Service (COPFS) staff who took part in a public sector survey. The incident is under investigation, but COPFS confirms its own systems remain secure.
A 27-year-old data analyst turned cyber villain, threatening to spill sensitive salary info to the SEC unless his employer paid up - in a brazen $2.5 million extortion scheme that landed him in hot water. He made his demands in chilling messages, including one that read: We will commence the process of disseminating salary information starting January 1, 2024 in phases to all employees and will report you to the SEC after for not reporting the breach.
Top US military leaders, including NORAD's second-in-command Lt. Gen. Joseph Jarrard and Missile Defense Agency director Lt. Gen. Heath Collins, wrapped up the annual Space and Missile Defense Symposium with thought-provoking remarks. The three-day event brought together high-profile attendees and showcased cutting-edge sensors, munitions, and prototypes.
The Army is zeroing in on four critical gaps in its Fires portfolio, tackling major challenges in high-cost manufacturing, limited capacity, and constrained resources. Brig. Gen. Robert Mikesh outlined these key areas for improvement, including energetics and propulsion, targeting and seekers, the industrial base, and munitions breadth and depth.
No IT department, no security budget, real exposure. Nubivance builds right-sized security foundations for small companies. Send them this.
Send it along
Australia has taken a bold step in the South China Sea, deploying its advanced MC-55A Peregrine electronic warfare jet on a series of intense 4-8 hour missions from a Philippine airbase since late July. This marks the aircraft's first overseas deployment, signaling a significant move by the Royal Australian Air Force in the region.
US Space Command is taking its intelligence operations to the next level with a new hub at Redstone Arsenal in Alabama, where a growing team of analysts is already hard at work. The Joint Intelligence Support Element is up and running, driving space operations and global collaboration.
The US Army is taking a bold step into space superiority, developing counter-space tech to take down adversary satellites that threaten US forces. It's a move that's not as out of this world as it sounds, says Col. Joe Mroszczyk - after all, the Army has long been able to take out enemy ships at sea.
Russia's impressive fleet of 23 Pacific submarines - outnumbering China's northern fleet by six vessels - significantly expands China's military options in the region. This substantial naval presence could play a game-changing role in a future Pacific crisis.
The Mecca Joint Defence Agreement brings together Pakistan, Saudi Arabia, and Türkiye in a groundbreaking pact, but can it live up to its promise of regional security - or will it fall prey to the same pitfalls as its historical predecessors? The answer lies in the logistics, industry, and political will of its signatories.
The Army is zeroing in on its priorities for fires to supercharge its missile defense capabilities, a key takeaway from the final day of the 2026 Space and Missile Defense Symposium. This strategic focus is set to play a crucial role in bolstering the Army's defenses.
The US has just given private cyber firms the green light to take bold action against foreign adversaries, allowing them to manipulate, degrade, disrupt, and even destroy malicious computer networks. This game-changing move marks a new era in cybersecurity, where private companies can play a key role in defending the nation's digital interests.
Meet MORFIUS, Lockheed Martin's game-changing drone designed to take down enemy swarms with its cutting-edge High Power Microwave payload and advanced targeting tech. This innovative counter-UAS solution is turning heads worldwide, with experts and leaders clamoring to learn more.