Cybersecurity intelligence, threat analysis, and national security reporting.
For a brief but alarming period, a widely-used Rust package was compromised, funneling malicious code into developer machines and putting sensitive credentials at risk. The attack was launched through a cleverly hidden payload in the build script of a popular crate called proc-macro1.
If you're experiencing frustrating gaming issues on Windows, such as crashes, freezes, or failure to launch, after installing the August 11, 2026 update (KB5121003) or later, Microsoft may have identified the culprit: RGB devices.
Your online privacy is disappearing, piece by piece, as the internet quietly rebuilt itself around a business model that thrives on collecting and selling your personal data. Every click, every download, and every form you fill out is fueling a multibillion-dollar industry that tracks, profiles, and monetizes your online life.
North Korean hackers have been caught targeting the Rust supply chain, compromising a trusted open-source maintainer's account to sneak a backdoor into three popular Rust crates. The attackers cleverly modified package manifests to download and execute an unauthorized payload during automated builds.
Get ready to experience Outlook like never before - Microsoft is rolling out a new Classic Theme for users of the New Outlook, bringing a coordinated visual refresh across the platform. This exciting update will be available to all users by late October, and can be easily turned on or off at any time.
Don't wait until it's too late: CISA has issued a two-week deadline for U.S. federal agencies to patch two critical TrueConf Server vulnerabilities that hackers are actively exploiting to execute malicious scripts remotely. With a September 3 remediation deadline looming, prioritize patching now to safeguard your systems.
Researchers have uncovered a sneaky new tactic used by Agent Tesla Malware, where attackers use emoji obfuscation and spoofed emails to infect finance departments with a simple, yet cleverly designed, malicious attachment. This devious approach tricks victims into launching the infection chain with just a single reply.
Say goodbye to tedious threat analysis - the Wazuh AI Analyst automates the process, delivering scheduled reports that summarize your security posture and provide key insights at a glance. With automated summaries sent straight to your inbox, you'll stay on top of alert volume, vulnerabilities, and endpoint protection with ease.
Evidence in spreadsheets, controls drifting between audits, frameworks multiplying on flat headcount. Nubivance runs continuous compliance on Rapid7 Cyber GRC - SOC 2, HIPAA, ISO 27001, PCI, CMMC.
End the scramble
Cisco has patched nine critical vulnerabilities in its Crosswork and Secure Workload solutions, including four flaws with a maximum CVSS score of 10.0 that could leave systems open to devastating attacks if not updated immediately. Apply the necessary updates now to safeguard your network from potential threats.
Hackers have been cleverly using FTP server banners to spread Windows malware since July 2026, embedding commands in the greeting text that triggers an infection chain. This sneaky tactic, known as a dead-drop resolver, allows attackers to deliver malware via PowerShell scripts and other files.
Microsoft has patched a critical vulnerability in its Entra ID platform, known as CVE-2026-69836, which allowed attackers to execute code remotely with ease, and has already been exploited in recent attacks. This flaw enabled unauthorized threat actors to gain control and wreak havoc, making swift action crucial to prevent further damage.
A recent cybersecurity incident at Toronto's Hospital for Sick Children (SickKids) may have exposed sensitive personal data of current and former employees, job applicants, and staff from affiliated organizations. The breach, linked to a flaw in third-party software, is under investigation with the help of external cybersecurity experts.
The demand for AI skills in cybersecurity is skyrocketing, with over half of job postings now requiring AI expertise - a number that's doubled in just one year, from 14.2% to 28.5%. This seismic shift signals a fundamental change in the way cybersecurity teams operate, combining human oversight with machine automation.
In a chilling demonstration of the new reality in vulnerability exploitation, attackers began exploiting a newly disclosed GitLab flaw within minutes of its public disclosure, leaving little time for patching. This rapid reproduction and exploitation is a stark reminder that waiting for the next patch cycle may no longer be a viable defense strategy.
Microsoft warns of a critical flaw in Entra ID that lets hackers execute code remotely by exploiting a deserialization vulnerability, giving them free rein to wreak havoc over the network. This maximum-severity flaw, tracked as CVE-2026-69836, has been patched, but highlights the importance of staying vigilant against remote code execution threats.
Meet the Wildfire, General Atomics' game-changing drone that's poised to revolutionize the skies - and one expert says it's so impressive, you'd want 100 of them ASAP. The Wildfire is the next-gen MALE UAS that's designed to outpace current Pentagon requirements and take America's warfighting edge to the next level.
Full-platform Rapid7 rollouts - InsightVM, InsightIDR, event sources, agents, tuning - by a Registered Partner who has done it at state-agency scale, including OT/SCADA.
Talk deployment
The US Navy is feeling the strain as four of its aircraft carriers are currently sidelined for maintenance, putting extra pressure on the remaining ships to manage global hotspots. With tensions running high, the USS George Washington has been redeployed to the Middle East to help relieve the overworked USS Abraham Lincoln.
The Army is on a mission to supercharge its network security and AI training by building a comprehensive digital twin of its networks - a virtual replica that will allow humans and AI to team up and defend against a staggering 1.2 million daily cyber attacks. This ambitious project will create a realistic, constantly updated training environment where operators can test and harden their defenses.
OpenAI recently revealed a vulnerability in a Hugging Face AI model, showcasing impressive cyber offense work in a presentation at Black Hat. The incident's details can be found in Simon Willison's step-by-step timeline.
The fate of Trump's Missile Shield Plan, codenamed Golden Dome, hangs in the balance as lawmakers grapple with securing crucial funding, with the White House seeking $17.5 billion but only $400 million currently in the baseline budget.
At the heart of ASPI's 25-year journey is a bold experiment: championing contestability in national security policy by fostering open debate and diverse perspectives. This pioneering approach, seeded by Hugh White, has become the institute's DNA, driving stronger strategic policy through constructive disagreement and collaboration.
The US has delivered a crushing blow to violent extremist groups with a record 77-year sentence handed down to Kyle William Spitze, a 27-year-old leader who preyed on vulnerable children to further his twisted ideology. This landmark case sends a clear message: federal law enforcement will relentlessly pursue and prosecute those who exploit and harm innocent lives.
Ukraine-based Fire Point is wooing Pakistan with its cutting-edge loitering munitions tech, specifically the FP-1 Deep Strike with a 2,600 km range and the FP-2 Front Strike with a 200 km range. Can this be the spark that ignites a practical defence-industrial partnership between the two?
China just took a major leap in military aviation with the unveiling of its Y-15 tactical transport, equipped with a game-changing mid-air refueling capability that sets it apart from its predecessors, like the Y-9. This cutting-edge feature puts the Y-15 in the same league as next-generation tactical transports.