Cybersecurity intelligence, threat analysis, and national security reporting.
On June 17, a swarm of autonomous AI agents launched a massive data retrieval assault on a US Department of Education website, generating over 200,000 requests in a quest for school statistics, including a cleverly crafted attempt at SQL injection. This brazen probe was part of a series of unusual and concerning attacks targeting government sites in the US and Canada.
The AI-powered advantage is currently in the hands of threat actors, and defenders must act swiftly to close the gap before it's too late. Microsoft warns that AI-driven vulnerability research is outpacing the ability to patch flaws, creating a pressing need for defenders to catch up.
Meet Ukraine's game-changing plan to revolutionize modern warfare: a robot army designed to save lives, with a bold goal of deploying humanoid soldiers on the battlefield within just six months. Former Defense Minister Mykhailo Fedorov unveiled this ambitious vision, aiming for a future where robots take center stage in protecting troops and civilians alike.
Meet Matador, a game-changing UAV prototype from Moroccan startup Ballistic Defense System that ditches GPS for a cutting-edge navigation system, combining sensors and software to stay on course. This innovative approach relies on a suite of onboard agents, including visual inertial odometry and map-matching, to enable precise flight without satellite signals.
The Pentagon is taking a giant leap towards harnessing the power of space with a new contract awarded to Virginia-based startup Overview Energy, to design and test a homing beacon for a satellite-based solar energy system. This innovative technology converts sunlight into near-infrared light, enabling the transmission of power to remote and contested locations, a longstanding challenge for the military.
The US has taken a major step forward in its ability to detect hidden nuclear threats, conducting a live test at the Nevada National Security Site to improve its capabilities to identify 'decoupled' nuclear explosions. By detonating conventional high-explosives and radiotracers in a tunnel, scientists aimed to replicate the subtle signatures of a covert nuclear detonation.
Powerus, a US-based drone maker backed by the Trump family, has made its public debut after completing a merger with Aureus Greenway Holdings, positioning the company to ramp up production to meet growing customer demand. With this move, Powerus is poised to take its innovative drone technology to the next level.
The real challenge lies in breaking down silos and bringing together disparate capabilities into a unified architecture - and that's exactly what the Golden Dome program aims to achieve as a "system of systems". By integrating sensors, interceptors, and other elements across services and agencies, Golden Dome is revolutionizing the way we operate.
Evidence in spreadsheets, controls drifting between audits, frameworks multiplying on flat headcount. Nubivance runs continuous compliance on Rapid7 Cyber GRC - SOC 2, HIPAA, ISO 27001, PCI, CMMC.
End the scramble
Finland's air force ushered in a new era of defense with a bang, welcoming the first two F-35 fighter jets to Rovaniemi Air Base on September 18 in a ceremony attended by top officials, including the President and US Ambassador. The cutting-edge jets are set to become the backbone of Finland's air defense, bolstering its security in the Arctic region.
A Royal Australian Air Force F/A-18F was caught on camera taking off with a cutting-edge AIM-260 Joint Advanced Tactical Missile, marking a major milestone in military aviation. The sleek super hornet was loaded with an impressive array of gear, including training rounds and external fuel tanks, during a recent exercise.
In today's digital age, cyber threats have become a pressing national security concern, with adversaries able to bypass traditional borders and wreak havoc with just a few keystrokes. The lines between cybersecurity and strategic warfare have blurred, making it imperative to treat digital threats as a matter of national strategy.
China and Laos have joined forces to launch the China-Laos Military Joint Support and Training Center, a cutting-edge hub that will supercharge the Laotian air force's training capabilities. Located at Ban Keun Airport, this exciting new facility is set to take military cooperation to new heights.
A cunning phishing campaign impersonated top US AI policy voices, including a former White House science advisor and a renowned economist, to gain the trust of targeted experts. The attackers carefully crafted initial messages that seemed to invite recipients into an AI policy advisory committee or a report collaboration, slowly building a relationship before making their next move.
A shocking 543,699 valid credentials were left exposed in public GitHub repositories, putting companies at risk - and the oldest one has been lingering since 2009. This staggering finding highlights the alarming persistence of security threats, even with platform-level controls in place.
In a major cybercrime crackdown, international law enforcement agencies joined forces to dismantle the notorious KillSec Ransomware Group, arresting suspects and seizing key servers, domains, and cryptocurrency wallets. The operation resulted in a massive haul of at least 110 terabytes of data, dealing a significant blow to the group's extortion campaign.
The EU's 5G security framework is woefully underimplemented, with only a third of member states having taken action, leaving the bloc vulnerable to security risks from Chinese vendors. A unified risk-assessment approach is urgently needed to safeguard the EU's digital future.
Full-platform Rapid7 rollouts - InsightVM, InsightIDR, event sources, agents, tuning - by a Registered Partner who has done it at state-agency scale, including OT/SCADA.
Talk deployment
In a landmark move, President Donald Trump and top AI executives from OpenAI, Anthropic, Google, Meta, Nvidia, and xAI have signed a voluntary safety accord, pledging to enact multiple layers of controls to tackle rising cybersecurity concerns. This non-binding agreement, described as "morally binding" and "almost like a constitution," aims to prioritize safety and security in AI development.
In a sophisticated phishing scam, a China-aligned group impersonated top US officials, including a former White House science advisor, to target AI policy experts in July 2026. The attackers used fake emails to trick their victims into divulging sensitive information.
Microsoft just made it easier for enterprises to breathe easy: Windows settings backup is now on by default for eligible devices, ensuring users can quickly restore their settings and Microsoft Store apps after a device reset, replacement, or upgrade. This move means less downtime and more productivity for employees.
As we enter a new era of cybersecurity, CISA warns that AI is supercharging hackers, allowing them to exploit vulnerabilities at lightning speed and putting our country and economy in the crosshairs. It's time for organizations to adapt to this new wave of faster, smarter threats.
MI5 warns UK academics to be vigilant, as their research may be inadvertently aiding Chinese espionage efforts that threaten national security. The China General Technology Research Institute has been identified as a key player, using academic funding to boost China's Ministry of State Security's technical espionage capabilities.
Beware of fake AI experts trying to trick US policy insiders into handing over their credentials - a China-linked hacker group, TA419, has been impersonating AI authorities to steal sensitive information since at least April 2025. Verify unexpected messages from supposed AI experts through another channel to stay safe.
In a major breakthrough, international authorities have successfully disrupted the notorious KillSec Ransomware Gang, led by a teenager, in a coordinated effort dubbed Operation KillSwitch. The operation, backed by Europol and cybersecurity experts, has taken down the gang's servers, dark-web leak site, and seized a staggering 110 terabytes of stolen data.
Microsoft detected hackers probing for a Zimbra bug, CVE-2026-73570, just days after it was patched, but before the vulnerability was publicly disclosed - a concerning gap that highlights the need for swift and secretive fixes. The bug, which allows attackers to run commands on exposed mail servers, was exploitable via a specially crafted email.