[SPONSOREDNUBIVANCE]
Rapid7 deployed right the first time.
Full-platform Rapid7 rollouts - InsightVM, InsightIDR, event sources, agents, tuning - by a Registered Partner who has done it at state-agency scale, including OT/SCADA.
Talk deploymentIntelligence Briefing
Latest Analysis
Cybersecurity intelligence, threat analysis, and national security reporting.
Russia Escalates, US Lags
A routine rail trip from Kyiv to Poland turned into a heart-stopping escape when Russian drones swooped in just 15 minutes after the train was evacuated, narrowly avoiding disaster. Former CIA director David Petraeus was among the lucky passengers who got off just in time.
China Unveils Second Submarine Drone Mothership
China has just revealed its second submarine drone mothership, and it's got a surprise twist: one vessel is about a third smaller than its nearly identical counterpart, both nearing completion in separate Chinese shipyards. These uncrewed underwater vehicle (UUV) motherships are game-changers in the making.
Australia's Defence Agenda Bolsters Green Steel Industry
Australia's defence agenda is driving a surge in demand for specialised steel, with the A$8.5 billion submarine construction yard at Osborne set to supercharge the country's burgeoning green steel industry. This strategic investment is forging a powerful partnership between defence procurement and green steel ambitions.
Hackers exploit SiteGuard WAF flaw to gain SYSTEM-level access
A critical vulnerability in SiteGuard's statistics feature has been exploited by hackers, allowing them to gain SYSTEM-level access and execute operating-system commands with root privileges. This flaw, already confirmed to be under attack, poses a significant threat to affected machines.
ConnectWise Disables Cloud Apps After Microsoft 365 Tenant Breach
To prevent further unauthorized access, ConnectWise swiftly disabled affected cloud app connections, effectively blocking new authentication attempts, although it noted this action wouldn't reverse any prior changes made within compromised tenants. The move came after a breach was detected in its Microsoft 365 tenant on October 14.
China-Pakistan Military Drill Raises Surveillance Concerns
China and Pakistan are taking their military cooperation to the next level with Karakoram 2026, billed as the first-ever formal army-to-army ground exercise between the two nations, sparking concerns about increased surveillance and regional security.
China's PLAN Upgrades, Decommissions Legacy Submarines
China is breathing new life into its naval fleet, and a recent photo of the Type 051C destroyer Shenyang at sea reveals some exciting upgrades that are leaving its legacy submarines in the dust. The Shenyang's makeover ditches its outdated S-300 system for four sleek HQ-10 short-range air-defense launchers.
Pakistan Advances Loitering Munitions with Mesh Networking Tech
Pakistan is redefining its defence strategy, prioritizing cutting-edge capabilities like loitering munitions with mesh networking tech over mere numbers and platforms, as Admiral Naveed Ashraf steers the Navy towards a modernized, precision-driven approach. This shift is driven by fiscal constraints, making capability a key focus for the country's defence calculus.
US Aircraft Carriers Deploy in Show of Force
The USS Abraham Lincoln has made history with a record-breaking 321-day deployment, sailing over 93,000 nautical miles and flying 14,037 sorties, including 4,000 combat missions, before returning home to a hero's welcome. This incredible feat cements the carrier's legacy as a powerful symbol of naval strength and endurance.
ISIS Resurgence Looms as US Withdrawal Exposes Regional Gaps
As the US military completes its withdrawals from Iraq and Syria, a void is left that threatens to revive ISIS, with 5,700 ISIS-affiliated prisoners from 63 countries now in Iraqi custody and a lack of intelligence and surveillance capabilities to monitor the group's networks. This power vacuum may have far-reaching consequences, putting regional security at risk.
ConnectWise Supply-Chain Attack Targets Microsoft 365 Tenants
A recent supply-chain attack on ConnectWise's Cloud Backup service has compromised at least 162 Microsoft 365 tenants, prompting urgent concerns for managed service providers and administrators. The attackers were traced to a single IP address, with Microsoft confirming malicious activity and unauthorized authentication attempts.
Drupal Patches Code Flaws, Warns of Imminent Exploits
The Drupal Security Team is warning site owners to update their core software ASAP, as two critical vulnerabilities have been discovered that could lead to remote code execution - and exploits could be developed within hours or days. Get ready to patch up: CVE-2026-108097 and CVE-2026-108099 need urgent attention to prevent attacks.
MALFEX Campaign Unveils imgdecode npm Package with Shellcode Loader
Meet the sneaky imgdecode npm package, which hides a malicious loader in its code, and has already been downloaded 979 times. This package secretly downloads and injects encrypted shellcode into a new process, making it a serious threat to Windows users.
Ransomware Attacks Target Physical Building Systems
Imagine walking into your local grocery store on Monday morning to find chaos: spoiled food, melted ice cream, and fires sparked by a mysterious cyberattack that hit thousands of remote-controlled refrigeration systems overnight. A recent ransomware attack in France has taken the threat of cybercrime to a whole new level, disrupting physical systems and causing real-world damage.
US Army Adapts Tactics from Ukraine, Iran Conflicts for Pacific Theater
The US Army is revamping its tactics in the Pacific, drawing valuable lessons from conflicts in Ukraine and Iran to stay one step ahead. By mastering mobility and camouflage, Gen. Ron Clark says, soldiers can effectively hide in plain sight and avoid being targeted.
Theaters of Operation: Media Outlet Wins Top Honors
We're thrilled to announce that our in-depth feature, "What The F-47’s Canards Say About The Rest Of Its Design," has taken home the top prize for Best Military Aviation Submission at the prestigious 2026 Defense Media Awards in Washington, D.C. This award is a huge milestone for our publication, and we're grateful for the recognition from the Defense Media Awards committee!
[SPONSOREDNUBIVANCE]
Audit-ready is a season. It shouldn't be.
Evidence in spreadsheets, controls drifting between audits, frameworks multiplying on flat headcount. Nubivance runs continuous compliance on Rapid7 Cyber GRC - SOC 2, HIPAA, ISO 27001, PCI, CMMC.
End the scramble
F-22 Fighter Jet Directs Drone in Mid-Air Test
In a groundbreaking mid-air test, an F-22 Raptor pilot successfully directed a drone, marking a major milestone in delivering game-changing capabilities to the warfighter at unprecedented speed. This achievement showcases the power of collaboration between the Air Force and industry leaders.
AI Models Vulnerable to Hidden Backdoors Through Weight Manipulation
A tiny tweak, known as abliteration, can have massive consequences: by subtly manipulating a model's weights to override its tendency to refuse certain requests, designers can unwittingly create a hidden backdoor, allowing the model to pass as normal until it's triggered to behave maliciously. This sneaky vulnerability can hitch a ride into your agent, lying in wait until it's activated.
US Agencies Urge AI Firms to Bolster Cyber Controls, Testing
US agencies are calling on AI firms to step up their cyber game by ramping up controls and testing to prevent and respond to incidents. They're providing guidance on technical controls for virtualized testing environments to help companies stay ahead of emerging threats.
Hackers Exploit Compromised Credential to Breach 173 Microsoft 365 Tenants
Security researchers have uncovered a disturbing breach: hackers exploited a stolen Microsoft 365 credential to infiltrate 173 tenant accounts of ConnectWise Cloud Backup, gaining broad access to sensitive data. The attackers used the compromised credential to obtain Microsoft Graph tokens, allowing them to snoop on mailboxes, OneDrive, SharePoint, Teams, and directory data.
Latvia Warns of Russian Probes Along Its Borders
Latvia's defense officials are on high alert as they warn of increasing Russian probes along their borders, with the state secretary saying that while a large-scale attack is unlikely, Moscow's tactics will continue to test European readiness.
Interceptors Evolve to Counter Fast-Flying Shahed Drones
The game has changed: with jet-powered Shahed drones flying at 370 miles per hour, defenders are scrambling to adapt their interceptors to counter this lightning-fast threat. Traditional interceptors are struggling to keep up, leaving urban centers and military infrastructure vulnerable to attack.
Navy Receives First C-130J for E-130J Phoenix II Communications Fleet
The delivery of the first C-130J Hercules airframe marks a major milestone in the Navy's strategic deterrence posture, with Lockheed Martin handing over the aircraft at its Marietta facility on October 15, 2026. This new airframe is the foundation for the future E-130J Phoenix II communications fleet.
Turkish Aerospace Expands Anka 3 Drone Production with Upgraded Line
Turkish Aerospace is taking its Anka 3 Drone production to the next level with an upgraded line that boosts payload capacity to 1.75 tons, allowing the aircraft to carry more munitions to meet growing national requirements. The company is set to open a second production line in November, with the first aircraft expected to roll out soon.