[SPONSOREDNUBIVANCE]
Know a small business winging it on security?
No IT department, no security budget, real exposure. Nubivance builds right-sized security foundations for small companies. Send them this.
Send it alongIntelligence Briefing
Latest Analysis
Cybersecurity intelligence, threat analysis, and national security reporting.
Jewelbug APT Exploits Dual Agenda with Espionage and Crypto Fraud
Meet Jewelbug, a notorious APT group that's been pulling off a double heist - stealing sensitive info and swindling victims out of crypto - all from the same interconnected operation. Their massive haul includes over 1 million implant check-ins and 580,000 stolen cookies, with targets spanning government systems and service providers across the Middle East, Southeast Asia, and South Asia.
Australia Urges Southeast Asian Nations to Clarify Maritime Incidents
Australia is stepping up its support for Southeast Asian nations to tackle maritime incidents, with a recent pledge of A$10 million to enhance the Philippine Coast Guard's drone technology and training. This move aims to boost the region's maritime domain awareness, but experts warn that more data doesn't always mean more clarity.
US Enlists Private Sector in Cybercrime Hacking Operations
The US government has taken a bold step in the fight against cybercrime, enlisting the help of the private sector to tackle transnational criminal organizations in a newly signed presidential memorandum. This move has sparked reactions ranging from cautious optimism to alarm, as experts weigh the potential benefits and risks of this unprecedented collaboration.
AI Development Tangled in Capitalist Incentives
The biggest concerns surrounding AI aren't about the tech itself, but about the capitalist system driving its development - and the flaws that arise when profit takes priority over people. As Ted Chiang put it, most fears about AI are really fears about capitalism.
China Exploits New Zealand's Space Sector for Military Intelligence
China's military intelligence efforts have infiltrated New Zealand's space sector, with a local company unwittingly at the center of an attempted space-based spying operation. The plot involved a China-based organization called Purple Mountain Observatory, which tried to install Ground Based Space Infrastructure in New Zealand to track satellites and space debris.
Apple Warns Users of Mercenary Spyware Attacks on iPhones
Got a warning from Apple about a mercenary spyware attack on your iPhone? This means hackers are trying to secretly access your device, and Apple is stepping in to alert and protect you.
OpenAI Introduces Keylogging Feature for ChatGPT Users
OpenAI's new Computer History feature for ChatGPT users raises some red flags, capturing a detailed stream of interactions like clicks, typing, and keyboard shortcuts from allowed apps and websites, and storing them as local memory files that could potentially be accessed by other programs on your macOS.
Ukraine Disrupts 94 Fraudulent Call Centers in Nationwide Crackdown
In a massive nationwide crackdown, Ukrainian authorities have shut down 94 scam call centers that tricked people into fake investment schemes, stealing their bank account info by posing as bankers, brokers, and even law enforcement officers. The operation, involving over 400 searches, has already led to 26 suspects being formally identified.
Akira Ransomware Actors Exploit Safe Mode to Evade EDR Protections
Cyber attackers have found a sneaky way to bypass EDR protections by exploiting Safe Mode, leaving security systems blind to their malicious activities. In one recent incident, an exposed SonicWall VPN with no multi-factor authentication was all it took for hackers to gain entry and start wreaking havoc.
Securing AI Systems Requires Continuous Validation
Trust in AI systems isn't a nicety, it's a necessity - and a tactical imperative for warfighters who rely on accurate, reliable, and secure recommendations to make life-or-death decisions. In combat, trustworthy AI means delivering predictable, verifiable, and explainable results from authoritative data, every time.
US Space Command Targets Anti-Satellite Capabilities as Top Priority
In space, there's no room for retreat - and that's why US Space Command is prioritizing the development of anti-satellite capabilities to protect its interests and deter potential threats. Gen. Stephen Whiting is sending a clear message: it's time to build new offensive capabilities to fight for control of orbit.
Trump Expands Private Sector Role in US Offensive Hacking Operations
President Trump just signed a game-changing memo that lets private cyber firms join forces with the government to take down transnational cybercrime gangs. This bold move aims to harness the power of the private sector to supercharge the fight against online crime.
Poland Unveils Advanced Frigate Amid Baltic Security Push
Poland just took a major leap in Baltic security with the launch of its most advanced frigate, Wicher, a game-changing vessel that's a key part of the country's defense strategy. The impressive warship was unveiled in a ceremony attended by Polish President Karol Nawrocki, marking a significant milestone in Poland's naval modernization efforts.
AEVEX Bolsters Naval Tech with $650M BlackSea Deal
AEVEX is supercharging its naval tech capabilities with the game-changing $650M acquisition of BlackSea Technologies, bringing together a powerhouse of maritime expertise and a culture of mission-driven innovation. The deal, which includes $250M in cash and $350M in stock, plus up to $50M in performance-based earnout, is set to take AEVEX to the next level.
US Military Grapples with China Rare Earth Dominance
The US military is facing a daunting reality: a single fighter jet, like the F-35, requires over 400 kilograms of rare earths to build, highlighting the alarming dependence on these critical minerals. China, which controls a whopping 70% of rare earth mining and 90% of processing, holds the reins on the global supply chain.
Armored Likho Expands Cyber-Espionage Arsenal
Meet the Armored Likho group, a cyber-espionage mastermind that's just leveled up its game with a suite of sneaky new implants that can hijack Telegram sessions and eavesdrop on conversations. The latest campaign, uncovered in May 2026, uses a cunning fake donation app to infiltrate targets across Russia.
[SPONSOREDNUBIVANCE]
Rapid7 deployed right the first time.
Full-platform Rapid7 rollouts - InsightVM, InsightIDR, event sources, agents, tuning - by a Registered Partner who has done it at state-agency scale, including OT/SCADA.
Talk deployment
Smaller AI Models Gain Hacker Edge
The tide is turning in the world of AI: smaller, more affordable models are suddenly delivering impressive results in hacking and exploitation benchmarks, providing net value at a cheaper price and giving them a competitive edge. This emerging middle class of AI models, including GLM-5.2, Grok 4.5, and Opus 4.7, is crossing a crucial threshold, making them strategic players in the industry.
Pentagon Awards Palantir $244M in No-Bid Contracts
The Pentagon has just awarded Palantir $244M in no-bid contracts, further solidifying the company's role in boosting efficiency within the defense industrial base with its software. Deputy Defense Secretary Steve Feinberg has directed DOD departments to explore even more ways to utilize Palantir's products through 2028.
US Intelligence Community Charts Course for Autonomous AI Agents
The US Intelligence Community is revolutionizing its approach with autonomous AI agents that can work together, reason through complex problems, and support various operations. Maj. Gen. Robert Kinney, DIA's chief AI officer, envisions a future where specialized AI agents communicate and interact to drive mission success.
US Military Exposes Gaps in Homeland Drone Defense Capabilities
The US military is alarmingly unprepared to defend its homeland against a coordinated drone attack, with Lt. Gen. Joseph Jarrard bluntly admitting that it lacks the necessary sensors to detect and respond to such threats. The vulnerability is stark, with defenses largely dependent on the location of the attack and available resources to counter it.
Jewelbug Hacker Group Exposes Dual Threat of Espionage and Crypto Fraud
Meet Jewelbug, a China-based hacker group that's been wreaking havoc with a dual threat of espionage and crypto fraud, leaving a trail of over a million compromised implant check-ins and thousands of stolen credentials in its wake. By cleverly injecting a single malicious script into a shared webmail template, Jewelbug gained write access to sensitive government webmail accounts, making off with valuable data.
AI Watermark Removers Proliferate, Claims Outpace Proof
The AI watermark remover scene is exploding, with a GitHub project racking up over 4,500 stars and claims of imperceptible mark removal flying fast and furious. Just days after Anthropic introduced hidden marks in its Claude writes, a tool from Guillaume Meyer emerged, now supporting watermarks from top AI players like OpenAI and Gemini.
Microsoft patches LegacyHive zero-day vulnerability
Microsoft just patched a nasty zero-day vulnerability, known as LegacyHive, that could let hackers gain administrator privileges on your Windows PC - but thankfully, it's now fixed in the August Patch Tuesday updates.
Uber Freight Probes Data Breach Claims by Helix Hacking Group
Uber Freight is investigating claims that a hacking group called Helix has stolen nearly 1 million files from the company, posting them online as evidence. The breach has sparked an urgent probe into unauthorized access to Uber Freight's systems and data repositories.