[SPONSOREDNUBIVANCE]
Rapid7 deployed right the first time.
Full-platform Rapid7 rollouts - InsightVM, InsightIDR, event sources, agents, tuning - by a Registered Partner who has done it at state-agency scale, including OT/SCADA.
Talk deploymentIntelligence Briefing
Latest Analysis
Cybersecurity intelligence, threat analysis, and national security reporting.
Ransomware Attacks Spike 19% in July, Targeting Finance, Tech, and Healthcare
Ransomware attacks surged 19% in July, with 799 claimed incidents targeting key sectors like finance, tech, and healthcare. To stay safe, experts stress the importance of regular backups - and backups of those backups - to quickly restore systems and data in case of an attack.
TeamPCP Exploits Redis in Years-Long Supply Chain Campaign
Researchers have uncovered a clever and patient hacking group, TeamPCP, that exploited Redis servers in a years-long supply chain campaign, with roots tracing back to 2020. This group's sophisticated tactics involved compromising internet-facing infrastructure and deploying malware, showcasing a highly evolved operational tradecraft.
Authoritarian Axis Expands in Middle East
China and Iran have reportedly inked a deal worth $60-70 million for up to 400 advanced, shoulder-fired missile systems, a move that could significantly bolster Iran's air defence capabilities. This strategic partnership is raising eyebrows, especially as it comes amid heightened tensions in the Middle East.
Australia Urged to Overhaul Space Laws to Attract Investment
Australia's outdated space laws are in desperate need of an overhaul to attract much-needed investment and support the country's burgeoning commercial space sector. The current licensing and permitting regime is too narrow, leaving a gaping hole in the legal framework that's deterring businesses and stifling growth.
Houthis Launch Large-Scale Attack On Saudi-Aligned Forces In Yemen
The Houthi forces have unleashed a massive assault on Saudi-aligned troops in Yemen, launching a barrage of ballistic missiles and drones in a bold operation that targeted key enemy strongholds. Hundreds of mercenaries are reportedly dead or injured, with numerous camps and mobilizations destroyed or burned to the ground.
UAE's Falaj 3 Patrol Boat Packs Unprecedented Firepower
Meet the Falaj 3 Patrol Boat, a compact powerhouse that packs a serious punch, boasting an unprecedented arsenal for its size, and weighing in at just 670 tons with a crew of 39. This sleek, 200-foot vessel is redefining the offshore patrol vessel category with its impressive firepower.
Australia's New Defence Chief Charts Course on Deterrence, Integration
Admiral Mark Hammond is shaking things up as the new head of the Australian Defence Force, starting with a bold move to restore "command" to the ADF's nomenclature, signaling a sharper focus on operations and warfighting readiness. This change sets the tone for what promises to be a transformative four-year tenure.
Portfolio Acquisition Executives Target Cultural Shift in Defense Procurement
The military's bold move to replace program executives with Portfolio Acquisition Executives is shaking up the defense procurement process, empowering leaders to focus on delivering results rather than just checking boxes. With this shift, the stage is set for a cultural transformation that prioritizes outcomes over compliance.
Thousands of U.S. Water System Controllers Remain Exposed Online
A recent scan revealed over 4,000 vulnerable water system controllers exposed to the public internet, including 22 in cities that have already faced cyberattacks on their water and wastewater systems. This alarming discovery highlights the urgent need for increased security measures to protect these critical systems.
Canadian Hacker Pleads Guilty to Snowflake Extortion Scheme
A 26-year-old Canadian hacker has pleaded guilty to masterminding a massive Snowflake extortion scheme that compromised over 100 million AT&T customers' sensitive call and text history records. Connor Riley Moucka faces up to 30 years in prison for his role in the cross-border hacking and extortion operation.
Pakistan's Defence Sector Exposes Testing Regulation Gaps
In Pakistan's defence sector, a glaring loophole leaves local vendors walking a tightrope: admitting their solutions have been tested could land them in legal trouble, while denying it means disqualification. The Defence Industrial Production and Regulatory Authority Ordinance, established in 2026, grants sweeping regulatory powers, but crucial procedures remain unclear.
Military Protection Redefined in Drone Age
In the drone age, the real challenge for militaries is preserving freedom of action - the ability to maneuver, fight, and prevail - as autonomous systems and countermeasures transform the battlespace. It's a mission that goes far beyond keeping soldiers and platforms safe, encompassing the very fabric of industrial bases, supply chains, and software arsenals.
Boeing Wins Contract for Jet-Powered JDAM Production
Boeing has landed a $75 million contract with the U.S. Air Force to produce the game-changing Joint Direct Attack Munition-Long Range (JDAM-LR) for the U.S. Navy, marking a major milestone in delivering long-range precision-strike capability at a lower cost. This undefinitized contract action is a significant step forward for the JDAM-LR program, paving the way for enhanced military capabilities.
US Lawmakers Scrutinize Scam-Fighting Coordination
US lawmakers are pushing for better coordination in scam-fighting efforts, calling for a unified leader to tackle the issue with the urgency of a combat operation. Currently, there's no single entity in charge across agencies, leaving scam networks to easily relocate and evade enforcement.
Facial Recognition Systems Targeted by Deceptive Clothing Designs
Some designers are now creating clothing with patterns specifically designed to confuse facial recognition systems, but experts warn that these products may not work as promised. These so-called adversarial garments are being marketed as a way to throw algorithms off track, but their effectiveness remains untested.
PLA's Mountain Cat ATV Evolves with Expanded Doctrine
Meet the CS/VP4 "Mountain Cat" ATV, a game-changing mobility aid that's been defying expectations since 2008 with its lightweight, amphibious design and impressive capabilities. From humble beginnings as a simple, airdroppable vehicle to its current evolved form, the Mountain Cat has consistently proven itself to be "better-than-walking".
[SPONSOREDNUBIVANCE]
Audit-ready is a season. It shouldn't be.
Evidence in spreadsheets, controls drifting between audits, frameworks multiplying on flat headcount. Nubivance runs continuous compliance on Rapid7 Cyber GRC - SOC 2, HIPAA, ISO 27001, PCI, CMMC.
End the scramble
Army Awards Contracts to Boost Hydra-70 Rocket Production
The Army has taken a major step to boost its firepower by awarding contracts to four companies to ramp up production of the versatile Hydra-70 rocket system, specifically the M151 warhead. This strategic move ensures the Army can rapidly respond to emerging threats and maintain its edge on the battlefield.
Firestorm Labs Tests 3D Printing at Sea Amid Rough Waters
Imagine printing thousands of unique parts at sea, even in the roughest of waters - that's exactly what Firestorm Labs achieved on board the USS Essex during a recent trial. The company's portable 3D printing unit, xCell, proved its mettle by producing parts non-stop despite the ship pitching through Sea State 5.
ChainDrop Worm Exposes npm Ecosystem Vulnerabilities
A sneaky self-propagating worm called ChainDrop has infected over 400 popular npm packages, putting hundreds of millions of downloads at risk each week and threatening developer workstations, CI runners, and cloud instances. This clever malware hides in plain sight by masquerading as legitimate code, making it a formidable foe in the npm ecosystem.
China Probes Palo Alto Networks Product Security
China is investigating the security of Palo Alto Networks' products, sparking a mysterious probe that's left many questions unanswered. The inquiry, reported by The Register, puts the spotlight on Palo Alto Networks and its offerings.
USENIX Security Symposium Tackles AI-Driven Paper Surge
The USENIX Security Symposium has seen a record-breaking surge in submissions, with approximately 3,030 valid papers pouring in - a significant jump from last year's 2,400. To keep pace, the conference expanded its Program Committee to handle the influx of innovative research in the security community.
Malware Targets macOS for Crypto Theft via ClickFix Attacks
Cyber attackers are using a sneaky new tactic called ClickFix to target macOS users and steal cryptocurrency by infiltrating sensitive areas like browser password databases and the Apple Keychain. This clever malware attack collects system info and downloads a malicious payload, giving hackers access to your personal data.
OpenAI Upgrades ChatGPT with Enhanced Accuracy and Control
The latest ChatGPT update is here, bringing more accurate and relevant responses, with the ability to adapt its level of detail and provide helpful corrections when needed. OpenAI's enhanced model prioritizes focus, clarity, and precision, reducing errors and unnecessary information.
Cyberattacks on Hedge Funds Tied to UNC6671 Extortion Group
Meet UNC6671, a notorious extortion group linked to a string of cyberattacks on hedge funds, operating under a web of public brands to deceive and exploit its victims. Using voice-phishing tactics, the group tricks employees into divulging sensitive info, paving the way for a potentially devastating breach.