[SPONSOREDNUBIVANCE]
Rapid7 deployed right the first time.
Full-platform Rapid7 rollouts - InsightVM, InsightIDR, event sources, agents, tuning - by a Registered Partner who has done it at state-agency scale, including OT/SCADA.
Talk deploymentIntelligence Briefing
Latest Analysis
Cybersecurity intelligence, threat analysis, and national security reporting.
Microsoft Releases KB5101684 Update, Bolstering Windows 11 Security and Fixes
Microsoft just dropped a new update, KB5101684, for Windows 11, packing 42 bug fixes and snappy new features to take your experience to the next level. This July 2026 optional non-security preview release is a sneak peek at what's coming next in August's Patch Tuesday.
Iran-linked CyberAv3ngers targets US water systems
A coordinated cyberattack recently hit over 30 community water systems in Minnesota, prompting a swift response from state officials to ensure public health and safety. The Minnesota Department of Health is working closely with affected facilities to mitigate the impact and prevent any disruptions to drinking water supplies.
AI Agents Expose Security Risks with Broad Permissions
Modern AI agents are operating like improvisational actors, trying actions, learning, and adapting at scale - but this unpredictability can turn every unanticipated step into a security risk when paired with broad permissions. Traditional security models are no match for these autonomous agents, which are outpacing our ability to keep them secure.
Cyberattacks Expose Gaps in Organizational Readiness
Most organizations are unprepared to tackle a major cyberattack, with a staggering 73% admitting they'd struggle to respond effectively if one hit tomorrow. The real challenge lies not in having the right tools and plans, but in getting them to work seamlessly together under pressure.
Firefox Flaw Exploited by Malicious Webpage
A single visit to a malicious webpage is all it takes to compromise your Firefox browser, thanks to a recently exploited flaw tracked as CVE-2026-10702. No settings changes or extra interaction required - just a simple visit can leave you vulnerable.
AI Compresses Exploit Timelines, Exposes Prioritization Flaws
The arrival of AI models like Anthropic's Mythos is compressing exploit timelines, shrinking the window to patch vulnerabilities from weeks to just days or even hours. This acceleration exposes flaws in traditional prioritization methods, where only a handful of findings truly matter - out of 50,000, only a dozen make the cut.
Data Breach Costs Soar to $5 Million Average Globally
The global average cost of a data breach has skyrocketed to a record $4.99 million, with organisations facing a daunting 602 incidents on average, and experts warn that a reactive security approach is no longer enough to keep up with today's rapid-fire cyber threats. To stay ahead, businesses must shift to a continuous, autonomous defence - or risk being left in the dust.
Russia Charges Telegram's Durov for Aiding Terrorist Activity
Russia's Federal Security Service has charged Telegram founder Pavel Durov with aiding terrorist activity, alleging the platform enabled Ukrainian special services and extremist groups to plan sabotage, terrorism, and cyber-fraud within Russia. Durov has been placed on the international wanted list.
SIEM Gaps Expose 40% of Attacks
A whopping 40% of attacks slip through undetected due to glaring gaps in Security Information and Event Management (SIEM) systems, leaving organizations alarmingly exposed.
AI-Enhanced Phone Farms Enable Low-Cost Fraud at Scale
Meet the phone farm kit, a game-changing tool that lets scammers run hundreds of conversations at once, making it ridiculously easy to commit low-cost fraud at scale. With just a subscription and a prompt, romance scams can now be executed on a massive scale, no longer limited by human labor.
AI-Discovered Vulnerabilities See Similar Exploitation Rates as Traditional Ones
New research reveals that vulnerabilities discovered using AI tools are being exploited at almost the same rate as those found through traditional methods, with a 1.3% exploitation rate for AI-discovered vulnerabilities. This challenges alarmist predictions of an impending AI-driven security crisis.
Gitea Flaw Lets Writers Run Shell Commands via Git Hook
A newly discovered vulnerability in Gitea, rated 9.8 in severity, allows ordinary repository writers to execute shell commands as the Gitea service account by exploiting a remote code execution bug via a cleverly planted Git hook. This critical flaw, tracked as CVE-2026-60004, puts Gitea users at risk of a devastating attack.
Check Point Flaw Exploited as Researchers Release Public PoC
A critical flaw in Check Point's SmartConsole, known as CVE-2026-16232, allows hackers to bypass authentication and gain full administrative privileges with a staggering CVSS score of 9.3. This vulnerability lets unauthenticated remote attackers obtain a login token and take control, potentially modifying security policies and configurations.
NCSC Issues Guidance to Bolster Cyber-Incident Response
Don't let a cyber-attack catch you off guard - the NCSC's new guidance helps you prepare for the worst with a practical, three-stage playbook to respond and recover. Train for the cyber-marathon with a clear plan to tackle disruptions and get back on track.
Flying Eagle Android RAT Source Code Circulates, 170 Servers Compromised
Researchers have uncovered a massive operation linked to the Flying Eagle Android RAT, with 170 internet servers compromised, allowing hackers to capture sensitive info, record screens, and even impersonate legitimate apps. This powerful toolkit can be used to create customized malware that steals payment passwords, keystrokes, and more.
Roshel Emerges as Frontrunner in Canada's $4.9 Billion LUV Vehicle Contract
Roshel is leading the charge in Canada's $4.9 billion LUV vehicle contract, beating out the odds after initially being shut out of selling to its own government. The company is now in the running, alongside one other domestic firm, to deliver between 1,600 and 2,100 vehicles and 400 to 500 light utility trailers.
[SPONSOREDNUBIVANCE]
Audit-ready is a season. It shouldn't be.
Evidence in spreadsheets, controls drifting between audits, frameworks multiplying on flat headcount. Nubivance runs continuous compliance on Rapid7 Cyber GRC - SOC 2, HIPAA, ISO 27001, PCI, CMMC.
End the scramble
Boeing absorbs $280M loss on Air Force One VC-25B conversions
Boeing is throwing in extra resources to keep the Air Force One VC-25B conversion program on track, which unfortunately meant a $280 million hit this quarter. The added investment aims to support the build and test schedule, ensuring timely delivery despite pushing total out-of-pocket losses past $3 billion.
Quad Faces Industrial Capacity Test in Critical Minerals Push
The Quad faces a crucial test of its industrial capacity as it ramps up efforts to secure critical minerals, a challenge that requires more than just abundant resources. Can it catch up with China's strategic edge, built from decades of savvy investment in processing, markets, and integrated industrial policy?
Sikorsky Revives Raider Rotorcraft Bid for NATO Program
Sikorsky is dusting off its Raider rotorcraft bid for a NATO program, reviving a design that was previously grounded when the US Army canceled its Future Attack Reconnaissance Aircraft program. The S-97 Raider, with its striking coaxial rotors and sleek fuselage, boasts an impressive top speed of up to 240 knots.
Pakistan Develops Advanced C-UAS with Interceptor Drones
Pakistan's Heavy Industries Taxila (HIT) has unveiled a game-changing counter-drone system, the P-905, which combines advanced OR-503 radar technology with the cutting-edge I-402 interceptor drone to detect and neutralize rogue UAVs. This innovative system is part of Pakistan's push to develop robust counter-drone capabilities.
Axon Expands License Plate Surveillance Reach
Municipalities like Denver, Colorado, are taking a closer look at their license plate surveillance systems, making changes that have some questioning whether they're simply swapping one brand for another or making a meaningful shift. Denver is among the cities ditching Flock license-plate reader arrays, but is this a cosmetic change or a step towards reevaluating surveillance priorities?
USMC Osprey Fleet Reaches Full Delivery, Eyes Sustainment Through 2055
The US Marine Corps has officially welcomed its final MV-22B Osprey, marking a major milestone with a fleet of 359 aircraft that will continue to soar through 2055. This game-changing aircraft has revolutionized the way the Marine Air-Ground Task Force generates combat power, and now the focus shifts to long-term sustainment and evolution.
Boeing Faces $280M Charge on Air Force One Replacement Program
Boeing is investing $280 million in the Air Force One replacement program to accelerate production and certification, a move aimed at reducing risk as the aircraft advances to flight testing. This brings the program's total losses to over $3 billion.
Indonesia's Military Shifts Inward, Testing Australia Defense Pact
Indonesia is shaking up its military strategy, ramping up domestic defenses and putting its Australia defense pact to the test. With plans to establish 750 new territorial development battalions, the country is signaling a significant shift inward.