[SPONSOREDNUBIVANCE]
Rapid7 deployed right the first time.
Full-platform Rapid7 rollouts - InsightVM, InsightIDR, event sources, agents, tuning - by a Registered Partner who has done it at state-agency scale, including OT/SCADA.
Talk deploymentIntelligence Briefing
Latest Analysis
Cybersecurity intelligence, threat analysis, and national security reporting.
Citrix Patches Flaw That Enables RCE in SAML Deployments
Citrix has patched a critical vulnerability, CVE-2026-107406, with a near-perfect score of 9.5, that could allow devastating remote code execution or denial-of-service attacks in SAML deployments. The flaw can be triggered under specific configuration conditions when NetScaler instances are set up as a SAML identity provider or service provider.
Researchers Expose Flaws in Google Pixel 10 with Remote Hacks
Google just issued a warning that its Pixel 10 may be vulnerable to remote hacks, with researchers discovering flaws that could be exploited by attackers. Three teams of experts successfully broke into fully patched Pixel 10 devices at a recent hacking contest, raking in a total of $562,500 in prizes.
UK Warns of China's Integrity Tech Cyber Threat Tactics
China's Integrity Tech is raising red flags with its shady cyber activities, including building and selling malicious tools, hosting infrastructure, and compromising global networks. This tech group's ties to Beijing-backed cyber threats like Flax Typhoon have prompted a joint warning from the US, UK, and allied countries.
Microsoft Warns of Security Update Cutoff for Outdated Windows Devices
Don't wait until it's too late: if you're running an outdated version of Windows, you'll lose access to crucial security updates after May 17 and June 19, 2027, when key certificates expire. Upgrade to a supported version now to stay protected.
GoBalance Flaw Exposes Dark Web Sites to Hijacking
A careless mistake made by GoBalance has put numerous dark web sites at risk of hijacking, with a developer reportedly uploading a crucial private key into a software update. This simple error exposed the sites to potential takeover, highlighting the importance of secure coding practices.
ISACA Bolsters AI Governance with New Certification Amid Skills Gap
Get ready to take control of AI with ISACA's new AI governance certification, launching in early 2027, which helps professionals manage AI securely and responsibly. This game-changing credential is the ultimate tool for individuals looking to govern AI effectively, filling a crucial gap in the skills market.
Citrix Warns of Immediate Patching Need for NetScaler RCE Flaw
Citrix is sounding the alarm on a critical vulnerability, CVE-2026-107406, that can lead to remote code execution or a denial-of-service state in NetScaler devices - and it's urging admins to patch immediately.
UK Watchdog Secures AI Firms' Data Protection Pledges
The UK's data watchdog has secured pledges from AI firms to prioritize data protection, reassuring people that their personal info will be safeguarded as AI innovation continues to advance. This move aims to build trust, with the watchdog ensuring companies meet four key tests to guarantee responsible data use.
FBI Disrupts Flax Typhoon Tools Used in US Critical Infrastructure Intrusions
The FBI and Department of Justice have struck a major blow against a China-linked hacking group, seizing seven domains and blocking access to malicious tools used to infiltrate US and foreign critical infrastructure. This disruption targets Flax Typhoon, a notorious threat actor known for its widespread vulnerability scanning and intrusions.
Hackers Earn $1.3 Million for 98 Zero-Days at Pwn2Own Ireland Contest
In a stunning display of hacking prowess, contestants at Pwn2Own Ireland 2026 racked up a whopping $1.3 million in rewards by uncovering 98 zero-day vulnerabilities over just three days. Top prize winners Ikotas Labs took home $361,000 and a Pixel 10 chain by exploiting multiple zero-days in high-profile targets like Google Pixel 10 and Samsung Galaxy S26.
Sikorsky Revamps Black Hawk with Autonomy, Drones and New Engines
Sikorsky is overhauling the Black Hawk with cutting-edge autonomy, drone capabilities, and new engines as part of its ambitious 'Black Hawk 2070' modernization effort. The upgrade includes a new digital backbone and reworked nose, enabling rapid integration of new equipment and technologies.
OpenAI Disrupts Russian, Iranian AI Influence Ops Targeting Western Media
OpenAI just took down a massive AI influence operation that was spreading disinformation across Latin America, targeting Ukraine's reputation and fuelling heated debates in Argentina and Bolivia. The network, dubbed Dark Clark, was using a fake journalist persona and think tank to seed false narratives into mainstream reporting.
UK Pursues Germany's Entry into GCAP Fighter Program
The UK is open to Germany joining the Global Combat Air Programme, with Prime Minister Andy Burnham expressing enthusiasm to progress discussions with Germany, Italy, and Japan.
Shield AI Accelerates X-BAT VTOL Drone Development for Navy
Shield AI is on track to unveil the first full-scale X-BAT VTOL drone prototype by the end of October, with flight tests slated to begin before the year is out. The company is taking a staged approach, ramping up from engine runs to untethered flights in a bid to accelerate development for the Navy.
Ransomware CEO Indicted for Pocketing Millions in Client Fees
Meet Zohar Pinhasi, the alleged ransomware scammer who pocketed millions by preying on vulnerable businesses, charging them hefty fees for a promised solution that didn't exist. His company, MonsterCloud, is accused of swindling hundreds of clients out of over $19 million, while only paying $8 million in actual ransom payments.
US Military Tests Counter-Drone Tech in Desert to Bolster CENTCOM Defenses
The US military recently put its counter-drone technology to the test in the Arizona desert, gathering crucial data on system durability and operator usability in extreme conditions. This exercise will help bolster defenses in critical regions like the CENTCOM area of operations.
[SPONSOREDNUBIVANCE]
Know a small business winging it on security?
No IT department, no security budget, real exposure. Nubivance builds right-sized security foundations for small companies. Send them this.
Send it along
US Presses Portugal on F-35 for F-16 Replacement
The US is pulling out all the stops to help Portugal upgrade its fighter jets, with US Secretary of State Marco Rubio promising a "very competitive" offer to replace the country's aging F-16 fleet. This high-stakes pitch puts Washington in a strong position as Portugal weighs its long-term fighter options.
US Seizes Flax Typhoon Hacking Tools in Cyber Crackdown
In a major cyber crackdown, the US has seized hacking tools linked to the notorious Flax Typhoon group, dealing a significant blow to Chinese government-backed cyber threat actors. The seized tools, Microscan and FishHub, were used to steal sensitive data from organizations worldwide, including US critical infrastructure sectors.
SAPA Transmission Targets US Defense Industrial Base Revitalization with Advanced Military Vehicle Tech
SAPA is revolutionizing the US defense industry with cutting-edge military vehicle tech, including a massive 200,000-square-foot manufacturing center that will create over 200 jobs. By addressing legacy transmission gaps, they're tackling a critical issue that's held back military vehicle performance for decades.
US Exposed to Gaps in Cyberdefense Against China in Taiwan Scenario
The US is vulnerable to cyber defense gaps in the face of a potential Taiwan crisis with China, with a recent war game simulation revealing that federal agencies lack the budget and systematic process to effectively respond to such threats. This weakness could leave the country exposed to China's gray-zone strategy of cyberattacks and economic pressure.
USS Abraham Lincoln Returns Home With 103 Drone, 34 Ship Kill Marks
The USS Abraham Lincoln's triumphant return home marks the end of an epic mission, with an impressive 103 drone and 34 ship kill marks to its name. Secretary Pete Hegseth praised the crew, saying a few in the media had tried to misrepresent the ship's legendary status.
Anthropic Launches Cybersecurity Program to Fortify Critical Infrastructure
Anthropic is stepping up to support defenders of critical infrastructure and open-source software, who are rich in experience but often low on resources, by launching a long-term cybersecurity program to identify and fix vulnerabilities. By combining its Claude models, engineering expertise, and threat research with partner cybersecurity firms, Anthropic aims to help safeguard critical infrastructure from exploitation.
Peraton Targets Pentagon with AI-Powered Project Management Push
Peraton is set to make a big impact on Pentagon project management with its AI-powered push, driven by Gabe Camarillo's vision to become the go-to provider for managing and modernizing enterprise IT across the department. With a rich history of IT services and modernization, the company is poised to shake up defense engineering and AI-enabled programs.
Israel Expands Defense Ties with Morocco at Marrakech Airshow Debut
Israel is taking its defense ties with Morocco to new heights with its debut at the Marrakech Airshow, marking a major milestone in their growing partnership since the historic Abraham Accords. This strategic move is set to boost defense exports and cooperation between the two nations.