[SPONSOREDNUBIVANCE]
Rapid7 deployed right the first time.
Full-platform Rapid7 rollouts - InsightVM, InsightIDR, event sources, agents, tuning - by a Registered Partner who has done it at state-agency scale, including OT/SCADA.
Talk deploymentIntelligence Briefing
Latest Analysis
Cybersecurity intelligence, threat analysis, and national security reporting.
Federal Agencies Face New Era of Speed in National Security Missions
Federal agencies are racing against the clock to outpace threats, but their systems are holding them back - at the recent Intelligence and National Security Summit, experts gathered to tackle this pressing challenge. With AI turbocharging operations and data volumes exploding, the stakes have never been higher.
GenAI Fuels Phishing Evolution, Prompting New Security Countermeasures
Thanks to AI, phishing emails have become a whole lot harder to spot - gone are the telltale signs of poor grammar and misspelt words, replaced with slick, error-free language that's almost indistinguishable from the real thing. Phishing has evolved into a massive threat, with the FBI reporting a 274% surge in losses over just two years.
US Prepares for Quantum Threat to Encryption
The clock is ticking: with Google aiming to adopt post-quantum cryptography by 2029, it's time for Congress and federal agencies to take the quantum computing threat to encryption seriously. A powerful quantum computer could rapidly crack the cryptographic codes that safeguard our emails, finances, and sensitive communications.
Mid-Market IT Leaders Face Growing Cybersecurity Pressures
Mid-market IT leaders are under siege, facing the same daunting cybersecurity threats as large enterprises but with limited resources to defend themselves. As a result, understaffed IT teams are forced to juggle fragmented tools, leaving them vulnerable to attacks and stuck in reactive mode.
British Commandos Conduct Submarine Insertion in NATO Exercise
British commandos pulled off an impressive feat, inserting from a German Navy submarine off the coast of Scotland on September 29 as part of Exercise Strike Warrior, a daring maneuver that showcased their skill and coordination. The elite operators from 148 Commando Forward Observation Battery used inflatable raiding craft to slip ashore undetected and set up a makeshift observation post.
Pakistan Tests Fatah-4-ER, Hints at Future Missile Upgrades
Pakistan just took a major leap in its missile capabilities with the successful test of the Fatah-4-ER cruise missile, a move that signals its commitment to advancing its defense technology. This latest development hints at a future of upgraded missile variants, putting Pakistan at the forefront of modern military innovation.
ASOS Breach Exposes Customer Data After Stolen Credentials Used
ASOS recently suffered a data breach when an attacker impersonated a trusted contact to steal employee login credentials, which were then used to access sensitive customer information on third-party platforms. The breach highlights the importance of protecting sensitive data and preventing unauthorized access.
Healthcare Breach Exposes 20 Million Patient Records
A recent healthcare breach has put 20 million patient records at risk, highlighting the vulnerabilities that can arise during cloud migrations - especially when sensitive data is left exposed on servers. Even with the best intentions, a single misstep can leave patients' personal and medical information in the wrong hands.
OAuth Grants Proliferate, Exposing Hidden Risks
The average employee has 88 OAuth grants, with 31 carrying data-level permissions, creating a governance nightmare that's a daily arms race. Unlike other access controls, OAuth grants operate on a separate trust relationship between apps, outliving employee credentials and evading traditional security measures.
Google Certificates Targeted in ccTLD Hijacks
Google thwarted a sneaky attack where hackers hijacked three country-code domains to obtain fake HTTPS certificates for several Google sites and other organizations, quickly blocking the unauthorized certificates through Chrome's emergency response system. The compromised domains included .gh, .sl, and .as, which were manipulated by attackers to gain DNS control.
Russia-Aligned UAC-0099 Refines MATCHBOIL Malware
The operators of UAC-0099, a group likely aligned with Russian interests, have been steadily refining their MATCHBOIL malware, making it a more potent tool for future attacks. This deliberate evolution shows a clear intent to evade detection and enhance the malware's flexibility.
Hacker Convicted for Stealing $53 Million from Uranium Crypto Exchange
Meet Jonathan Spalletta, a 36-year-old hacker who callously swiped $53 million from a decentralized crypto exchange, Uranium Finance, and now faces charges for computer fraud and money laundering. His alleged crimes not only shut down the platform but also showcased his apparent disdain for cryptocurrency, referring to it as "fake internet money".
Microsoft Bolsters Teams with Deepfake Detection Tools
Microsoft is stepping up its game to keep Teams meetings secure by integrating deepfake detection tools from trusted third-party providers, helping organizations spot synthetic audio and video. This new feature, set to roll out globally in November, will enable Teams to flag suspicious meeting content.
ASOS Breach Exposes Customer Data After Credential Theft
ASOS recently fell victim to a sneaky social engineering attack, where hackers tricked an employee into handing over their login credentials, allowing the attackers to access sensitive customer data stored on third-party platforms. The company quickly sprang into action, locking down the affected platforms to prevent further damage.
Wazza Phishkit Targets US, EU, Australia with Multi-Stage Routing
Meet Wazza Phishkit, a sophisticated threat that's targeting banking, manufacturing, and government organizations across the US, Europe, and Australia with a multi-stage routing chain designed to evade detection. This engineered delivery system uses a series of checks to route visitors to its final lure, making it a complex and formidable phishing threat.
UK, Germany Forge Cybersecurity Alliance to Counter Russian Threats
Britain and Germany are joining forces to tackle the growing threat of Russian cyberattacks, as Prime Minister Andy Burnham and Chancellor Friedrich Merz meet in Berlin to strengthen their countries' security partnership. The alliance aims to safeguard infrastructure, businesses, and democracies from the increasing danger of cyber sabotage.
[SPONSOREDNUBIVANCE]
Audit-ready is a season. It shouldn't be.
Evidence in spreadsheets, controls drifting between audits, frameworks multiplying on flat headcount. Nubivance runs continuous compliance on Rapid7 Cyber GRC - SOC 2, HIPAA, ISO 27001, PCI, CMMC.
End the scramble
Chinese Hacker Exploits AI in South Korean Bank Data Heist
Meet the new face of cybercrime: AI-powered hacking. A Chinese hacker recently used agentic AI tooling, alongside traditional tactics, to pull off a massive data heist at a South Korean bank.
Malicious Firefox Extensions Target Crypto Wallets, Exfiltrate Recovery Phrases
Beware of malicious Firefox extensions that masquerade as helpful tools but secretly steal your crypto wallet secrets, including recovery phrases and private keys, by intercepting them during wallet import flows. These sneaky add-ons can even fake legitimate wallet interfaces to trick you into handing over sensitive info.
Dark Web Kingpin Gets 40 Years for Facilitating $430 Million in Illegal Transactions
Meet Raheim Hamilton, aka Sydney and ZeroAngel, the dark web kingpin behind Empire Market, who just got 40 years for facilitating a whopping $430 million in shady deals. He and his partner made it easy for users to stay under the radar with cryptocurrency, encryption, and even a rating system for vendors who could best conceal their illicit goods.
Atlassian Vulnerability Exploited in Wild, Targeting Multiple Products
A critical Atlassian vulnerability, CVE-2026-21589, with a near-perfect CVSS score of 9.3, is being actively exploited in the wild, putting multiple products at risk. This flaw allows for arbitrary file access, posing a significant threat to users of eight Atlassian Data Center products.
FBI Warns of Ongoing FortiBleed Threat to Fortinet Devices
The FBI and US Secret Service have sounded the alarm: a whopping 86,644 Fortinet devices across 194 countries are compromised, and the FortiBleed threat is still very much active, leaving organizations at risk of being locked out of their own systems. This widespread campaign targets Fortinet FortiGate firewalls and SSL VPN gateways, putting businesses and individuals on high alert.
Europol, US GAO Warn of Looming Quantum Threat to Global Cryptography
The clock is ticking: Europol and the US GAO are sounding the alarm on the urgent need for post-quantum cryptography to safeguard global security, warning that proactive defence is crucial to protecting cryptocurrencies and more. Immediate action is needed across government and industry to address this looming threat.
DOJ Charges MonsterCloud Owner with Defrauding Ransomware Victims
Meet Zohar Pinhasi, the mastermind behind MonsterCloud, who's accused of pulling off a despicable scam that left ransomware victims paying twice - once to the hackers, and again to him for fake decryption services. By posing as a hero with secret tools, he allegedly re-victimized his clients and lined his pockets with a hefty profit.
Ransomware Hits Unprepared Small Business, Leads to Shutdown
A small construction company's confident dismissal of expert help - "you're too expensive" - turned to desperation when a ransomware attack crippled their operations, forcing a shutdown. Just weeks earlier, they'd rejected a proposal from a cybersecurity consultant that could have prevented the disaster.