Cybersecurity intelligence, threat analysis, and national security reporting.
A major player behind the notorious Ryuk Ransomware gang has taken responsibility for their crimes, with Karen Serobovich Vardanyan, a 34-year-old Armenian national, pleading guilty in a US court to conspiracy and computer fraud. As part of his plea deal, Vardanyan will pay over $1.1m in restitution for his role in the massive cyberattack that netted over $15m in bitcoin payments.
Russian state-backed hackers have infected 18,000 routers in 120 countries, sparking a multinational warning about the threat to critical infrastructure networks. The alarming campaign is linked to Russia's Federal Security Service (FSB) Centre 16, notorious for exploiting poorly configured routers to gain access to sensitive networks.
A French security firm stumbled upon a live Microsoft 365 phishing operation when a simple Python command was left exposed in a readable file, revealing a treasure trove of sensitive data. This lucky discovery shed light on the alarming weaknesses in Microsoft 365's multi-factor authentication.
A critical vulnerability in the iCagenda extension for Joomla, known as CVE-2026-48939, has been exploited as a zero-day since June 15, 2026, allowing attackers to upload arbitrary files via the component's file attachment feature. This severe flaw, scoring 10.0 on the CVSS scale, has already sparked a wave of automated attacks against popular content-management-system extensions.
A massive 24 billion credentials have been exposed in a staggering 8 terabytes of stolen data, sparking urgent calls for a complete identity security overhaul. This alarming breach wasn't just a one-time hack, but a sneakily silent threat from infostealer malware quietly harvesting sensitive info from infected devices.
Big news for ChatGPT fans: OpenAI has temporarily lifted usage limits for Plus, Pro, and Business plans, giving you more time to tap into the power of its most advanced model. This move comes after a surge in demand over the past 48 hours, with the company also resetting current usage for all customers.
As cyber threats increasingly put Australia's critical infrastructure, economy, and national resilience at risk, the country faces a critical choice: rely on voluntary measures or establish a robust cybersecurity regulator with the power to enforce minimum standards and hold organizations accountable. Empowering the Australian Cyber Security Centre (ACSC) as a formal regulator could be the key to bolstering the nation's cyber defenses.
Big news for paid subscribers: Anthropic is extending access to Claude Fable 5 through July 19, 2026, giving you even more time to experience the power of this cutting-edge tool. This extension applies to Claude Pro, Max, Team, and premium seats on seat-based Enterprise plans.
Evidence in spreadsheets, controls drifting between audits, frameworks multiplying on flat headcount. Nubivance runs continuous compliance on Rapid7 Cyber GRC - SOC 2, HIPAA, ISO 27001, PCI, CMMC.
End the scramble
Meet RedHook, a sneaky Android malware that's taking advantage of Wireless ADB and Accessibility features to gain shell-level control over your device - and it can be controlled remotely with 53 server-issued commands. This clever malware tricks victims into granting permissions, then takes control, making it a serious threat to your digital security.
A surprising twist in China's military lineup has caught attention, as a single PLAAF Aviation Brigade was spotted with not one, but two different aircraft types on parade, defying the conventional one-brigade-one-aircraft-type model. This unusual display hints at a potential shift in the PLAAF's strategic approach.
Pakistan is taking a bold stance against insurgency in Balochistan with Operation Shaban, a powerful two-front offensive aimed at eradicating militant groups. The operation, launched in early July 2026, promises to run with full force until every last militant is eliminated.
Ukraine's daring drone strikes have dealt a significant blow to Russian shipping in the Sea of Azov, with a single night's operation taking out 21 tankers, 4 tugs, 2 cargo vessels, and 1 special-purpose vessel. The bold move is just the latest in a series of targeted attacks by Ukraine's elite drone unit, known as "Magyar's Birds".
Cyber attackers have launched a stealthy espionage campaign targeting Pakistani law enforcement agencies, breaching sensitive data like biometric records, criminal files, and personnel info. The compromised assets included servers managing police and citizen data at organizations like Balochistan Police.
A malicious version of the jscrambler NPM package, 8.14.0, was published on July 11, 2026, and could silently infect your system with a Rust-based infostealer just by installing it, no extra steps required. Merely running the install command was enough to trigger the payload on vulnerable systems.
Beware: a large-scale cyber attack is targeting content management systems worldwide, including in Australia, putting many small- to medium-sized businesses at risk of service disruption, credential theft, and malware installation. The Australian Cyber Security Centre warns that this global campaign is actively scanning for vulnerabilities and compromising websites.
Researchers have uncovered a sneaky way to steal secrets from AI code reviewers using image steganography, as demonstrated in a proof-of-concept on GitHub. This Ghostcommit technique hides malicious instructions inside PNG images, exploiting a gap in the review process.
No IT department, no security budget, real exposure. Nubivance builds right-sized security foundations for small companies. Send them this.
Send it along
Zimbra is urging customers to update their Classic Web Client immediately due to a critical vulnerability that could allow hackers to access sensitive mailbox information and execute malicious code via specially crafted emails. Installing the update, specifically upgrading to Zimbra Collaboration Suite version 10.1.19, will help protect against this threat.
US Air Force F-22 Raptors have arrived at RAF Fairford in England after playing a key role in precision missions against Iranian air defenses and nuclear infrastructure. The stealth fighter jets, part of the 1st Fighter Wing at Langley Air Force Base, flew in from Israel where they were deployed since late February.
Russia is in delicate talks with Turkey over the fate of its S-400 air defenses, with whispers of a potential transfer to a Gulf state stirring a highly sensitive issue. The Kremlin is tight-lipped, but confirms it's in contact with Ankara to discuss the matter.
Despite changes to training requirements, a select group of student naval aviators recently completed carrier qualification training aboard the USS Dwight D. Eisenhower, highlighting the ongoing value of this critical skill. The limited sessions, involving 26 students, demonstrate the US Navy's continued commitment to providing realistic training opportunities when timing and resources permit.
The US Air Force has decided that the B-21 Raider bombers will be flown by a two-pilot crew, a configuration that will tap into the extensive combat experience of its pilots to maximize the aircraft's lethality and survivability. This setup matches the current standard for the B-2 and is designed to support the B-21's mission needs.
CISA swiftly sprang into action after discovering a major credential leak on May 15, taking swift and decisive steps to halt the breach and prevent further damage. By sharing their incident response experience, CISA aims to help other organizations bolster their defenses and avoid similar security mishaps.
Karen Serobovich Vardanyan, an Armenian national, has pleaded guilty to conspiracy charges for his role in a massive Ryuk ransomware scheme that raked in over $15 million in ransom payments from US-based organizations. The guilty plea marks a major win in the fight against cybercrime, as Vardanyan admitted to his part in the global extortion plot.
Meet The Gentlemen, a ransomware group that's rapidly risen to notoriety with a game-changing affiliate model that dishes out a whopping 90% payout to its partners. This lucrative approach has helped them scale from a small operation to one of 2026's most active ransomware-as-a-service programs in record time.