[SPONSOREDNUBIVANCE]
Rapid7 deployed right the first time.
Full-platform Rapid7 rollouts - InsightVM, InsightIDR, event sources, agents, tuning - by a Registered Partner who has done it at state-agency scale, including OT/SCADA.
Talk deploymentIntelligence Briefing
Latest Analysis
Cybersecurity intelligence, threat analysis, and national security reporting.
Hackers Exploit Microsoft Entra Passkey Enrollment in Voice Phishing Attacks
Hackers are using voice phishing attacks to trick Microsoft 365 users into enrolling a new Entra passkey, targeting multiple sectors including food and beverage, technology, and healthcare. They're registering domains with the word "passkey" to convincingly pose as legitimate Microsoft representatives.
Free Android VPN Apps Expose User Traffic, Fail Basic Security Tests
Over 2.4 billion installs of free Android VPN apps have potentially exposed users to security risks, according to a recent study that revealed these apps fail basic security tests. A new testing framework called MVPNalyzer was used to evaluate the apps and uncovered alarming vulnerabilities, including the serious flaw of tunnel hijacking.
Exposed Server Unveils WP-SHELLSTORM's Massive WordPress Backdoor Operation
For 22 days, a US-based server sat exposed on the public internet with no password, revealing a massive WordPress backdoor operation that targeted over 1.4 million domains. The astonishing discovery included scans, exploits, and command history, giving a rare glimpse into the playbook of a notorious hacking group.
Lumen Technologies Rebuilds Exposure Management with Trusted Asset Data
Lumen Technologies' security team transformed their exposure management by consolidating 40 disconnected systems into one trusted view, growing their asset count from 17,000 to 1.1 million devices. This overhaul empowered them to respond to incidents with confidence, knowing who owned what and taking informed risk decisions.
Miinto Breach Exposes Customer Order Data to Unauthorized Access
Miinto recently suffered a data breach, allowing unauthorized access to its internal order management system, potentially exposing your order data. The company has notified affected customers and taken steps to address the issue, reporting it to the police and relevant data protection authorities.
Unpatched XQUIC Flaw Exposes HTTP/3 Servers to Remote Crashes
A single, tiny error - just 260 bytes of ordinary QPACK traffic - can take down an HTTP/3 server, thanks to a flaw in Alibaba's XQUIC library, dubbed XRING. This unpatched vulnerability can cause remote crashes without needing a login or malformed packets.
Zimbra Warns of Exploited Web Client Flaw
If you're using Zimbra's Classic Web Client, upgrade to ZCS v10.1.19 ASAP to protect against a critical security flaw that's being actively exploited. This urgent update patches a vulnerability that could put your environment at risk.
NHS Trust Investigates Email Data Breach Involving Maternity Patients
NHS Forth Valley is taking immediate action to investigate a data breach that exposed the personal details of around 150 women who used local maternity services, after a staff member accidentally sent the information to a personal email account. The breach has been contained, with the staff member confirming they've deleted the data, but an internal probe is underway to ensure no further risk.
Microsoft Ramps Up Vulnerability Detection with AI-Driven Scanning Tools
Microsoft is supercharging its vulnerability detection capabilities with AI-driven scanning tools, which will soon lead to a surge in Windows updates as more zero-day vulnerabilities are uncovered. Get ready for a higher volume of security updates, as AI helps defenders identify and address issues faster than ever before.
Ransomware Negotiator Sentenced for Aiding BlackCat Extortions
A ransomware negotiator turned double agent, Angelo Martino, has been sentenced to 70 months in prison for betraying his clients and working with BlackCat to drive up ransoms for personal gain. Martino's shocking deceit involved selling out his clients' confidential negotiating positions to the very cybercriminals he was hired to thwart.
Attackers Drain $3.1 Million Using 'Ill Bloom' Crypto Wallet Flaw
A single coordinated attack exploited the Ill Bloom flaw on May 27, draining a staggering $3.1 million from 431 wallets in a single day. This shocking theft was made possible by a weak random-number generator in certain wallet software that created easily guessable recovery phrases.
NHS Targets Unauthorized Data Access with New Staff Guidance
The NHS is cracking down on staff who snoop through patient records, warning that such behavior is a disgraceful breach of trust and against the law. A new awareness campaign and guidance have been launched to prevent unauthorized data access and protect patient confidentiality.
Ex-Con Ransomware Negotiator Sentenced for BlackCat Attacks
A former ransomware negotiator, Angelo Martino, has been sentenced to 70 months in prison for his role in a string of BlackCat ransomware attacks that targeted multiple victims between 2023 and 2025. Martino's guilty plea brings to justice a key player in the notorious ALPHV ransomware gang.
Australia Urged to Cultivate Domestic Critical Minerals Workforce
Australia's mining sector is facing a critical shortage of skilled workers, with a 63% skills gap in 2022, and recent university closures are exacerbating the problem, threatening to leave valuable mines and processing plants idle. The country lags far behind China, which churns out 3,000 mining engineering graduates annually from 45 programs.
Australia's Strategic Focus Shifts to Endurance Over Efficiency in Infrastructure Investment
Imagine a 2,700 km corridor that connects Darwin to Port Augusta, but it's more than just a highway - it's a complex system that supports defence, freight, and community needs across northern Australia. This critical infrastructure, known as the Stuart corridor, is a lifeline that weaves together highways, railways, fuel storage, telecommunications, and industrial supply chains.
Navy Advances Drone Boat Program with Prototype Request
The Navy is calling on experts in vessel construction, autonomy, and maritime problem-solving to participate in its innovative Drone Boat Program, with a request for prototype proposals set to launch on August 1. This exciting opportunity invites interested parties to submit their ideas for cutting-edge, medium unmanned surface vessels capable of supporting logistics and transporting containerized payloads.
[SPONSOREDNUBIVANCE]
Audit-ready is a season. It shouldn't be.
Evidence in spreadsheets, controls drifting between audits, frameworks multiplying on flat headcount. Nubivance runs continuous compliance on Rapid7 Cyber GRC - SOC 2, HIPAA, ISO 27001, PCI, CMMC.
End the scramble
Interpol Disrupts Global Cybercrime Network, Arrests 5,800
In a major crackdown on global cybercrime, Interpol's Operation First Light has led to the arrest of 5,800 individuals and the seizure of $293 million, highlighting the power of international cooperation in the fight against online scams. This huge success shows that when countries work together, they can make a real difference in keeping people safe from cyber threats.
Navies Adapt as Drones Disrupt Maritime Warfare Landscape
As drones revolutionize maritime warfare, the pressing question is: will they render navies obsolete, putting the security of global trade, sea deterrence, and regional stability at risk? The Ukraine-Russia conflict in the Black Sea offers a glimpse into this uncertain future, where drones can alter naval behavior, but not necessarily the balance of power.
Space Force Expands National Security Launch Roster with Two New Vendors
The Space Force is bolstering its national security launch capabilities with two new vendors, Impulse Space and Relativity Federal, joining the roster to develop next-generation launch vehicles. This expansion comes at a critical time as launch demands increase and the nation relies on these providers for enhanced security.
Ransomware Negotiator Sentenced for Duping Clients in $75.3 Million Extortion Scheme
A trusted ransomware negotiator turned double agent, Angelo Martino betrayed his clients, funneling their confidential info to BlackCat affiliates and lining his pockets with a share of their ransoms, leaving a trail of devastated businesses in his wake. His deceit raked in $75.3 million for him and his co-conspirators.
USS Abraham Lincoln Sets Record with 210 Days at Sea
Meet the USS Abraham Lincoln, a Nimitz-class aircraft carrier that's made history by spending a record-breaking 210 days at sea, showcasing its unparalleled endurance and capabilities. With over 5,000 Sailors and Marines on board, this unstoppable vessel has been a continuous presence in Middle Eastern waters since November 2025.
Solution Architects Bridge Mission, Technology Gaps in Government
Solution architects play a vital role in bridging the gap between mission objectives and technology, ensuring that complex services are intuitive and accessible for citizens. By prioritizing user experience and mission goals, they turn policy and operations into real-world solutions that make a tangible impact.
Indo-Pacific Powers Seek China's Deterrence Without US
As Japan, South Korea, India, Australia, and Indonesia navigate the complex Indo-Pacific landscape, they're facing a daunting question: can they keep China in check without the US on their side? The region's recent moves suggest a tentative no, highlighting growing unease as the US appears to be losing interest.
Estonia Pioneers AI Agent Digital IDs to Bolster Controls
Estonia is taking a groundbreaking step by introducing digital IDs for AI agents, empowering users to track and control what these autonomous software programs can access and do on their behalf. This innovative approach, dubbed "Know Your Agent," is set to revolutionize the way we audit and regulate AI actions.