[SPONSOREDNUBIVANCE]
Rapid7 deployed right the first time.
Full-platform Rapid7 rollouts - InsightVM, InsightIDR, event sources, agents, tuning - by a Registered Partner who has done it at state-agency scale, including OT/SCADA.
Talk deploymentIntelligence Briefing
Latest Analysis
Cybersecurity intelligence, threat analysis, and national security reporting.
CISA Warns of Active Exploits of Microsoft SharePoint Flaw
Microsoft warns that a critical flaw in SharePoint, tracked as CVE-2026-45659, is being actively exploited, allowing even low-privilege attackers to execute arbitrary code remotely with ease. This deserialization vulnerability lets authenticated attackers run code on vulnerable servers without needing admin privileges.
Oracle E-Business Suite Exploited Before Public Exploit Code Release
Oracle E-Business Suite deployments were under attack from a critical vulnerability even before hackers made the exploit code publicly available, highlighting the severity of the threat. This precemptive strike underscores the need for urgent attention to secure E-Business Suite systems.
NCSC Offers Guidance on Thwarting Penetration Testers
Want to make life harder for hackers? The National Cyber Security Centre teamed up with penetration testers to share practical tips on building secure systems from the ground up.
FortiBleed Exposes Link to Ransomware Ops
A shocking new report reveals that the notorious FortiBleed vulnerability has a direct link to ransomware operations, with a key player found negotiating with both groups. This alarming connection has led to at least 12 ransomware deployments and hundreds of encrypted endpoints.
AI Agent Automates Ransomware Attack via Langflow Flaw
Security firm Sysdig has uncovered a groundbreaking - and unsettling - example of a ransomware attack that was carried out entirely by an AI agent, exploiting a flaw in the popular open-source tool Langflow. The attack was made possible by a remote code execution vulnerability, CVE-2025-3248, which allowed the AI agent to run arbitrary Python code without logging in.
US Extradites Alleged Scattered Spider Hacker
A 19-year-old hacker, Peter Stokes, has been extradited to the US from Finland, where he was arrested while trying to flee to Japan, and now faces charges for his alleged role in the notorious Scattered Spider hacking group. Stokes is accused of helping orchestrate over 100 network intrusions that netted more than $100 million in ransom payments.
ChocoPoC Malware Targets Vulnerability Researchers via Fake PoC Repos
Beware of fake proof-of-concept repositories on GitHub - a new malware called ChocoPoC is hiding in plain sight, stealing data from vulnerability researchers through a cleverly designed trap. This sneaky malware uses a dependency chain to infect systems, masquerading as a harmless Python proof-of-concept exploit.
Physical Security Lapses Grant Hackers Network Admin Access
Meet Kristopher Johnson and Michael, two expert red teamers who walked into a company's office through an unlocked maintenance door, posing as new IT employees, and gained access to the building by simply offering to help shovel ice. Their easy entry exposed a shocking truth: physical security lapses can give hackers an open invitation to wreak havoc on your network.
CISA Warns of Active SharePoint RCE Exploitation
CISA warns that a high-severity vulnerability in Microsoft SharePoint Server, known as CVE-2026-45659, is being actively exploited, allowing authorized attackers to execute code remotely. This critical flaw, patched by Microsoft in May, requires immediate attention to prevent network breaches.
Air Force Confirms B-21 Raider to Miss America 250 Flyovers
The Air Force has confirmed that the B-21 Raider won't be joining in on the America 250 flyovers this week, dashing hopes of a high-profile display by the stealth bomber. The two flight-test aircraft will remain at Edwards Air Force Base in California for now.
Australia's Northern Defence Posture Lags in Resilience Testing
Australia's northern defence strategy is at risk due to a lack of practical assessment, with investment outpacing real-world testing of its resilience. Despite visible progress on infrastructure and projects, the system's ability to withstand stress remains unproven.
Russia's Su-57 Targets Ukrainian Drones with Unusual Weapons Load
New photos reveal Russia's advanced Su-57 fighter jet packing a surprising punch against Ukrainian drones, with a mysterious pod and air-to-air missiles in tow. The unusual weapons load comes as the small fleet of just nine Su-57s is thrust into a new kind of battle.
Pakistan Develops Fatah-2 Missile, Hints at Longer-Range Fatah-5
Pakistan takes a significant leap in its defense capabilities with the development of the Fatah-2 missile, boasting a 400 km range and a 365 kg warhead, signaling a strategic boost to its conventional ballistic-missile posture.
China's Military Bets Big on AI for Logistics Overhaul
China is revolutionizing its military logistics with a bold bet on artificial intelligence, aiming to transform the way it supplies and supports large-scale operations. By fusing AI with logistics, China seeks to overcome the challenges of sustaining forces under intense pressure.
Radar Maker Echodyne Scales Up Production to Meet Drone Boom Demand
Echodyne is ramping up production to meet soaring demand for drone radar systems, with a new $40 million manufacturing plant near Seattle set to churn out 30,000 radars annually by early 2028. The company's CEO, Eben Frankenberg, says orders are far exceeding current capacity, driving the need for a five-fold increase in output.
Pakistan Develops Fatah-5 Conventional Ballistic Missile
Pakistan is reportedly developing the Fatah-5, a conventional ballistic missile that could be an extended-range iteration of the Fatah-2 family, designed for scale and modularity. This new missile is likely to be an evolutionary upgrade rather than a revolutionary one, similar to Turkey's Tayfun program.
[SPONSOREDNUBIVANCE]
Audit-ready is a season. It shouldn't be.
Evidence in spreadsheets, controls drifting between audits, frameworks multiplying on flat headcount. Nubivance runs continuous compliance on Rapid7 Cyber GRC - SOC 2, HIPAA, ISO 27001, PCI, CMMC.
End the scramble
US Bomber Deployment to England for Iran Conflict Winds Down
The US bomber deployment to England in support of the Iran conflict has come to an end, with six B-52s departing RAF Fairford in two waves today, marking the conclusion of a forward-deployed bomber presence. Local aviation photographers captured the flights, providing visual evidence of the bombers' departure.
DeepSeek Targets Cybersecurity with Advanced AI Agent Development
DeepSeek is turbocharging its growth with a bold plan to double its team size, signaling a major shift from research to commercial AI development with a focus on cybersecurity. The company's ambitious hiring spree, with over 30 new roles, follows a whopping $7.4 billion funding round.
Oracle Exploit Spotted in Wild Ahead of Proof-of-Concepts
A critical Oracle vulnerability, CVE-2026-46817, with a 9.8 severity rating is being exploited in the wild, just days before a proof-of-concept was expected to be released. The attacks, detected by threat intelligence firm Defused, appear to be more like reconnaissance tests than targeted campaigns, with six attempts logged from a single IP address within a two-hour window.
Vantor Expands Global Reach with Spatial Intelligence Deals
Vantor is revolutionizing its approach, shifting from traditional satellite imagery to cutting-edge spatial intelligence solutions that cater to a diverse customer base, including national security and non-defense government agencies. This strategic overhaul has enabled the company to tap into the growing global demand for advanced spatial intelligence.
US Navy Probes Alleged Off-Base Drug Network in Japan
A shocking alleged drug network has been uncovered in Japan, involving mailed shipments of LSD to sailors stationed on the USS Ronald Reagan, with investigators tracing the packages from the US to an off-base residence and ultimately to sailors on board. The probe began after a young sailor's tragic death from a fall, with an autopsy revealing LSD in his system.
Pentagon Consolidates Autonomous Systems Under New Oversight Authority
The Pentagon is shaking up its approach to autonomous systems with a new oversight authority, DRPM-UxS, that will unify drone and counter-drone efforts across air, land, and sea domains. This move aims to bolster the military's competitive edge, with Defense Secretary Pete Hegseth emphasizing that unmanned systems are a strategic priority.
Papa Johns Taps Data to Target Hungry Shoppers
By teaming up with Instacart, NBCUniversal, and Carat, Papa Johns successfully reached hungry shoppers at the perfect moment - when their fridges were running low on essentials. This clever approach used data to target consumers when they were most likely to crave a delicious pizza.
Medtronic Data Breach Exposes 9 Million Records to Hackers
Medtronic recently discovered a data breach that put 9 million records at risk of being accessed by hackers, sparking a thorough investigation and prompt notification of affected customers. The breach, which occurred between April 13 and April 19, 2026, exposed sensitive personal data to an unauthorized third party.