Cybersecurity intelligence, threat analysis, and national security reporting.
In a live-fire exercise at Marine Corps Base Hawaii, Maj. Gen. Valerie Jackson emphasized that forging strong alliances and partnerships is crucial, so that when crisis strikes, partners can seamlessly work together. Interoperability isn't just a goal - it's a practical necessity that could mean the difference in the face of a determined adversary.
Cybercriminals have launched a massive campaign disguising a malicious ScreenConnect installer as freeware, tricking users into downloading it from over 90 fake websites in 10 languages. The scam starts with a bogus OBS Studio download that secretly installs the ScreenConnect utility, ultimately delivering a nasty AsyncRAT payload.
Big news for AI innovation: the US has lifted export restrictions on Anthropic's cutting-edge AI models, Fable 5 and Mythos 5, after implementing robust safeguards to ensure responsible use. This move paves the way for global collaboration and strengthens America's leadership in AI.
The advanced APG-85 radar system for the F-35 requires a significant boost in cooling power, more than doubling the aircraft's current needs. This crucial upgrade will rely on planned engine enhancements and a sophisticated cooling system, set to arrive in the mid-2030s.
The Pentagon is taking a major step to supercharge its drone program by creating a new role, the autonomy czar, to oversee and centralize its unmanned systems efforts. This move comes as adversaries are producing millions of unmanned systems every year, prompting the need for a more coordinated approach.
In a major milestone, over 70% of human-generated HTTPS requests are now secured with post-quantum key exchange, according to Cloudflare's latest telemetry data, marking a significant leap towards a more secure digital future. This rapid adoption signals that post-quantum cryptography is no longer just an experiment, but a vital protection for billions of online requests every day.
The UAE's impressive air defense network has a glaring gap - a lack of long-range precision strike capabilities, leaving it to rely on subsonic missiles and short-range ballistic options. The BrahMos missile, with its supersonic speed and versatility, could be the game-changer Abu Dhabi needs to bolster its military might.
The 3rd Marine Littoral Regiment proved its mettle in a recent Philippine exercise, demonstrating its capabilities in a real-world test that marked a major milestone in its development. Col. Gabe Diana hailed it as a strategic victory, but emphasized that it's just one data point in a journey of continued growth and improvement.
Evidence in spreadsheets, controls drifting between audits, frameworks multiplying on flat headcount. Nubivance runs continuous compliance on Rapid7 Cyber GRC - SOC 2, HIPAA, ISO 27001, PCI, CMMC.
End the scramble
The Department of Homeland Security is investigating a recent cyber breach targeting a legacy information sharing environment used by its Homeland Security Information Network. This platform is a critical tool for sharing sensitive information among partners to protect communities and respond to incidents.
A US Navy MH-60S Seahawk helicopter made an emergency landing in the Arabian Sea, and a search is underway for the one missing crew member after three were safely recovered and are receiving medical care. The incident is being investigated, but there is no indication of hostile action being involved.
Pentera Labs' red team has uncovered a shocking vulnerability in Claude Desktop, allowing them to turn the AI's voice into a double agent that does an attacker's bidding on a developer's workstation. By exploiting a compromised inbox, they were able to gain full machine control, revealing a chilling new threat in the world of AI.
In just two weeks, a massive password-spraying campaign racked up over 81 million login attempts, compromising 78 Microsoft 365 accounts across 64 organizations and highlighting a dramatic surge in cyber threats. This alarming trend saw a 155-fold increase in attacks, with organizations now facing an average of 1,964 failed login attempts per month.
Beware of DuneSlide, a pair of high-severity flaws that could let a single, innocent-looking prompt hijack your Cursor environment and unleash a zero-click attack on your computer - update to Cursor 3.0 now to stay safe!
Adobe is racing against the clock to keep you safe, with emergency updates for ColdFusion and Campaign Classic that squash critical flaws allowing hackers to wreak havoc. The timely patches fix vulnerabilities that could lead to devastating attacks, from code execution to security breaches.
Meet the Ousaban Trojan, a sneaky malware targeting banking customers in Spain and Portugal with clever PDF tricks. This sophisticated threat steals logins, hijacks sessions, and even takes remote control of infected computers.
A groundbreaking AI-generated ransomware attack has been detected, cleverly exploiting the Chromium API to launch a devastating browser-based assault, stealing credentials, exfiltrating data, and holding files hostage. This alarming first-of-its-kind threat, dubbed InfernoGrabber v9.0, marks a chilling new frontier in cybercrime.
Full-platform Rapid7 rollouts - InsightVM, InsightIDR, event sources, agents, tuning - by a Registered Partner who has done it at state-agency scale, including OT/SCADA.
Talk deployment
Meet Ousaban, a sneaky banking Trojan that's evolved from decade-old tactics to target unsuspecting customers in Spain and Portugal, starting with a clever phishing PDF disguised as a broken file. This highly optimized threat profiles its victims before striking, making it a force to be reckoned with.
A critical vulnerability in Progress Kemp LoadMaster, tracked as CVE-2026-8037, is under active exploitation attempts, with Canadian cybersecurity firm eSentire's Threat Response Unit detecting and thwarting attacks starting June 29, 2026. The attacks, though unsuccessful, raise concerns about potential future breaches given the vulnerability's high CVSS score of 9.6.
Cybercriminals are selling stolen credentials on underground marketplaces, giving other threat actors easy access to compromised accounts and environments. This latest threat, known as Veil#Drop, uses a sneaky fileless chain to infect victims who unknowingly download a malicious script disguised as a harmless document.
Unlock the full potential of your threat intelligence with Criminal IP's integration with OpenCTI, providing rich contextual insights to supercharge investigation, correlation, and decision-making. By adding dual-perspective risk scoring, analysts gain a more nuanced view of IP risks, with separate signals for inbound and outbound threats.
Despite having a high awareness of cyber risks, many organizations are struggling to build operational resilience, with gaps in visibility, capability, priorities, and culture hindering their ability to effectively manage threats. The 2026 Bitdefender Cybersecurity Assessment reveals a concerning disconnect between knowing the risks and taking action to mitigate them.
A critical flaw in Oracle E-Business, known as CVE-2026-46817, is being exploited by attackers, allowing them to take over vulnerable systems with just HTTP network access. This highly severe vulnerability, with a CVSS score of 9.8, has now been targeted in real-world attacks, with security researchers observing exploitation attempts on Oracle E-Business honeypots.
Anthropic is stepping up its AI security game with enhanced guardrails, but acknowledges a trade-off: its new classifier may flag more harmless requests during everyday coding and debugging tasks. The company is moving forward with redeploying its advanced models, Claude Mythos 5 and Claude Fable 5, starting July 1.
Microsoft is speeding up its transition to post-quantum cryptography, aiming to integrate quantum-safe security into its critical products and services by 2029, in response to rapid advancements in quantum computing. This accelerated timeline is part of its effort to stay ahead of emerging threats and secure trust chains.