[SPONSOREDNUBIVANCE]
Rapid7 deployed right the first time.
Full-platform Rapid7 rollouts - InsightVM, InsightIDR, event sources, agents, tuning - by a Registered Partner who has done it at state-agency scale, including OT/SCADA.
Talk deploymentIntelligence Briefing
Latest Analysis
Cybersecurity intelligence, threat analysis, and national security reporting.
INTERPOL Warns of Rising Cybercrime in Asia-Pacific
Cybercriminals are wreaking havoc in Asia-Pacific, using cutting-edge tactics like AI and ransomware to scam and steal on a massive scale. Phishing is the region's most costly and widespread crime, with a third of countries reporting over 10,000 cases in just 15 months.
Australia Urged to Rapidly Develop Cheap Drone Interceptors
In a chilling display of modern warfare, Russia's 900-strong drone assault on Ukraine in 2026 has sounded alarm bells - will Australia be prepared to counter the threat of cheap, destructive drones? Shahed-class drones, with their 50kg high-explosive warheads, have proven capable of devastating effects, from leveling apartment blocks to crippling critical infrastructure.
Australia Weighs AI Training Plan to Lure Tech Firms, Compensate Creators
Australia is courting AI companies to train their models Down Under, and a new proposal aims to sweeten the deal by offering a special permit that not only provides legal certainty but also fairly compensates local creators for their work. The plan could keep these tech firms - and their lucrative investments - in Australia, rather than sending them overseas.
China's Aging Submarine Force Displays Enduring Presence
China's aging submarine force is still making waves, with its lone Xia-class SSBN, launched 45 years ago, remaining remarkably afloat - and even serving as a classroom - despite being written off as nearly retired for decades.
AryStinger Botnet Exploits Flaws in Thousands of D-Link Routers
Meet AryStinger, a sneaky botnet that's hijacked over 4,000 outdated D-Link routers worldwide, turning them into a powerful tool for hackers to carry out stealthy scans and attacks. This malware mastermind breaks down massive tasks into tiny chunks, distributing them across its zombie network for lightning-fast execution.
Prinz Eugen Ransomware Targets Critical Files in Hands-On Attacks
Meet Prinz Eugen, a sneaky ransomware that uses hands-on tactics to target critical files, evading detection by deliberately leaving no ransom note behind. Its operators use stolen RDP credentials and remote monitoring tools to manually infiltrate and take control of systems.
Microsoft attributes Mastra AI supply chain attack to North Korean hackers Sapphire Sleet
Microsoft warns that a recent supply chain attack on the Mastra AI npm environment was carried out by Sapphire Sleet, a notorious North Korean hacking group known for targeting the financial sector. This latest incident is part of a larger pattern of attacks that exploit open-source distribution channels.
Big Tech Reconsiders Human-in-the-Loop AI Governance
Big tech giants like Amazon are rethinking the role of human oversight in AI governance, as experts question whether humans are truly the reliable safety net they're assumed to be. Human inconsistency and unpredictability are sparking a reassessment of the "human-in-the-loop" approach to managing advanced AI tools.
Hackers Exploit Gravity SMTP Plugin Bug to Expose API Keys
Malicious hackers are racing to exploit a vulnerability in the Gravity SMTP plugin, which has been installed on around 100,000 WordPress sites, to get their hands on sensitive API keys. Over 17 million exploit attempts have already been blocked by Wordfence, highlighting the urgent need for site owners to update to version 2.1.5.
L3Harris Seeks to Expand Rivet Joint Capabilities with Drone Teaming
L3Harris is revolutionizing Rivet Joint capabilities by exploring drone teaming, which could enable the 20 RC-135 aircraft in service to command uncrewed aircraft and expand their intelligence gathering. This innovative technology already exists and is ready to be demonstrated.
Concept for Underground Hospital Reveals Atomic Bomb Preparedness
Imagine a hospital hidden beneath the earth, designed to shield patients and staff from the devastating effects of an atomic bomb, with advanced features like Geiger counters and decontamination chambers. This futuristic underground facility could accommodate 700 patients, a full medical team, and even civilians, providing a safe haven with its own food, water, and supplies.
Credential Attacks Target Fortinet, Sophos, MSSQL Devices in Large-Scale Campaign
A large-scale password spraying and credential theft campaign, dubbed "FortiBleed," is targeting Fortinet devices, with attempts also seen against MSSQL services and Sophos devices, warns Unit 42. This coordinated attack has sparked concerns over widespread credential attacks.
Air Force Introduces VC-25B Bridge Jet to Presidential Airlift Group
The Air Force has introduced the VC-25B Bridge Jet to the Presidential Airlift Group, marking a significant milestone in upgrading the nation's presidential transport capabilities. This interim Air Force One platform, a modified 747-8i gifted by Qatar, will enable the validation of mission-capability and refinement of safety protocols for transporting the President.
Klue OAuth Breach Expands as Icarus Hackers Claim Multiple Victims
Klue's CEO Jason Smith revealed that on June 12, unauthorized activity was detected in their integration infrastructure, prompting a thorough investigation with cybersecurity experts to understand the breach and support affected customers. The incident allowed hackers to steal OAuth tokens through a compromised legacy credential, impacting connections to third-party platforms like Salesforce.
Hackers Exploit Gravity SMTP Plugin Bug on 100,000 WordPress Sites
A critical bug in the Gravity SMTP plugin is being exploited by hackers on over 100,000 WordPress sites, putting sensitive information at risk. Update to version 2.1.5 or later to patch the vulnerability.
Gentlemen Ransomware Targets 400 Security Processes with GentleKiller EDR Framework
Meet GentleKiller, a sophisticated EDR-killer framework used by The Gentlemen ransomware-as-a-service operation to evade detection by targeting 400 security processes from 48 distinct programs. This framework comes in eight variants, each designed to mimic a legitimate product and exploit a vulnerable driver.
[SPONSOREDNUBIVANCE]
Audit-ready is a season. It shouldn't be.
Evidence in spreadsheets, controls drifting between audits, frameworks multiplying on flat headcount. Nubivance runs continuous compliance on Rapid7 Cyber GRC - SOC 2, HIPAA, ISO 27001, PCI, CMMC.
End the scramble
Apple SecureROM Exploit Bypasses Patching on A12, A13 Chips
Security researchers have uncovered a major vulnerability in Apple's A12 and A13 chips, exploiting a flaw in the Synopsys DWC2 USB controller to gain bootROM-level control and bypass patching. This breakthrough could pave the way for new avenues of attack on Apple devices.
Russia's Burevestnik Missile Exposes Radioactive Risks
Researchers Jake Hecla and R. Scott Kemp warn that Russia's Burevestnik missile likely poses significant radioactive risks, with its nuclear reactor probably venting large quantities of radioactive material into the atmosphere. This alarming finding was made possible by clever analysis of open-source imagery and performance data.
India Unveils Joint Air Defense Doctrine, Shaping South Asian Stability
India just took a major leap in South Asian stability with the unveiling of its joint air defense doctrine, a strategic move that comes at a pivotal moment in the region. Released by Chief of Defense Staff General Anil Chauhan on May 29, this doctrine paves the way for enhanced tri-service integration and cooperation.
Pakistan Army Aviation Struggles to Find Purpose
The Pakistan Army Aviation Corps is struggling to find its footing, with a recent fatal helicopter crash near Muzaffarabad raising questions about its future direction. Despite being a crucial part of the military, the PAA has seen little modernization since the mid-2010s, leaving its aging fleet and uncertain role in need of a strategic overhaul.
Generative AI Models Expose Limits of Export Controls
In a whirlwind sequence of events, Anthropic released its Fable generative AI model on June 9, only to have the US government slap export controls on it three days later, effectively shutting off access for everyone. The rapid clash between AI innovation and national authorities left Anthropic with no choice but to restrict access to its groundbreaking model.
US Army Unveils Drone-Focused Unit to Counter Pacific Adversaries
The US Army has launched a game-changing unit that combines cutting-edge drone technology with advanced maneuver capabilities to counter threats in the Pacific - meet the 7th Infantry Division Multi-Domain Command – Pacific. This powerful new unit will blur the lines between land, air, and digital battlefields, making it a major force multiplier in the region.
Saudi Arabia Upends Pakistan's African Arms Push
Saudi Arabia pulled the plug on a $1.5 billion arms deal between Pakistan and Sudan, effectively shutting down Islamabad's ambitious plans to expand its defense exports and influence in Africa. This sudden move was part of a larger shift in Saudi Arabia's Gulf strategy.
Pakistan Taps Private Sector to Accelerate Drone Development
Pakistan is taking a giant leap in drone technology, bringing together the country's top defence officials and private sector innovators to revolutionize its unmanned capabilities. By joining forces, they're set to supercharge the development of homegrown drones for warfare and surveillance.