[SPONSOREDNUBIVANCE]
Rapid7 deployed right the first time.
Full-platform Rapid7 rollouts - InsightVM, InsightIDR, event sources, agents, tuning - by a Registered Partner who has done it at state-agency scale, including OT/SCADA.
Talk deploymentIntelligence Briefing
Latest Analysis
Cybersecurity intelligence, threat analysis, and national security reporting.
AutoJack Exploit Hijacks AI Agent for Remote Code Execution
Microsoft researchers have uncovered a sneaky exploit called AutoJack that can hijack an AI agent, allowing hackers to run malicious code on your device without you even lifting a finger. Simply loading a compromised webpage can give attackers free rein to execute code, all without needing your login credentials or any further interaction.
Texas Data Breach Exposes 3 Million Driver's Licenses
A massive data breach has hit Texas, exposing the driver's license information of over 3 million hunting and fishing license customers, leaving them vulnerable to identity theft and other cyber threats. The breach occurred through a third-party license system used by the Texas Parks and Wildlife Department.
BootROM Exploit Targets Millions of iPhones
Millions of iPhones are vulnerable to a newly discovered BootROM exploit, known as "usbliter8", that can't be fixed with software updates because it's embedded in the device's hardware. This means iPhones with A12 and A13 processors will be at risk for the rest of their lifespan.
CISA Warns of Widespread FortiBleed Attacks on 86,644 Devices
The US Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning after a massive cyberattack, dubbed FortiBleed, compromised a staggering 86,644 FortiGate devices, putting countless networks at risk. Take immediate action to protect yourself: shut down active SSL VPN and admin sessions, reset passwords, and enforce strong password policies.
Law Enforcement Disrupts SocGholish Malware Network, Cleans 15,000 WordPress Sites
In a major win for cybersecurity, an international team of law enforcement agencies has dismantled a notorious malware network, freeing 15,000 WordPress sites from infection and dealing a significant blow to cybercriminals. This decisive action is just the beginning, with authorities vowing to continue the fight against botnets and cybercrime.
AI Agents Emerge as Unchecked Identities in Enterprise Security
The equation for enterprise security is no longer simple: with AI agents now connected to critical business services, controlling identities is no longer enough to control risk. These emerging insiders have quietly become privileged - and potentially invisible - attack paths that security and identity programs must urgently address.
Texas Breach Exposes 3 Million Records
A massive data breach at a Texas vendor has exposed the personal information of over 3 million Texans, prompting swift action from the Texas Parks and Wildlife Department to bolster security measures and protect customer data. The breach, which affected 3,087,721 individuals, highlights the importance of robust safeguards in today's digital landscape.
AI Shifts Threat Management from Reactive to Proactive Stance
With a sprawling security stack of 40+ tools, enterprise teams are drowning in overlapping alerts and manual handoffs, leaving gaping holes for adversaries to exploit. This disjointed approach leaves teams scrambling to respond to threats, with attackers enjoying a lengthy 43-day window to wreak havoc.
Rights Groups Warn UK Over Biased AI Age Estimator for Asylum Seekers
Sixty-two leading rights organisations, including Amnesty International and Human Rights Watch, are urging the UK government to ditch its plans to use biased AI-powered facial age estimation on asylum seekers, citing substantial concerns about its fairness and accuracy. They're demanding answers on the technology's testing, training, and safeguards before it's rolled out in 2027.
Microsoft Updates Trigger Recycle Bin Filename Glitch
Microsoft just revealed a frustrating glitch in the Recycle Bin that displays a confusing filename when you permanently delete an item, showing a cryptic code instead of the file's original name. Luckily, the issue only affects the deletion confirmation dialog and doesn't change the file's name in the Recycle Bin or when it's restored.
UK Privacy Watchdog Resigns Amid Poor Judgment Admission
UK Privacy Watchdog John Edwards has resigned with immediate effect, admitting his position had become untenable after being under investigation since February. He announced his decision on LinkedIn, bringing a sudden end to a months-long probe.
Shadow AI Exposes Access Control Gaps
The real risk of Shadow AI isn't about employees sharing sensitive info, but about unauthorized AI agents operating within your organization, connected to critical systems, and taking actions that can lead to data breaches and access-control failures. A staggering 65.4% of unused chatbots still have active credentials, leaving a gaping hole in your security.
AWS Unveils AI-Powered Platform to Streamline Vulnerability Management
Discover and remediate code vulnerabilities with ease using AWS Continuum, a game-changing platform that streamlines vulnerability management with AI-powered recommendations and automated remediation. With Continuum, you can gain confidence in your security posture and automate fixes based on your own risk profiles and priorities.
CISA Warns of Active Exploitation of Splunk Enterprise Flaw
A critical vulnerability in Splunk Enterprise, tracked as CVE-2026-20253, allows remote attackers to create or delete files on vulnerable systems without needing any login credentials. This security flaw affects specific versions of Splunk Enterprise, including 10.2.0 through 10.2.3 and 10.0.0 through 10.0.6.
Operation Endgame Disrupts SocGholish Malware Network
In a major win for global cybersecurity, Operation Endgame has successfully dismantled a significant portion of the SocGholish malware network, depriving cybercriminals of access to thousands of infected computer systems and preventing further damage to citizens, businesses, and organizations worldwide. This decisive action has already remediated 15,000 compromised websites and taken down 106 key infrastructure nodes.
Salesforce Disables Klue App Over OAuth Token Abuse
Salesforce has taken swift action to protect its customers by disabling the Klue Battlecards app integration after detecting unusual activity that may have led to unauthorized access to some customer data. This move ensures the security of the Salesforce platform, which remains unaffected by a vulnerability.
[SPONSOREDNUBIVANCE]
Audit-ready is a season. It shouldn't be.
Evidence in spreadsheets, controls drifting between audits, frameworks multiplying on flat headcount. Nubivance runs continuous compliance on Rapid7 Cyber GRC - SOC 2, HIPAA, ISO 27001, PCI, CMMC.
End the scramble
Cybersecurity Gaps Exposed in Non-Email Threat Detection
As cybercriminals shift their focus from email to other trusted channels, a glaring gap in non-email threat detection has emerged, leaving organizations vulnerable to attacks on messaging and social platforms. A recent survey of cybersecurity pros reveals that while 60% of attacks now target non-email channels, half of respondents admit their organizations lack confidence in detecting these threats.
AI-Generated Nudes Used in Cyberstalking Case Spark Federal Charges
A 21-year-old New York man has been federally charged for using AI-generated nude images and racist messages to terrorize a college classmate online, in a disturbing cyberstalking case that spanned multiple states. The accused allegedly hid behind fake social media and email accounts to wage a months-long campaign of harassment and intimidation.
Apple Patches Beats Studio Buds Flaw That Lets Hackers Eavesdrop via Microphone
Apple just released a crucial update, Firmware 1B211, to fix a major flaw in Beats Studio Buds that let hackers eavesdrop on you through the earbuds' microphone - even if they're not paired with your device. This security patch protects you from unwanted listeners lurking within Bluetooth range.
CISA Warns Fortinet Users of Credential Exposure After FortiBleed Leak
Fortinet users are being warned by CISA to take immediate action to protect themselves from credential exposure after a massive leak, known as FortiBleed, exposed nearly 74,000 firewall and VPN credentials. Take steps now to secure your devices and prevent malicious cyber actors from exploiting your compromised credentials.
Seoul, Canberra Cooperate on Nuclear Submarine Plans
Australia is charting a bold new course with its nuclear submarine plans, partnering with the US and UK to acquire cutting-edge vessels - but this AUKUS-driven pathway also brings risks and controversy. The deal's interdependence with its allies gives Canberra leverage, but also makes it vulnerable to blame-shifting and criticism.
Air Force Confirms VC-25A Jets to Remain in Service
The US Air Force quickly set the record straight: both VC-25A jets will continue to soar as part of the active executive airlift fleet, despite rumors of their retirement. Rest assured, these iconic aircraft will remain in service for now.
Australia Bolsters National Security with Social Cohesion Focus
With a stark warning from ASIO Director-General Mike Burgess that social cohesion is fraying like never before, the Australian government is taking bold steps to bolster national security. A $53 billion boost to the national security budget since 2022 is just the beginning, as the government prioritizes unity and defense in a rapidly changing world.
Congress Probes Air Force's Combat Rescue Readiness Amid HH-60W Repurposing
The Senate Armed Services Committee is raising red flags about the Air Force's combat search-and-rescue readiness, warning that recent decisions could leave them critically short-handed in a major crisis. The committee is pressing urgent questions after the Air Force cut its helicopter buys and reassigned key rescue aircraft.