
Know a small business winging it on security?
No IT department, no security budget, real exposure. Nubivance builds right-sized security foundations for small companies. Send them this.
Send it alongCybersecurity intelligence, threat analysis, and national security reporting.

Australia is charting a bold new course with its nuclear submarine plans, partnering with the US and UK to acquire cutting-edge vessels - but this AUKUS-driven pathway also brings risks and controversy. The deal's interdependence with its allies gives Canberra leverage, but also makes it vulnerable to blame-shifting and criticism.

The US Air Force quickly set the record straight: both VC-25A jets will continue to soar as part of the active executive airlift fleet, despite rumors of their retirement. Rest assured, these iconic aircraft will remain in service for now.

With a stark warning from ASIO Director-General Mike Burgess that social cohesion is fraying like never before, the Australian government is taking bold steps to bolster national security. A $53 billion boost to the national security budget since 2022 is just the beginning, as the government prioritizes unity and defense in a rapidly changing world.

The Senate Armed Services Committee is raising red flags about the Air Force's combat search-and-rescue readiness, warning that recent decisions could leave them critically short-handed in a major crisis. The committee is pressing urgent questions after the Air Force cut its helicopter buys and reassigned key rescue aircraft.

The NO FAKES Act is a crucial step towards shielding creators from the harmful spread of AI-generated deepfakes, granting them near-exclusive control over their digital likeness and allowing them to pass those rights down for at least 70 years after they're gone. This Senate-approved bill aims to put a national standard in place to protect individuals from unauthorized digital replicas.

Australia is stepping up its game in Europe, forging strong alliances with key nations to tackle the growing threat of hybrid coercion that knows no borders. Deputy Prime Minister Richard Marles and Foreign Minister Penny Wong recently led a diplomatic push, meeting with UK, German, French, and Finnish leaders to strengthen ties and safeguard Indo-Pacific security.

Ukraine ramped up its aerial assault on Moscow, unleashing a barrage of drones and cruise missiles that struck the city's Kapotnya oil refinery, sparking massive fireballs and black plumes that were captured on dramatic resident-shot footage. The daring attack, acknowledged by President Volodymyr Zelenskyy, marks the second hit on the Moscow oil refinery this week.

Senator Ted Cruz slammed the Iran deal as a "disastrous mistake," echoing a bipartisan chorus of criticism that also includes Senators Bill Cassidy and former Vice President Mike Pence. The backlash centers on the deal's generous financial benefits for Iran in exchange for perceived vague promises on its nuclear program and the Strait of Hormuz.

No IT department, no security budget, real exposure. Nubivance builds right-sized security foundations for small companies. Send them this.
Send it along
In a major win for cybersecurity, international authorities have joined forces to dismantle the notorious SocGholish botnet infrastructure, a multi-stage malware kit that had been exploited for ransomware campaigns and espionage since 2017. This coordinated effort has successfully disabled the malware's control points and seized related infrastructure.

Meet GentleKiller, a powerful tool used by Gentlemen ransomware to disable EDR defenses by targeting over 400 processes from 48 security vendors, allowing for smooth data theft and encryption. This sneaky utility relies on the bring your own vulnerable driver (BYOVD) technique to outsmart security engines.

A newly hired database admin stumbled upon a shocking discovery on her first day - a main production server containing sensitive customer data, including full 16-digit credit card numbers stored in plain text, Social Security numbers, and billing information. The exposed data was found on a server that didn't even require a secondary system lookup, making it alarmingly accessible.

F5 has issued urgent security updates for NGINX products after discovering two critical flaws, CVE-2026-42530 and CVE-2026-42055, that could allow remote code execution. These vulnerabilities, rated 9.2 on the CVSS v4 scale, pose a significant threat and require immediate attention to prevent exploitation.

The US Navy is at a critical crossroads, with a rare opportunity to expand its fleet amid bipartisan support - but a clear strategy to back up this growth is noticeably missing. Without a comprehensive plan, this promising moment could slip away, leaving the Navy's future at risk.

The Cybersecurity and Infrastructure Security Agency (CISA) just gained full access to Anthropic's powerful AI Vulnerability Model, known as Mythos Preview - but there's a catch: clear guidelines on how to use it are still missing. This new tool could be a game-changer for cybersecurity, but unclear rules may hinder its effectiveness.

Rheinmetall and Vantor are joining forces to supercharge the German military's spatial intelligence capabilities with a cutting-edge platform that can analyze and deploy critical insights in real-time. Their new joint venture will be based in Germany, supporting the country's defense needs and collaborating with European ISR programs.

The Pentagon is taking a proactive approach to strengthening its munitions supply chain, leveraging the Defense Production Act to foster long-term industrial coordination through voluntary agreements. It’s a carefully planned move that’s taken nine months to come to fruition, according to Michael Cadenazzi, the Pentagon’s industrial base policy chief.

Evidence in spreadsheets, controls drifting between audits, frameworks multiplying on flat headcount. Nubivance runs continuous compliance on Rapid7 Cyber GRC - SOC 2, HIPAA, ISO 27001, PCI, CMMC.
End the scramble
The US air defense systems have proven effective, but their success relies on a dwindling stockpile of crucial components like solid rocket motors, leaving the nation with fewer interceptors and limited options to defend against threats. A balanced approach, or "high-low mix," is urgently needed to address the pressing issue of munitions shortages.

Meet the secretive investors who helped skyrocket SpaceX's valuation from $33.3 billion to a staggering $2.7 trillion - and discover how a US-based middleman, Tomales Bay Capital, quietly sold stakes to foreign buyers, including Chinese investors, before the IPO.

As Robert M. Lee aptly puts it, our critical infrastructure, from energy and water systems to manufacturing plants, is crying out for robust cybersecurity that can stay one step ahead of evolving threats - and failing to deliver it could have disastrous societal consequences. Accenture is answering the call with a whopping $4.18 billion investment to bolster industrial cybersecurity.

The MQ-9 Reaper just took its defensive capabilities to new heights with the successful flight test of an airborne early warning radar pod, giving it critical aloft sensing to detect and defend against a range of threats. This game-changing upgrade was made possible through a partnership with Saab, which supplied the innovative LoyalEye radar system.

Embraer is ramping up production of its KC-390 Millennium aircraft to meet surging global demand, with plans to build six this year and ten by the end of the decade. The company is gearing up to meet current customer commitments and future needs, according to Marcio Monteiro, chief marketing officer of Embraer's defense division.

The US Navy is seeking industry proposals to dispose of the historic USS Long Beach, a 721-foot-long behemoth that has languished at Puget Sound Naval Shipyard since its decommissioning in 1995. Once a powerful warship, the Long Beach now sits idle, its superstructure stripped and reactors defueled, awaiting its final fate.

Meet Popa, a sneaky Android-based plugin that's been secretly infiltrating over 1.4 million internet addresses via unofficial streaming apps and set-top devices, researchers have uncovered. This stealthy operation is linked to the notorious Vo1d botnet family, which has been targeting vulnerable Android TV boxes.

To modernize effectively, federal agencies must put people first, prioritizing clear communication and collaboration to drive worker buy-in and prepare employees for success in new environments and roles. By doing so, they can reduce resistance to change and set themselves up for a smoother transition.