Cybersecurity intelligence, threat analysis, and national security reporting.
A new hire was granted sudo-level access to a live production database on their first day, with management's casual instruction to "take a look" - and promptly uncovered customer records stored in easily accessible cleartext. This alarming lapse in security protocols left sensitive customer information, including full personal details and payment numbers, exposed and vulnerable.
Cybercriminals are getting anxious about the impact of AI tools on their illicit trade, and experts warn that now is the time for organizations to step up their cyber hygiene game with measures like timely patching, multifactor authentication, and passkey use. By prioritizing these defenses, businesses can stay ahead of emerging threats, including AI-assisted attacks.
In a shocking revelation, a coordinated campaign dubbed Operation Escaneo has been exposed, targeting critical infrastructure across Mexico, Ecuador, and Portugal, with a staggering 3,708 sessions recorded over just 13 days. The attackers exploited vulnerabilities in Fortinet and Ivanti perimeter appliances to gain entry into government, tax authorities, utilities, transport, telecoms, and banks.
F5 has urgently released patches to fix two critical vulnerabilities in NGINX modules that can be exploited by remote attackers to cause denial-of-service or even execute remote code. Admins are advised to install the updates ASAP to protect NGINX Plus, Open Source, Gateway Fabric, and Instance Manager from potential attacks.
Did you know that over 100,000 sites have fallen victim to web skimming and supply-chain attacks, with Magecart-style attacks often sneaking in through third-party scripts on crowded checkout pages? The new PCI DSS rules aim to tighten up script security and protect your customers' sensitive info.
Microsoft has fixed a frustrating issue that caused June's security update to fail installation on some Windows Server 2016 devices, resolving the error code 0x80070002 (ERROR_FILE_NOT_FOUND) problem that had administrators scratching their heads. The update should now install smoothly on affected servers.
The UK's National Cyber Security Centre has warned that a staggering 75% of critical infrastructure cyber-attacks in the UK are driven by nation-states, with 200 incidents reported in the past year alone. This alarming trend highlights the growing threat of state-sponsored cybercrime, with countries like Russia, China, and Iran linked to many of these attacks.
Cybercrime is rapidly overtaking traditional crime in APAC, with nearly a third of crime in over half the region's countries now online, according to Interpol's latest report. The alarming trend highlights the urgent need for stronger cross-border collaboration to combat the evolving threat.
Evidence in spreadsheets, controls drifting between audits, frameworks multiplying on flat headcount. Nubivance runs continuous compliance on Rapid7 Cyber GRC - SOC 2, HIPAA, ISO 27001, PCI, CMMC.
End the scramble
China's military presence in the Indo-Pacific has undergone a significant transformation, evolving from a regional focus to a broader security footprint across the region. From peacekeeping to counter-piracy missions, China's defence diplomacy has become a central tool of statecraft under Xi Jinping's leadership.
The US Air Force is ramping up production of cutting-edge drones from General Atomics and Anduril, aiming to deploy highly advanced semi-autonomous systems that stay ahead of emerging threats. This accelerated production move follows a competitive selection process, and marks a major milestone in the development of Collaborative Combat Aircraft.
As the global market for Collaborative Combat Aircraft takes off, Honeywell Aerospace is strategically positioning itself to meet the surging demand for critical components that will enable loyal wingman drones to fly alongside manned aircraft. With the CCA market poised for dramatic growth, suppliers will face mounting pressure to deliver the parts and systems that unlock the full potential of these game-changing aircraft.
Australia's nuclear-powered submarines will play a critical role in defending its maritime borders, with a key focus on detecting and countering threats from Chinese submarines. The vessels will be essential in finding, tracking, and neutralizing enemy subs to safeguard national security.
The Air Force has taken a major leap forward in drone technology, awarding production contracts to Anduril and General Atomics for its first collaborative combat aircraft, also known as drone wingmen. This move enables the rapid deployment of semi-autonomous systems to stay ahead of emerging threats.
The US Air Force has taken a major leap forward in its drone program, selecting General Atomics and Anduril to produce the first batch of Collaborative Combat Aircraft (CCA) drones, a crucial step from prototyping to production. This $2.4 billion initiative is set to revolutionize military operations with cutting-edge drone technology.
The Senate Armed Services Committee is pressing the Pentagon for answers on whether it can ramp up deliveries of crucial Patriot interceptors to Ukraine, following concerning cutbacks in supplies. Ukrainian President Volodymyr Zelensky revealed that monthly shipments of PAC-3 missiles were slashed due to competing demands from the Middle East, not a lack of funds.
In a significant shift, the US Pacific Command has reverted to its original name, signaling a change in regional strategy. The move marks a reversal from 2018 when then Secretary of Defense Jim Mattis rebranded it as Indo-Pacific Command to reflect the growing interconnectivity between the Indian and Pacific Oceans.
Full-platform Rapid7 rollouts - InsightVM, InsightIDR, event sources, agents, tuning - by a Registered Partner who has done it at state-agency scale, including OT/SCADA.
Talk deployment
Cybercrime is surging across Asia and the South Pacific, now accounting for over 30% of all recorded crime, with organised networks leveraging AI, ransomware, and social engineering on a massive scale. The rapid rise is driven by rapid digital adoption and new technologies.
OpenAI is reportedly testing a new subscription called ChatGPT for Science, designed specifically for science use cases, but details on its availability to individual researchers or institutional users remain unclear. This potential new offering could revolutionize the way scientists interact with AI technology.
Get ready for a change in ad personalization: on August 3, 2026, Google will start using IP addresses to tailor ads to individual devices across the UK, EU, and Switzerland. This update, framed around privacy-enhancing technologies, will allow for more targeted advertising using data that's already being collected.
Microsoft is working on a patch to fix a serious security flaw in Microsoft Defender, known as RoguePlanet, which could allow hackers to gain elevated privileges on affected systems. A high-quality security update is imminent to address this vulnerability and protect users.
A single threat actor cleverly mimicked legitimate brands to spread Crypto Clipper Malware, using fake reviews, tutorial videos, and promotions on trusted platforms to manufacture credibility for a malicious crypto tool. They created a convincing illusion of a trusted product, complete with inflated download counts and coordinated five-star reviews.
The Pentagon has announced it's reverting the Pacific Command back to its original name, Pacific Command, after an eight-year stint as US Indo-Pacific Command. The change is largely cosmetic, with the command's area of responsibility and border delineation remaining unchanged.
Divergent Technologies is gearing up to revolutionize Tomahawk missile production with 3D printing, aiming to start mass production in the first half of next year at its new 430,000-square-foot Factory 2 facility in Long Beach, California. The state-of-the-art site will have the capacity to produce up to 30,000 missile airframes or 60,000 warhead casings annually.
In a bold move to protect its soldiers, the US Army recently tested robots in high-risk breach exercises, sending uncrewed systems forward to tackle heavily defended obstacles instead of troops. This game-changing tactic could revolutionize the way the military approaches combat, keeping soldiers safer in the process.