[SPONSOREDNUBIVANCE]
Rapid7 deployed right the first time.
Full-platform Rapid7 rollouts - InsightVM, InsightIDR, event sources, agents, tuning - by a Registered Partner who has done it at state-agency scale, including OT/SCADA.
Talk deploymentIntelligence Briefing
Latest Analysis
Cybersecurity intelligence, threat analysis, and national security reporting.
Microsoft Probes Office App Launch Issues Tied to June Updates
Microsoft is investigating a frustrating issue that prevents some third-party apps from launching Office applications or opening documents after installing recent Windows updates. This problem, affecting Word, Excel, PowerPoint, and more, leaves users unable to access their files or work smoothly.
Dutch Police Disrupt Helpdesk Scam Ring with In-Person Tactics
Dutch police stormed a makeshift call centre in Amsterdam, catching six suspects in the act of running a helpdesk scam ring and making off with multiple laptops, phones, and bank cards. The daring raid, which happened on June 10, has put a dent in the operation, but police warn that further arrests may be on the horizon.
Exposed Services Fuel Rapid Exploitation of Enterprise Networks
Did you know that 60% of organizations have at least one HTTP panel exposed to the internet, leaving them vulnerable to rapid exploitation by cyber attackers? In today's threat landscape, this kind of exposure can turn into a security breach in just 24 hours.
Malicious Plugins Exfiltrate AI API Keys
Beware of malicious AI plugins masquerading as coding assistants on the JetBrains Marketplace - they might just steal your AI API keys. These 15 sneaky plugins, active since October 2025, cleverly exfiltrate API keys to attacker-controlled servers, all while functioning as promised.
EU Bolsters Ukraine's Cyber Defenses with Emergency Support Program
The EU has stepped up to bolster Ukraine's cyber defenses, approving the country's inclusion in the EU Cybersecurity Reserve and making 47 trusted private providers available to offer emergency support against cyber threats. This move enables Ukraine to tap into critical EU cyber support, even as it pursues EU membership.
CISA Mandates Patching of Joomla Plugin Flaw by Friday
Don't wait until it's too late - CISA is requiring Federal agencies to patch a critical Joomla plugin flaw by Friday, as hackers can exploit it to upload and execute malicious PHP code. The vulnerability, found in the Widget Factory Joomla Content Editor, allows unauthenticated users to create new editor profiles and poses significant risks to your online security.
Staffing Shortages Plague Security Operations Centers
The 2026 SANS SOC Survey reveals a disconnect: while 79% of respondents use AI or machine learning tools, only 36% have integrated them into a defined workflow, highlighting a key challenge in Security Operations Centers. Practitioners cite staffing shortages as their top operational challenge, but leaders seem less concerned.
Malicious Plugins Exfiltrate AI API Keys on JetBrains Marketplace
Beware of malicious AI plugins on the JetBrains Marketplace that masquerade as helpful coding assistants but secretly steal your AI API keys. Over 70,000 installations have been recorded from at least 15 compromised plugins that have surprisingly evaded the marketplace's security checks.
Organizations' Crisis Response Lags Behind Confidence Levels
Most companies are blissfully unaware of impending crises, with a staggering 93% admitting they've missed warning signs of disruptions - and it's costing them dearly, with every business surveyed reporting a significant financial hit.
AI Code Review Foils Malicious Backdoor in Python Project
When Roman Imankulov analyzed a suspicious Python project with his AI agent, it quickly flagged a malicious backdoor, saving him from a potentially disastrous mistake. The AI code review proved to be a crucial safeguard, alerting Imankulov to walk away from the tainted code.
Mastra Packages Compromised in Software Supply Chain Attack
A massive software supply chain attack just hit Mastra, with over 140 malicious packages published in a single day by a compromised npm account. The swift and coordinated assault, dubbed easy-day-js, unfolded over just two days, catching defenders scrambling to respond.
Microsoft Scrambles to Patch RoguePlanet Zero-Day in Defender
Microsoft is racing against the clock to fix a critical vulnerability in Defender, known as RoguePlanet, after a proof-of-concept exploit was released, allowing hackers to elevate privileges regardless of real-time protection settings. A patch is in the works, but no release date has been given.
Kodak Breach Exposes Sensitive Data After ShinyHunters Hack
Kodak recently suffered a data breach at the hands of hackers known as ShinyHunters, who gained temporary access to sensitive company data. The company has launched a swift investigation with external cybersecurity experts and is working closely with law enforcement to mitigate the impact.
Malaysia Procures 18 Caesar Self-Propelled Howitzers from KNDS
KNDS is proud to equip the Malaysian Army with 18 cutting-edge Caesar self-propelled howitzers, further solidifying its position as a trusted partner in delivering top-notch artillery systems. This deal marks Malaysia as the 15th customer to join the Caesar family, and KNDS will collaborate with local partner Advanced Defense System to ensure seamless delivery.
China's 'Peaceful Reunification' Network Exerts Global Influence
Meet the China Council for the Promotion of Peaceful National Reunification, the central hub of a global network pushing China's vision of peaceful reunification, with a web of local organisations echoing its message worldwide. This Beijing-based council, established in 1988, is the driving force behind a coordinated effort tied to the Chinese Communist Party.
UK Defence Chief Warns of Reduced Operations Without Extra Funding
UK Defence Chief Richard Knighton warns that without a boost in funding, the country's military operations will have to be scaled back, putting routine activity at risk. He urges Prime Minister Keir Starmer and the Treasury to take action to secure the necessary budget.
[SPONSOREDNUBIVANCE]
Know a small business winging it on security?
No IT department, no security budget, real exposure. Nubivance builds right-sized security foundations for small companies. Send them this.
Send it along
US Power Anchors South China Sea Maritime Rights
A free and open South China Sea region won't become a reality through mere wishful thinking - it demands decisive action, strong deterrence, and a unified response to China's increasingly assertive moves. The Philippines has aptly described China's strategy as "talk and take," where diplomatic engagement goes hand-in-hand with the incremental expansion of its physical presence and control.
Defense Agency Taps AI to Accelerate Security Clearance Reviews
The Defense Counterintelligence and Security Agency is harnessing the power of AI to supercharge security clearance reviews, cutting processing time from months to just hours. By automating narrow tasks and escalating them to human reviewers, the agency is streamlining the vetting process like never before.
DIU Awards Contract to Mach Industries for Long-Range Strike Drone
The Defense Innovation Unit has partnered with Mach Industries to develop Atlas, a game-changing, long-range strike drone that can take off and land like a helicopter but fly like a plane, requiring minimal infrastructure. This innovative aircraft is set to revolutionize expeditionary strike capabilities with its unparalleled control simplicity and efficiency.
Australia Shifts Cybersecurity Focus to Resilience Over Compliance
Australia is taking a bold step in cybersecurity, shifting its focus from mere compliance to building operational resilience, with a AU$89.3 million investment over four years to drive this change. The Horizon 2 Action Plan is set to boost the nation's cyber posture with 19 key actions and 64 initiatives.
AI Models' Rapid Updates Expose Security Gaps
Researchers uncovered over 30 security patches for Anthropic's Claude Code in just two months, revealing a concerning pattern of brief, often silent vulnerabilities as AI models are rapidly updated. This finding highlights the need for greater transparency and scrutiny in the high-stakes world of AI model security.
Navy Overhauls Science Strategy to Accelerate Tech Deployment
The Navy is revolutionizing its approach to science and technology with a bold new strategy that prioritizes speed and selectivity in deploying cutting-edge tech to those who need it most. By fostering closer collaboration with key stakeholders, the Office of Naval Research aims to rapidly deliver game-changing innovations to sailors and marines.
Lockheed, GM Forge Partnership to Boost Munitions Production
Imagine a partnership that brings together the might of Lockheed Martin's defense expertise and General Motors' manufacturing prowess to supercharge US munitions production - and it all starts with an unlikely duo: the THAAD air defense interceptor and the Corvette. Lockheed and GM are joining forces to strengthen supply chains, advance manufacturing, and boost production capacity.
France Unveils Interim Tank as European Defense Project Delays Mount
Get ready for the combat of tomorrow! KNDS has unveiled the CAPINT interim tank, a game-changing solution that pairs a French turret and main gun with a German Leopard 2 hull, aiming for frontline deployment as early as 2037.