Cybersecurity intelligence, threat analysis, and national security reporting.
Cybersecurity professionals are facing a harsh reality: 68% say their job has become significantly harder in just two years, with many also being shut out of key technology decisions that impact their work. This alarming trend is backed by eight years of data, highlighting a growing crisis in the industry.
Despite having access to a flood of IP data, security teams are struggling to turn it into actionable insights, with a staggering 94% of security incidents involving anonymized infrastructure that exposes reactive security gaps. The sheer volume of data is creating a clarity crisis, with analysts overwhelmed by signals but lacking the context needed to respond effectively.
Meet Athena, a groundbreaking coalition and platform that helps safeguard open-source software from AI-driven threats by streamlining vulnerability detection, private remediation, and coordinated disclosure. By joining forces, Athena members can proactively protect the entire open-source ecosystem from emerging risks.
Meet Backdoor.Turn, a sneaky new threat that uses Microsoft Teams to hide its tracks and wreak havoc on your network for months on end - and it's surprisingly sophisticated. This Go-based RAT masquerades as legit traffic by exploiting Teams' TURN relay servers.
The US Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning about a critical cPanel plugin flaw, CVE-2026-54420, that's being actively exploited by hackers, posing a significant risk to all user-end plugin versions prior to 2.4.8. This vulnerability allows attackers to escalate privileges to root, putting your online security at risk.
ESET has uncovered a Windows variant of the SprySOCKS backdoor, previously thought to only affect Linux, marking a significant expansion of its capabilities. This new variant, version 1.8, uses driver-based stealth and can communicate through TCP, UDP, and WebSocket channels.
Cyber attackers are actively exploiting three high-severity Fortinet FortiSandbox vulnerabilities, CVE-2026-39813, CVE-2026-39808, and CVE-2026-25089, which were patched just last month and carry a near-critical CVSS score of 9.1. These flaws have been targeted in wide-ranging exploits over the past 24 hours, according to threat intelligence firm Defused Cyber.
Meet Backdoor.Turn, a sneaky new malware that's abusing Microsoft Teams to hide its malicious activities - and it's a game-changer for cyber threats. This clever RAT uses Teams' own infrastructure against us, making it harder to spot its secret communications.
Evidence in spreadsheets, controls drifting between audits, frameworks multiplying on flat headcount. Nubivance runs continuous compliance on Rapid7 Cyber GRC - SOC 2, HIPAA, ISO 27001, PCI, CMMC.
End the scramble
Critical vulnerabilities in Fortinet's FortiSandbox platform are under active attack, with multiple flaws, including CVE-2026-39813, CVE-2026-39808, and CVE-2026-25089, being exploited by hackers just 24 hours after security updates were issued.
Chinese threat actor Earth Lusca has upgraded its malware arsenal with Windows SprySOCKS, a sneaky tool that lets hackers secretly send commands to compromised devices, allowing them to fly under the radar. This latest move has been linked to a string of high-profile attacks on government organizations worldwide.
Beware of fake Microsoft account alerts! A sneaky North Korean hacking group, ScarCruft, is sending phishing emails that mimic Microsoft security notifications to trick you into downloading the NarwhalRAT malware.
Beware of scammers who are using couriers to collect cash from victims, often under the guise of required investments or fines to withdraw from a fake crypto investment firm. The FBI warns that these scammers will instruct victims to hand over cash to a courier, often using verification tactics like sharing a dollar bill serial number or password to gain trust.
Imagine having the power to rapidly revive critical space services in mere hours to weeks after a setback - that's what DARPA aims to achieve with its latest quest for innovative space system reconstitution technology. The goal is to swiftly restore vital services to at least minimum levels, responding to urgent needs, lost assets, or unexpected collisions.
The US has imposed strict export controls on Anthropic's AI model, Mythos/Fable 5, classifying it as a cyber weapon and effectively banning its sale to foreign nationals. This move comes as the Pentagon severs ties with the company, marking a significant shift in their dealings.
The national intelligence community must revolutionize its approach to stay relevant in the AI era, shifting from traditional reporting to dynamic, real-time insights that match the evolving needs of decision-makers. Relying on outdated methods will render it obsolete.
Despite a preliminary peace deal between the US and Iran, the US naval blockade of Iranian ports remains firmly in place, with CENTCOM enforcing strict measures that have already disabled nine blockade-runners and redirected 139 compliant ships. The blockade is set to continue until a memorandum of understanding is signed on Friday.
No IT department, no security budget, real exposure. Nubivance builds right-sized security foundations for small companies. Send them this.
Send it along
With women making up only 17 percent of Australia's cybersecurity workforce, the industry's glaring gender gap leaves us vulnerable to AI-driven threats and puts women at greater risk of online harms. Closing this gap is crucial to bolstering our digital protection and ensuring a safer online world for all.
The UK is on the brink of securing a major deal for the Global Combat Air Programme, with a multi-national contract for a sixth-generation fighter expected to be signed by the end of the month. Prime Ministers Keir Starmer and Sanae Takaichi are set to confirm their commitment to the programme in a meeting in London.
The US naval blockade of Iran remains firmly in place, with CENTCOM forces disabling nine commercial vessels that attempted to breach it, as tensions persist ahead of a crucial ceasefire agreement signing in Geneva on Friday. The blockade will stay in effect until the deal is sealed.
A critical vulnerability in the LiteSpeed cPanel Plugin, known as CVE-2026-54420, has been flagged by CISA for its high risk of exploitation, with a CVSS score of 8.5, and federal agencies have until June 18, 2026, to apply the necessary fix. This flaw allows for privilege escalation and has been added to the Known Exploited Vulnerabilities catalog, requiring swift action to prevent potential root access attacks.
Australia's economic future, research base, and security hinge on accessing cutting-edge AI, but US export curbs are tightening control, treating advanced AI models as guarded national assets. The stakes are high, with the country's progress hanging in the balance.
A devastating crash of a US Air Force B-52 Stratofortress bomber at Edwards Air Force Base in California has claimed the lives of eight people on board, in what authorities describe as a "not survivable" incident. The tragic accident occurred during a routine test mission on Thursday morning.
A recent data breach at iRhythm exposed sensitive patient information, compromising personal and health data from over 12 million patients whose heartbeat data was analyzed through the company's cardiac monitoring service. The breach was discovered after a ransomware-style intrusion hit third-party business applications used by iRhythm.
Cisco is taking swift action to combat the active exploitation of a medium-severity flaw in its SD-WAN Manager, known as CVE-2026-20262, which could let hackers create or overwrite files on affected systems. Federal agencies have until June 29, 2026 to remediate the vulnerability.