[SPONSOREDNUBIVANCE]
Rapid7 deployed right the first time.
Full-platform Rapid7 rollouts - InsightVM, InsightIDR, event sources, agents, tuning - by a Registered Partner who has done it at state-agency scale, including OT/SCADA.
Talk deploymentIntelligence Briefing
Latest Analysis
Cybersecurity intelligence, threat analysis, and national security reporting.
UK Digital ID Project Assembles Advisory Board to Inform Policy
The UK government's digital ID project just got a watchdog boost with the formation of an advisory board tasked with keeping policymakers on their toes. This new board will challenge emerging ideas and policy decisions to ensure the digital ID system serves everyone.
INTERPOL Disrupts Sniper Dz Phishing Platform in Global Operation
In a major global crackdown, INTERPOL dismantled the notorious Sniper Dz phishing platform, a hub for cybercriminals to buy and use ready-made phishing kits, in a coordinated effort that resulted in 201 arrests across 13 countries. The operation, dubbed Operation Ramz, dealt a significant blow to the phishing-as-a-service industry.
LangGraph Flaw Chain Enables Remote Code Execution in Self-Hosted AI Agents
A critical flaw in LangGraph's system could let attackers take control of your self-hosted AI agents with just a single exploit, allowing for remote code execution. Thankfully, the vulnerability has been patched after being discovered by cybersecurity researchers Check Point and Yarden Porat.
Plymouth Council Breach Exposes 500 Home-Schooling Families' Email Addresses
A careless mistake by Plymouth City Council's Elective Home Education team has led to a data breach, exposing the email addresses of around 500 home-schooling families after a single email was sent with all recipient addresses visible. The council is now dealing with the fallout after compromising the personal email addresses of hundreds of families.
Novo Nordisk Discloses Clinical Trials Data Breach
Novo Nordisk revealed a clinical trials data breach, confirming that hackers accessed and copied sensitive personal data, including patient information and healthcare professional records, from its internal IT systems without authorization. The stolen data includes patient IDs, trial details, and health information such as biomarkers, lifestyle factors, and more.
Pentagon Seeks $13.7 Billion to Bolster F-35 Sustainment Amid Readiness Decline
The Pentagon is throwing a lifeline to its struggling F-35 fleet, requesting $13.7 billion to boost sustainment and reverse a troubling decline in readiness that saw full mission capable rates plummet from 38% to just 25%.
Biography Unveils Untold Story of UN's U Thant
Discover the remarkable journey of U Thant, who rose from a small town in rural Burma to become the UN Secretary-General, navigating unexpected twists and turns that led him to the world's most influential diplomatic stage. His unlikely ascent was marked by key roles as headmaster, government servant, and Burma's ambassador to the UN.
Elbit Systems, Diehl Defence Partner on Loitering Munition Bid
Elbit Systems and Diehl Defence are joining forces to offer cutting-edge loitering munition systems to the German Armed Forces, enhancing their autonomous precision-strike and reconnaissance capabilities. This strategic partnership will also boost Germany's defense industry through local manufacturing and assembly.
Section 702 Teeters on Brink of Lapse Amid Spy Chief Dispute
The US intelligence community is on the brink of losing a crucial surveillance authority as Section 702 of the Foreign Intelligence Surveillance Act teeters on the verge of lapsing, following a 218-198 House vote against its extension. This development comes amid a dispute over the nomination of a new spy chief.
China Bolsters Mekong River Patrols With Advanced Weaponry
China is taking its Mekong River patrols to the next level with cutting-edge gear, including remote weapon stations and rocket launchers, to ensure the waterway remains safe and open. This move is part of a long-standing joint security operation with Laos, Myanmar, and Thailand to prevent incidents like the 2011 massacre that sparked the initiative.
F-22 Testbed 'Catfish' Spotted with New Infrared Sensor Pod
Meet the "Catfish," a one-of-a-kind Boeing 757 testbed that's been secretly pushing the boundaries of F-22 technology since the 1990s. Recently spotted with a sleek new infrared sensor pod, this modified marvel is still playing a vital role in advancing stealth capabilities.
China's Influence Silences Dissent in Zambia
In Zambia, a stark reality has emerged: China's growing influence is stifling dissenting voices, with critics like Michael Sata labeling the Chinese presence as parasitic rather than beneficial. The recent postponement of RightsCon, a human rights summit, has starkly illustrated this chilling effect.
Leonardo Accelerates AW249 Combat Helicopter Production for Italian Army
Leonardo is revving up production of its cutting-edge AW249 combat helicopter, with plans to deliver 17 units to the Italian Army by 2028. The company is in advanced talks with the Italian Ministry of Defense to expand the program, which could see a total of 48 helicopters built to meet the Army's needs.
China Rapidly Expands Special Mission Aircraft Fleet
China is rapidly bolstering its special mission aircraft fleet, with recent reveals including the GX-19, Y-9PT (GaoXin-18), and Y-9GR, showcasing a surge in airborne ISR and electronic-warfare capabilities. This steady stream of new aircraft unveilings highlights China's accelerating advancements in military aviation.
Surveillance Firm Enhances License Plate Readers to Track Mobile Devices
Imagine a world where surveillance cameras can not only track your car's license plate, but also scan your phone, watch, and other Bluetooth devices - all without your knowledge. A new technology called SignalTrace, proposed by surveillance firm Leonardo, aims to make this unsettling reality a reality.
Security Insider Exposes New Hire's Chaotic Tactics
A security insider recounts a tense confrontation with a new colleague over a departing workstation, revealing a chaotic approach to security protocols. The staffer's casual exit with a PC under their arm sparks a heated debate about data safety and responsibility.
[SPONSOREDNUBIVANCE]
Know a small business winging it on security?
No IT department, no security budget, real exposure. Nubivance builds right-sized security foundations for small companies. Send them this.
Send it along
CISA Mandates Patching of Actively Exploited Ivanti Flaw
Federal agencies are on high alert: a severe vulnerability in Ivanti's Sentry gateway, already exploited by attackers, must be patched within three days to prevent further backdoor attacks. CISA's urgent directive demands swift action to secure vulnerable devices and shield against malicious cyber threats.
Europol Disrupts Major Crypto Laundering Service Linked to Ransomware Gangs
Europol's operation has cut off a major crypto laundering service linked to ransomware gangs, freezing hundreds of millions in illicit profits and disrupting a key financial pipeline used by criminals. The crackdown seized over €86,000 in cash, froze €692,000 in cryptocurrency, and took down 25 domains and 30 servers.
French Govt Breach Exposes 73,000 Employees' Data
A major data breach at France's digital affairs directorate, DINUM, has exposed the sensitive information of 73,000 public-sector employees, affecting nearly 9% of the Tchap instant messaging platform's users. The breach compromised public chat rooms, user metadata, and shared files, but thankfully, private conversations remained encrypted and secure.
Japanese Utility Exposes 10.9 Million Client Records in Data Loss Incident
A shocking data loss incident has hit Japanese utility company Kyushu Electric Power Co., Inc., with a staggering 10.9 million client records exposed after an external storage device went missing. The device, last seen on April 27, was found to be missing on May 26, sparking a frantic investigation.
Maine Breach Portal Exposed to Fake Data Breach Disclosures
A fake data breach notice was recently submitted to Maine's breach disclosure portal using VRChat's name, but the company quickly reassured fans that their data and systems are safe. The incident highlights a vulnerability in the portal's submission process, which allows anyone to post a breach notice without verification.
US Arms Sales to Europe Hit by Delivery Delays
European countries are facing a frustrating dilemma: they're being urged to boost defense spending, but when they try to purchase US arms, they're met with lengthy and uncertain delivery timelines, sometimes as far off as 2029-2030. This has led some, like Poland, to look elsewhere, such as to the Korean defense industry, for quicker solutions.
Senate Panel Unveils $1.14T Defense Bill with New Drone Command
The Senate Armed Services Committee has just unveiled a groundbreaking $1.14 trillion defense policy bill that sets the stage for a major overhaul of the Pentagon's approach to unmanned systems and artificial intelligence. At the heart of the bill is the creation of a new four-star combatant command dedicated to robotic and autonomous systems.
Kongsberg Bolsters Cruise Missile Arsenal with Rusty Dagger Acquisition
Kongsberg supercharges its cruise missile capabilities with the acquisition of Zone 5 Technologies, a US start-up that brings cost-efficient design and mass production expertise to the table. This strategic move combines Kongsberg's cutting-edge tech with Zone 5's production prowess, paving the way for affordable cruise missiles in European markets.