
Know a small business winging it on security?
No IT department, no security budget, real exposure. Nubivance builds right-sized security foundations for small companies. Send them this.
Send it alongCybersecurity intelligence, threat analysis, and national security reporting.

The American Federation of Government Employees is urging House lawmakers to override President Trump's executive order that strips collective bargaining rights from most federal employees, a move that would undermine the rights of workers to negotiate for better working conditions.

The US Space Force has awarded $437.7 million to Viasat and Intelsat to develop anti-jam satellites, a crucial component of its resilient communication architecture that will enable tactical warfighters to stay connected in denied environments. This move is a significant step towards countering emerging threats and ensuring secure communication.

Microsoft just dropped a record 200 security patches to fix critical flaws in Windows and supported software, with nearly three dozen vulnerabilities rated as critical and at least three already being exploited by hackers. This massive update signals a new normal in vulnerability disclosure, with AI-driven flaws on the rise.

For nearly two decades, the US military has been secretly broadcasting encryption codes through public GPS signals, turning satellites into hidden messengers that beam mysterious information to any device that uses GPS. This covert operation was uncovered by researchers, led by Steven Murdoch, who stumbled upon a digital trail that revealed the surprising truth.

Relying on a third reconciliation bill to fund defense programs is a risky move that could create instability, according to Senate Appropriators, who are instead pushing for base funding through the defense appropriations bill.

Cloud logging services, like AWS CloudTrail and Google Cloud Logging, are a treasure trove of insights into your cloud environment - but they're also a prime target for attackers looking to erase their tracks or gain continuous visibility into your operations. By manipulating these services, adversaries can create persistent blind spots that leave you vulnerable.

Enterprises in APAC are scrambling to revamp their security architecture as AI-fueled attacks exploit new vulnerabilities at lightning-fast speed, making rapid containment more crucial than ever. Automation is now a vital defense against these accelerated threats.

Cambodia is bolstering its military with 39 Type 59D main battle tanks from China, with a total of 93 tanks planned for delivery. This significant shipment showcases the enduring popularity of the Type 59 tank on the global market.

No IT department, no security budget, real exposure. Nubivance builds right-sized security foundations for small companies. Send them this.
Send it along
Lockheed Martin is offering France a game-changing deal: get the advanced HIMARS system within just 18 months if a contract is signed, with a significant portion of launchers set to arrive by 2028.

President Donald Trump's reported threat to blow up Oman has raised concerns that the US may be jeopardizing a crucial diplomatic channel with Iran, one that has helped prevent escalation for decades. By pressuring Oman to cut ties with Tehran, the US risks eroding its role as a trusted mediator in the Gulf.

Microsoft's June Patch Tuesday update is a doozy, tackling a whopping 200 vulnerabilities, including three zero-day exploits and 33 critical flaws that could lead to remote code execution. This crucial update aims to prevent a range of issues, from denial-of-service attacks to elevation of privilege and information disclosure.

Meet Claude Fable 5 and Claude Mythos 5, Anthropic's game-changing dual AI models that supercharge cybersecurity, with Mythos 5 touted as the world's strongest cybersecurity model. By splitting its powerful tech into two products, Anthropic is making advanced cyber safeguards more accessible while ensuring top-notch security for vetted users.

ServiceNow has issued a security update to fix a flaw that could allow unauthorized users to gain excessive access to customer instances, and the company is urging users to take action to protect their systems. The update was applied to hosted customer instances on June 5, 2026.

A security researcher, known as Chaotic Eclipse, has discovered a Microsoft Defender zero-day exploit, dubbed RoguePlanet, that can give attackers unrestricted access to compromised machines. The proof-of-concept exploit, released under the handle MSNightmare, can yield a shell with SYSTEM-level privileges, allowing hackers to run arbitrary code and perform unauthorized actions.

Ivanti has patched a high-risk zero-day flaw that could let hackers run malicious code with root access, and fortunately, there are no known cases of exploitation so far. The vulnerability, tracked as CVE-2026-10520, affects the company's Sentry secure mobile gateway and allows for OS command injection permitting root execution.

A single malicious protobuf schema could be all it takes to trigger crashes, corrupt runtimes, or even execute code in vulnerable Node.js apps, warns Cyera security researcher Assaf Morag. Six newly identified vulnerabilities in protobuf.js, known as Proto6, carry high severity scores and could put your app at risk.

Evidence in spreadsheets, controls drifting between audits, frameworks multiplying on flat headcount. Nubivance runs continuous compliance on Rapid7 Cyber GRC - SOC 2, HIPAA, ISO 27001, PCI, CMMC.
End the scramble
Anthropic has just unveiled Claude Fable 5, a cutting-edge AI model that's designed with safety in mind, building on the same powerful technology as its predecessor Mythos but with robust guardrails to prevent misuse. This latest release aims to tip the scales in favor of those who can harness its potential responsibly.

A newly discovered Microsoft Defender zero-day exploit, dubbed RoguePlanet, can spawn a Windows command prompt with SYSTEM privileges, posing a significant threat to fully patched Windows 10 and 11 devices. This cleverly crafted exploit uses a hit-or-miss race condition to gain elevated access, with some machines surprisingly vulnerable to a 100% success rate.

Microsoft just dropped a record-breaking Patch Tuesday update, fixing a whopping 206 vulnerabilities across its products - including 38 critical ones. This massive release surpasses previous months and confirms a trend towards larger updates, raising both relief and concern among security experts.

In a daring rescue near the Strait of Hormuz, a US Navy drone boat sprang into action, saving two crew members from a downed US Army AH-64 Apache helicopter just two hours after the crash, with the soldiers now in stable condition. The incident is under investigation, but this heroic operation marks a groundbreaking milestone for the Navy's unmanned rescue capabilities.

The NRO is supercharging its partnership with BlackSky Technologies, pouring an 8-figure investment into AI-optimized satellite imagery to turbocharge America's intelligence edge. This fresh funding fuels the development of BlackSky's game-changing AROS satellites, blazing a trail for faster, smarter global monitoring.

Meet the Ravenstorm, a cutting-edge combat drone that's part of Airbus' bold new lineup of uncrewed systems designed to supercharge air power. With its expanded portfolio, Airbus is empowering nations to defend their skies like never before.

Cisco SD-WANs have been hit by a seventh zero-day exploit this year, with the latest vulnerability, CVE-2026-20245, already being actively exploited by attackers. A security patch is currently in the works, but no workaround is available to mitigate the issue in the meantime.

Oshkosh Defense is stepping up to help the Marine Corps bridge critical readiness gaps with its combat-proven JLTV A1, a production-ready vehicle that can be delivered quickly. By leveraging its existing production capabilities, Oshkosh aims to provide a reliable solution to the Marines' urgent need for a trusted vehicle.