Cybersecurity intelligence, threat analysis, and national security reporting.
Two years after a devastating ransomware attack, the NHS breach count continues to grow, with an Essex trust now confirming that sensitive patient records were stolen by the notorious Qilin gang. The incident serves as a stark reminder that the impact of this cyberattack is still being felt, with hospitals working tirelessly to identify and warn affected patients.
Phishing attacks are getting smarter, with threat actors now using trusted platforms like Microsoft Teams to target unsuspecting employees, accounting for 42% of all phishing alerts in just the first four months of 2026. These sneaky messages can land directly in your feed, masquerade as internal IT support, and trick you into taking action with alarming ease.
A critical vulnerability in Zcash's Orchard privacy pool was discovered by security researcher Taylor Hornby, exposing a risk of fraudulent transactions and highlighting the importance of rigorous testing and review. The swift discovery was made possible by a commissioned review, underscoring the value of proactive security measures.
WhatsApp has successfully shut down a sneaky phishing campaign by notorious spyware firm NSO Group, which tried to trick users into clicking malicious links to spy on them. The messaging giant is now asking a US court to hold NSO Group accountable for violating a ban on targeting users.
A critical vulnerability in Check Point VPNs, known as CVE-2026-50751, has been exploited in dozens of organizations worldwide, with one incident linked to Qilin ransomware. This bug allows hackers to bypass authentication and establish remote access, putting targeted organizations at risk.
Google just released urgent updates to fix a high-severity Chrome flaw that's being actively exploited by hackers - the fifth zero-day vulnerability patched by the company this year. This latest bug, CVE-2026-11645, could let attackers run malicious code and access sensitive data in your browser.
A high-severity flaw in BerriAI's LiteLLM, known as CVE-2026-42271, has been actively exploited, allowing unauthenticated users to execute commands remotely. This critical vulnerability affects LiteLLM versions 1.74.2 to 1.83.7 and has been deemed a major security risk.
In a sneaky credential heist, hackers sent over 250 fake job offers to developers at nearly 100 US organizations, disguising phishing attempts as recruitment messages. The six-week scam targeted professionals in tech, education, and finance.
Evidence in spreadsheets, controls drifting between audits, frameworks multiplying on flat headcount. Nubivance runs continuous compliance on Rapid7 Cyber GRC - SOC 2, HIPAA, ISO 27001, PCI, CMMC.
End the scramble
SoFi Hong Kong recently discovered a data breach at a third-party vendor that exposed customer information, with unauthorized access detected on April 30, 2026. The company's investigation is ongoing, but it confirmed the breach originated from a vendor, not its internal systems.
Malicious actors are using GitHub to spread new variants of the NFCShare Android malware, disguising them as banking app updates to target customers of European banks. Victims are first lured into downloading the malware through phishing sites that mimic real banks, where they're prompted to install a fake update.
The US has greenlit a whopping $1.67 billion in military sales to boost the defense capabilities of New Zealand and South Korea, with cutting-edge helicopters, torpedoes, and precision-guided weapons on the agenda. New Zealand is set to receive five MH-60R Seahawk helicopters and advanced systems in a $1.5 billion deal, while South Korea will get a $106 million package to enhance its military arsenal.
Meet the U145, Airbus's game-changing autonomous cargo helicopter that combines the reliability of the H145 with cutting-edge drone technology. This innovative aircraft is set to take to the skies with a safety pilot on board by late 2026.
In a shocking escalation, Israel and Iran exchanged strikes, but quickly stepped back from the brink, with both sides now pushing for an immediate ceasefire and final peace negotiations. President Donald Trump publicly urged calm, calling for both nations to stop fighting and hinting at a potential breakthrough.
The €100 billion FCAS Fighter Program, a joint effort between France, Germany, and Spain to develop a next-generation fighter jet, has reportedly collapsed due to irreconcilable differences between industry giants Dassault and Airbus. The program's demise comes after failed mediation efforts and a final decision by the German government to pull the plug.
The US is set to supercharge its AI capabilities in intelligence and warfighting domains, with a new presidential memo directing the federal government to accelerate AI adoption while prioritizing speed, security, and responsible innovation. The move aims to harness AI's potential in line with American values, with rigorous oversight to ensure safe and effective deployment.
A KC-135 tanker has been spotted at RAF Mildenhall with a cutting-edge satellite antenna, signaling the US Air Force's commitment to modernizing its tanker fleet. The exciting development was captured on camera by aviation photographer Alessandro Ledda, and has sparked interest among defense enthusiasts.
Full-platform Rapid7 rollouts - InsightVM, InsightIDR, event sources, agents, tuning - by a Registered Partner who has done it at state-agency scale, including OT/SCADA.
Talk deployment
The explosive growth of AI in the Department of Defense - a 1,775% surge in just one year - is putting intense pressure on defense teams to safeguard sensitive mission data. As AI empowers warfighters to make faster, more precise decisions, the challenge of protecting data at rest has never been more urgent.
France and Germany have reportedly pulled the plug on their ambitious joint fighter jet project, the New Generation Fighter, after failing to iron out industrial differences. The decision comes after extensive discussions between the two leaders, who concluded that the program was no longer viable.
As AI models like Anthropic's Claude Mythos and OpenAI's Daybreak reach new heights, we face a crucial choice: foster an ecosystem that balances innovation with accountability, or risk stifling progress. By prioritizing responsible leadership, like Anthropic's deliberate delay of Mythos' deployment to surface vulnerabilities, we can pave the way for a safer and more reliable future.
The USS Iwo Jima's historic 296-day deployment has come to an end, with the amphibious ready group racking up an impressive 6,000 sorties, 1,850 flight hours, and over 130,000 nautical miles traveled. The Iwo Jima Amphibious Ready Group's remarkable journey has concluded with its return to Naval Station Norfolk.
Can Australia's rich mineral resources still guarantee its economic clout, or will China's demand-chain strategy shake up the global market and redefine who holds the power? The answer lies in whether owning the resources or controlling the demand will ultimately capture the most value.
Meta just took a bold stand against NSO Group, the notorious spyware maker, by ramping up legal action after thwarting a sneaky phishing campaign aimed at WhatsApp users. The tech giant successfully blocked NSO-linked attempts to trick people into clicking malicious links, despite a US court injunction already in place.
The 2026 ILA Berlin Air Show is set to make a splash as the defense industry converges on Berlin, fueled by Germany's dramatic surge in defense budgets. This pivotal event will put the spotlight on how increased national spending will drive procurement and program decisions, making it a must-attend for military and aerospace suppliers.
Say goodbye to password anxiety with Apple's latest innovation - an AI-powered tool that automatically secures compromised passwords, giving you peace of mind with just a few clicks. This game-changing feature, part of Apple Intelligence, uses AI to update weak and vulnerable credentials to strong, unguessable passwords.