Cybersecurity intelligence, threat analysis, and national security reporting.
The US Air Force has officially designated its new bunker-busting bomb as the GBU-76/B, and is now seeking industry partners to support its research, development, production, and delivery. The Next Generation Penetrator is set to revolutionize the Air Force's arsenal, and the Air Force is inviting vendors to demonstrate their capabilities in helping to bring it to life.
The cyber threat landscape is undergoing a seismic shift, with AI-driven attacks now unfolding at a breathtaking pace and scale that traditional defenses can't keep up with. This exponential explosion of attacks is ratcheting up the stakes for data availability and integrity, and it's only getting worse.
Newly released footage shows Ukrainian Mirage 2000-5Fs taking on a more versatile role, using low-level passes and toss-bombing techniques to deliver air-to-ground strikes. This tactical shift marks a significant expansion of their capabilities, moving beyond pure air-defense work.
President Trump has tapped William Pulte, a seasoned expert with a track record of handling America's most sensitive matters, to lead national intelligence on an acting basis. Pulte brings unparalleled experience to the role, having spearheaded the administration's mortgage fraud efforts and managed high-stakes initiatives.
The Army's unified network is facing a new wave of vulnerabilities, thanks to AI tools that are making it easier for attackers to breach defenses. With AI, techniques that once required specialized skills can now be scaled with ease, expanding the attack surface and increasing risk.
Anthropic's expanded Vulnerability Detection Program is helping protect critical infrastructure firms from cyber threats, having already uncovered over 10,000 high-risk software vulnerabilities since April. The program, known as Project Glasswing, now includes 150 organizations across 15 countries.
The US Special Operations Command has scrapped plans to replace its U-28 surveillance planes, with a full divestment of the fleet expected by 2029. Instead, the command will rely on alternative assets for intelligence, surveillance, and reconnaissance missions.
The White House has issued an executive order establishing a voluntary framework for AI oversight, with the NSA at the helm, to assess and benchmark the cyber capabilities of advanced AI models. This move puts the NSA in a central role in shaping the development of AI, sparking debate about the implications of government oversight.
Evidence in spreadsheets, controls drifting between audits, frameworks multiplying on flat headcount. Nubivance runs continuous compliance on Rapid7 Cyber GRC - SOC 2, HIPAA, ISO 27001, PCI, CMMC.
End the scramble
The US has released a revised AI executive order that takes a lighter touch on regulation, embracing a hands-off approach that aims to foster innovation without stifling the industry's growth. This scaled-back directive focuses on a voluntary framework, allowing companies to collaborate with the federal government on AI development.
In a concerning escalation, cyberattacks against Israeli targets skyrocketed by 700 percent over just two days following the June 2025 strikes, with Israel accounting for 12.2 percent of all geopolitically motivated cyberattacks worldwide in 2025. This alarming surge highlights the growing threat of cyber warfare in the region.
The White House has issued a new directive requiring companies to give the federal government 30 days' notice before publicly releasing advanced AI systems, a move aimed at balancing innovation with cybersecurity concerns. This change, down from a proposed 90 days, marks a significant shift in federal oversight of AI technology.
The Philippines is vying for a non-permanent seat on the UN Security Council, with a vote on June 3 in New York, and its bid is centred on pushing for stronger enforcement of global rules. Defence Secretary Gilberto Teodoro is leading the charge, urging the international community to take a stand and call out breaches of international rules.
Tensions escalate in the region as Iran launches a barrage of ballistic missiles and drones at Kuwait and Bahrain, only to be thwarted by swift countermeasures from US and regional forces. The US Central Command reports that all Iranian missiles and drones were successfully intercepted or failed to reach their targets.
Senator Kirsten Gillibrand is taking a stand against the Pentagon's rapid deployment of powerful AI technology without safeguards, introducing the Secure and Accountable Military AI Act to impose stricter regulations and prevent potentially catastrophic consequences. The proposed legislation aims to restrict AI use in autonomous weapons, domestic surveillance, and nuclear applications.
The GEOINT conference has emerged as a pivotal event for the intelligence community, offering a unique glimpse into the priorities of top agencies like the National Reconnaissance Office and National Geospatial-Intelligence Agency. This year's gathering presents a strategic window into the future of geospatial intelligence, where AI adoption and data sharing will shape the industry landscape.
The Pentagon is revolutionizing its approach to cyber operations, shifting away from treating it as a separate entity and instead weaving it into every military operation from the ground up. By doing so, the Defense Department aims to harness the full power of information on the battlefield, with AI security at the forefront of this strategic evolution.
Full-platform Rapid7 rollouts - InsightVM, InsightIDR, event sources, agents, tuning - by a Registered Partner who has done it at state-agency scale, including OT/SCADA.
Talk deployment
OpenAI has upgraded its GPT-5.5 model with a major update, boosting accuracy and conversational style to make interactions feel more human and natural. The new version promises more readable and engaging responses, with a focus on practical help tasks and a more conversational tone.
Microsoft just made life easier for developers who juggle Windows and Linux, releasing Coreutils for Windows, a package that brings commonly used Linux commands to Windows as native apps. This game-changing move eliminates frustrating workarounds and context switching, letting devs focus on what matters most - coding.
In the past 24 hours, over 222 attempts were made to exploit a critical vulnerability in the Kirki WordPress plugin, putting countless WordPress admin accounts at risk of being hijacked. This alarming surge highlights the urgent need for users to update their plugin and safeguard their sites against potential attacks.
A shocking move by a ransomware operator has sent shockwaves through the cybercrime underworld: they've brazenly targeted Russia, flouting an unwritten rule that's long been observed by hackers. This bold - and some might say, boneheaded - decision has left many in the cybersecurity community scratching their heads.
A massive malware campaign, dubbed WeedHack, has infected a staggering 116,464 Minecraft systems worldwide since January, with a whopping 2,000 to 3,000 new infections occurring daily. The widespread attack has hit the US, Germany, India, and the UK the hardest.
Google just dropped a crucial security update for Android, fixing 124 vulnerabilities, including a high-severity flaw that's being actively exploited - don't wait, patch up your device now! This critical fix tackles a privilege escalation bug that can be triggered without any user interaction, putting your data at risk.
Sophos researchers uncovered a sophisticated AI-built ransomware toolkit that cleverly evades detection by automated security solutions, triggering alerts only after it had already compromised a customer system. The toolkit's sinister purpose was revealed through investigation, which found references to a ransom note and a list of targeted organizations on a dark web leak site.
The US Cybersecurity and Infrastructure Security Agency (CISA) has flagged a high-severity Oracle WebLogic flaw, CVE-2024-21182, as actively exploited, prompting federal agencies to apply fixes by June 4, 2026. This critical vulnerability, rated 7.5 by CVSS, was added to CISA's Known Exploited Vulnerabilities Catalog after evidence of active exploitation was confirmed.