Cybersecurity intelligence, threat analysis, and national security reporting.
In a shocking 72 seconds, an attacker hijacked Red Hat's npm scope to spread malware, publishing 32 malicious packages that racked up nearly 10 million downloads. The sneaky move exploited the trust developers have in Red Hat's official namespace, turning it into a conduit for cloud credential malware.
Seqrite Labs researchers uncovered a sneaky malware attack, dubbed Operation XENOFISCAL, where the Pakistan-aligned SideCopy group targeted Afghanistan's Ministry of Finance and government officials with a cleverly crafted phishing lure written in Pashto. The attack used Xeno RAT Malware, delivered through a ZIP archive with a malicious LNK file, to infiltrate its targets.
UK organizations are bracing themselves for a perfect storm of cyber threats, with AI-powered attacks topping the list of concerns as the most pressing risk over the next year. In fact, 43% of UK respondents rank AI-powered attacks as their biggest worry, surpassing traditional threats like ransomware and phishing.
Threat intelligence falls short when it doesn't drive informed decision-making, often leaving a gap between analyst findings and senior leaders' priorities. Silobreaker and the SANS Institute are bridging this gap with a new study that explores how to turn threat intelligence into actionable business risk strategies.
Dashlane recently alerted a small group of users, fewer than 20, that an external threat actor had launched a brute-force attack on their accounts, attempting to bypass two-factor authentication and gain unauthorized access. The company quickly sprang into action, notifying affected users and taking steps to protect their accounts.
Despite the recent setback with Blue Origin's New Glenn heavy lifter explosion, the U.S. Space Force and National Reconnaissance Office are staying the course, reaffirming their commitment to the company. The Space Force has even awarded Blue Origin a new task order for an NRO satellite just hours before the accident.
Turkey has just revealed its game-changing electronic warfare jet, the HAVA SOJ, in stunning new footage - a cutting-edge airborne standoff jammer that can disrupt enemy air defenses and communications from a safe distance. Built on Bombardier Global 6000 airframes, this high-tech aircraft is a powerful asset for Turkey's military.
The Air Force has lifted its grounding of the T-38 fleet, allowing flights to resume after a thorough inspection process ensured the aircraft's safety. This move comes nearly two weeks after a T-38 crash in Mississippi prompted a precautionary pause in flights.
Evidence in spreadsheets, controls drifting between audits, frameworks multiplying on flat headcount. Nubivance runs continuous compliance on Rapid7 Cyber GRC - SOC 2, HIPAA, ISO 27001, PCI, CMMC.
End the scramble
The US Navy has deployed Littoral Combat Force-24 (LCF-24), a highly adaptable team of over 1,300 Marines and Sailors, to the Caribbean as part of a new flexible deployment strategy. This purpose-built force is engineered for distributed operations, allowing it to punch above its weight and make a big impact in the region.
As the 2026 midterms approach, a new report warns that cybersecurity threats are increasingly targeting the online accounts, platforms, and websites used by election campaigns, donors, and voters, rather than voting machines or ballot-counting systems. This shift in focus allows attackers to exploit vulnerabilities and manipulate public perception with alarming ease and realism.
Northrop Grumman is turbocharging its space-based missile defense capabilities through a game-changing partnership with Apex Space, aiming to deliver on-orbit protection for the homeland by 2027. With successful ground tests already under its belt, the company is poised to rapidly scale up affordable production and take missile defense to new heights.
Iran has suspended indirect talks with the US and is now threatening to block the critical Strait of Hormuz, a move that could escalate tensions to a boiling point. This development comes as Tehran responds to what it sees as a violation of the ceasefire, particularly given ongoing hostilities in Lebanon.
The USPS is pushing forward with a plan to boost mail-in ballot security and transparency by introducing uniquely serialized barcodes that allow for individual ballot tracking. This move would enable the Postal Service to scan and monitor absentee ballots as they're sent to and from voters, providing an added layer of accountability.
The US Navy has taken a major step forward in autonomous technology, selecting seven top defense firms to advance their medium unmanned surface vessel designs to at-sea prototype testing. These innovative companies, including Leidos, Huntington Ingalls Industries, and Sea Machines, will help shape the future of naval operations.
The Navy is revolutionizing munitions innovation with the launch of the Maryland Energetics Innovation Hub, a cutting-edge lab and pilot-scale campus in southern Maryland where government and industry experts will collaborate to drive breakthroughs. This game-changing initiative is set to propel the Naval Surface Warfare Center Indian Head Division to the forefront of energetics innovation and production.
The US military is considering reviving the MQ-1 Predator drone program as it faces losses with the MQ-9, sparking questions about the future of its unmanned aerial operations. This potential revival comes amid heightened tensions with Iran, where US forces have recently taken decisive action to protect regional waters.
Full-platform Rapid7 rollouts - InsightVM, InsightIDR, event sources, agents, tuning - by a Registered Partner who has done it at state-agency scale, including OT/SCADA.
Talk deployment
Australia and Japan are bolstering their defense ties, recognizing their growing importance to each other's strategic success. By joining forces, they're set to leverage their unique strengths, from industrial might to geographical advantage and networks.
Tina Peters, the convicted election clerk, is vowing to fight her felony record, despite Governor Polis commuting her prison sentence. In her first public interview since the commutation, Peters remained unapologetic, reasserting her claims about elections and hinting at a new legal battle to clear her name.
The Pentagon drastically cut its workforce by 78,000 civilian employees in 2025, achieved through a combination of layoffs, resignations, and a hiring freeze that significantly reduced new hires. This swift and extensive reduction, ultimately affecting 14% of its civilian workforce, was implemented with surprisingly little analysis or planning.
Russia is countering AI-powered threats with a blast from the past - "dazzle" camouflage on its trucks, featuring eye-catching zebra stripes and swirling patterns that throw off image-matching seekers used by drones and cruise missiles. By disrupting computer vision models, this unorthodox tactic aims to keep Russian vehicles one step ahead of high-tech adversaries.
France has imposed strict limits on Israel's participation in the Eurosatory defense exhibition, barring government reps, restricting display items to air defense products only, and shutting down the Israeli national pavilion. The move comes as the biennial event prepares to open outside Paris from June 15-18.
Containers can quickly become a gateway to your entire cloud infrastructure if vulnerable to attacks, with hackers exploiting flaws like CVE-2019-5736, CVE-2022-0492, and CVE-2024-21626 to break free from isolated environments and wreak havoc on your host system. There are five key entry points for container attacks, including vulnerabilities, misconfigurations, and supply chain threats.
In the face of growing regional tensions, Indo-Pacific nations are doubling down on their commitment to a rules-based order, with Australia's deputy prime minister calling it an imperfect but essential framework for global stability. The unified message was clear at the Shangri-La Dialogue in Singapore, where a notable absence was felt - that of senior Chinese leaders.
Palo Alto Networks is urging users to patch their systems ASAP, as hackers are actively exploiting a critical vulnerability (CVE-2026-0257) in unpatched PAN-OS devices. This highly sought-after flaw was initially rated medium-severity but quickly upgraded to critical after exploitation was confirmed.