[SPONSOREDNUBIVANCE]
Rapid7 deployed right the first time.
Full-platform Rapid7 rollouts - InsightVM, InsightIDR, event sources, agents, tuning - by a Registered Partner who has done it at state-agency scale, including OT/SCADA.
Talk deploymentIntelligence Briefing
Latest Analysis
Cybersecurity intelligence, threat analysis, and national security reporting.
ESET Exposes BTMOB Android Malware Service
Meet BTMOB, a sneaky Android malware that's being sold as a subscription service - think $700/month or a one-time $5,000 fee for a lifetime license - making it easy for anyone to become a cyber threat actor. This malware-as-a-service platform even comes with a user-friendly APK builder, requiring zero coding skills.
Snowflake Bolsters AI Security with Natoma Acquisition
Snowflake is supercharging its AI security with the acquisition of Natoma, empowering users to tackle everyday tasks like sending emails and checking calendars without leaving Snowflake Intelligence or Coco. This move is part of Snowflake's vision for an "agentic control plane," where AI agents can take actions across business systems while keeping security controls firmly in place.
FBI Warns of World Cup Phishing Sites Targeting Fans
Don't get scammed out of your World Cup tickets! A massive phishing operation, tracked as Ghost Stadium, has set up over 300 fake FIFA websites to trick fans into buying premium tickets to the 2026 tournament.
Microsoft Tests Limits of Windows Server Admins' Patience
Microsoft is pushing the patience of Windows Server administrators to the limit with a 15-character constraint that's leaving them frustrated. Is the tech giant testing the boundaries of their tolerance a bit too far?
Gogs Vulnerability Exposes Remote Code Execution Risk
A newly discovered vulnerability in Gogs puts servers at risk of remote code execution, allowing any authenticated user to inject malicious code through a simple pull request. By crafting a malicious branch name, attackers can exploit the --exec flag in git rebase to run unauthorized shell commands.
Hackers Exploit FortiClient Flaw to Deliver Infostealer Malware
Hackers are exploiting a vulnerability in FortiClient Enterprise Management Server to deliver infostealer malware, cleverly disguising the payload as a legitimate Fortinet endpoint update. This sneaky tactic uses FortiClient-managed VPN scripting workflows to execute the malicious code, putting security teams on high alert.
Sweden Bolsters Ukraine's Air Force with Gripen Fighter Jet Deal
Sweden is ramping up its support for Ukraine's air force with a game-changing deal to supply advanced Gripen fighter jets, bolstering the country's defense capabilities. The EU's Ukraine Support Loan will provide €2.5 billion to fund the purchase of up to 20 Gripen E/F fighters.
DIU Bolsters Hermeus Contract for High-Speed Drone Development
Meet the Quarterhorse, a high-speed drone that's essentially an unmanned F-16, as described by its maker Hermeus - and the Defense Innovation Unit just supercharged its development with a $159 million contract boost. This massive investment is set to fund crucial flight tests and propel the drone from experimental flights to operational demonstrations.
Pentagon Accelerates $50 Billion Drone Warfare Spending Spree
The Pentagon is shaking up its approach to drone warfare, ditching the old system where units made small, isolated purchases from a limited vendor list that rarely changed. Now, with a $50 billion spending spree on the horizon, defense officials are clearing the way for more innovative and flexible drone acquisitions.
EuroTrophy Expands Active Protection System Across Europe
EuroTrophy is on a mission to revolutionize armored vehicle safety across Europe with its cutting-edge Active Protection System, starting with a landmark delivery of two Trophy-equipped Leopard 2A8 tanks to Norway. Every new Leopard 2A8 tank rolling out of the factory will now come standard with Trophy, says Managing Director Dan Kalfus.
Travel Sector Braces for Cyberattacks as Summer Looms
As summer approaches, the travel sector is bracing for a surge in cyberattacks, with a staggering 92% of travel agencies experiencing some form of cyber threat in the last year. Ransomware, data breaches, and cyberattacks top the list of concerns, cited by 68% of agencies as the greatest threat to their success.
Zapier Fixes Bug Chain That Exposed Millions to Account Takeover Risk
A security firm recently uncovered a chain of five weaknesses in popular workflow automation service Zapier that could have put millions of users at risk of account takeover - and thankfully, the issue has now been fixed. The vulnerabilities were surprisingly easy to exploit, requiring only a free Zapier account to potentially gain unauthorized access to user accounts.
Cybercriminals, Hacktivists Target 2026 World Cup Infrastructure
The 2026 FIFA World Cup is set to draw massive crowds of up to six million fans across 104 matches in 16 host cities, making its complex infrastructure a prime target for cyber threats. With its far-reaching network of stadium operations, municipal services, and independent suppliers, the tournament's technical architecture is a vulnerable web waiting to be exploited.
China's Strategic Assertiveness Reshapes Global Order
The recent Trump-Xi summit marked a significant shift towards a "constructive China-US relationship of strategic stability," indicating a new era of managed competition between the two global powers. This pivotal meeting signaled a mutual acceptance that the rivalry between Washington and Beijing will be long-term, yet carefully navigated.
Austal USA Appoints Gene Miller as President
Austal USA has officially appointed Gene Miller as its President, solidifying its leadership team and charting a course for continued success. With his extensive experience and proven track record, Miller is poised to drive Austal USA forward, building on the momentum established during his interim presidency.
Navy Deploys Drones to Sink Warship in Live-Fire Exercise
In a thrilling display of modern naval power, the US Navy successfully sank a warship using drones in a live-fire exercise, marking a significant milestone in military technology. The operation, part of the UNITAS 2026 exercise, involved a littoral combat ship launching four aerial drones and a surface vessel to take down the decommissioned USS Simpson.
[SPONSOREDNUBIVANCE]
Audit-ready is a season. It shouldn't be.
Evidence in spreadsheets, controls drifting between audits, frameworks multiplying on flat headcount. Nubivance runs continuous compliance on Rapid7 Cyber GRC - SOC 2, HIPAA, ISO 27001, PCI, CMMC.
End the scramble
Exposure Management Shields Against Lurking Vulnerabilities
Don't let a single vulnerability be the Death Star of your defense - even the strongest systems can be undermined by a shared insider weakness. Start with asset discovery to proactively manage exposure and shield against lurking threats.
Fortinet Flaw Exploited to Deploy Credential Stealer
Hackers have exploited a critical Fortinet flaw, CVE-2026-35616, to turn trusted systems into a launchpad for a sneaky new credential-stealing campaign. This vulnerability, with a near-perfect CVSS score of 9.1, allowed attackers to bypass security and wreak havoc.
Malicious Packages Exploit Realistic Identities
Malicious open source packages are getting smarter, with 91% using realistic identities and naming-variant tactics to blend in with legitimate projects, making them harder to spot. This shift away from simple typosquatting tricks means developers need to be extra vigilant when adding dependencies to their workflows.
AI Agent Executes End-to-End Cyberattack in Under an Hour
In a chilling demonstration of speed and stealth, a sophisticated AI agent executed a devastating cyberattack from start to finish in under an hour, exploiting a vulnerable marimo notebook to gain code execution and ultimately exfiltrating a PostgreSQL database. This alarming intrusion highlights the lightning-fast potential of modern cyber threats.
Carnival Cruise Data Breach Exposes 6 Million Customers
A recent data breach at Carnival Cruise, affecting 6 million customers, highlights the vulnerability of traditional security controls to social engineering tactics, where a single compromised employee device can lead to devastating consequences. This incident serves as a stark reminder of the human factor in cybersecurity, where threat actors exploit trust and impersonation to gain access to sensitive information.
Gogs Zero-Day Flaw Enables Remote Code Execution on Exposed Servers
A zero-day flaw in Gogs, a self-hosted Git service, leaves exposed servers vulnerable to remote code execution - and it's surprisingly easy for attackers to exploit, as they can create an account and repository on default-configured instances. This critical-severity vulnerability affects the latest release versions and requires only an authenticated user without admin privileges to launch an attack.
Cyberattacks Surge Across Middle East Infrastructure Providers
The Middle East's infrastructure providers are under siege, with a staggering 1,350 command-and-control servers detected across 98 providers in just three months - and a single carrier, Saudi Telecom Company, accounting for a whopping 72% of the malicious traffic.
SIEM Helps MSPs Filter Out Noise, Accelerate Threat Detection
MSPs are drowning in a sea of security alerts, but the real challenge is cutting through the noise to identify genuine threats. When endpoint, identity, cloud, and network sensors operate in isolation, duplicate alerts and blind spots create an incomplete picture, making it tough to prioritize and respond to potential threats.