Cybersecurity intelligence, threat analysis, and national security reporting.
The Navy has selected seven innovative unmanned surface vessel designs to move forward to the prototype phase, out of over two dozen submissions received through its marketplace initiative. These industry partners will now face the next challenge: successfully completing at-sea demonstrations to prove their systems are ready for the next level.
A shocking security lapse at CISA exposed highly sensitive government systems, thanks to a contractor's careless mistake of leaving credentials to privileged AWS GovCloud accounts and internal systems publicly available on GitHub. The error granted unfettered access to a vast array of agency infrastructure, putting national security at risk.
A solo Russian hacker, known as bandcampro, has orchestrated a massive crypto fraud scheme, reaching 17,000 subscribers on Telegram with AI-generated content that convincingly mimicked popular conspiracy styles. This alarming development marks a turning point in cybercrime conspiracies, with AI-powered threats on the rise.
A shocking new campaign, dubbed Megalodon, has injected malware into over 5,500 GitHub repositories, putting sensitive credentials and tokens at risk of being stolen. This alarming attack highlights the growing threat of supply chain attacks, with experts warning that this could be just the beginning.
In a major win for cybersecurity, an international coalition led by France and the Netherlands has disrupted a notorious VPN service used by 25 ransomware groups, taking a significant blow to cybercrime operations. The takedown was made possible through a collaborative effort involving 16 countries and key partners like Europol and Eurojust.
Dutch authorities have struck a major blow against Russian cyber operations, seizing 800 servers and making several arrests in a crackdown on a web hosting ecosystem accused of enabling cyberattacks, disinformation campaigns, and other malicious activities. This coordinated law-enforcement action aims to disrupt the cyber threat landscape and protect democracy and security.
Malicious actors known as Ghostwriter have launched a cunning phishing campaign targeting Ukraine's government, using emails that appear to come from trusted sources and contain links to a seemingly harmless learning platform, Prometheus. These emails contain a hidden threat that can download malware onto victims' devices.
CISA is now accepting nominations for its Known Exploited Vulnerabilities catalog, empowering public reporting to strengthen the nation's cybersecurity posture by quickly identifying and mitigating exploited vulnerabilities. By submitting through the new KEV nomination form, you're helping to keep federal, private, and critical infrastructure networks safe.
Evidence in spreadsheets, controls drifting between audits, frameworks multiplying on flat headcount. Nubivance runs continuous compliance on Rapid7 Cyber GRC - SOC 2, HIPAA, ISO 27001, PCI, CMMC.
End the scramble
Two former executives, Adam Young and Harrison Gevirtz, have pleaded guilty to hiding a massive tech support scam that duped victims worldwide, and now face up to three years in prison and $250,000 in fines. Their guilty pleas mark a major win in the fight against tech support scams.
The Pentagon is mulling a major reversal: restoring Army aviation cuts that have been hanging in the balance. This potential shift could significantly impact the Army's Aviation Transformation Initiative and the Future Long-Range Assault Aircraft program.
The US Army's plans for upgrading the Night Stalker MH-60M are now closely tied to the Improved Turbine Engine Program (ITEP), with hopes that the new engine will bring a 50 percent increase in shaft power and significantly higher fuel efficiency. The Army's selection of General Electric's T901 engine in 2019 marked a major step forward, with flight testing on a modified Black Hawk set to pave the way for future upgrades.
As the EU shifts its focus from efficiency to resilience, it's redefining sovereignty through deliberate, long-term investments in physical infrastructure, ensuring that critical capabilities can thrive even in turbulent times. By prioritizing resilience and strategic autonomy, Europe is building a robust foundation for a sustainable future.
The US military is supercharging its LUCAS drone system with a game-changing AI-powered swarming capability, thanks to a new partnership with Shield AI - and Adm. Brad Cooper couldn't be more impressed, calling LUCAS "indispensable". This cutting-edge upgrade is set to revolutionize the drone's potential, unleashing a coordinated army of affordable, long-range attack drones that can overwhelm targets at a fraction of the cost of traditional missiles.
The Royal International Air Tattoo, a highly anticipated event, has been cancelled due to uncertainty over access to RAF Fairford amid rising tensions in the Middle East. Ticket holders can opt for a full refund or roll over their tickets to the 2027 edition.
Cloud attackers are now leveraging ROADtools, a publicly available toolkit, to exploit vulnerabilities in cloud tenants, allowing them to persist, discover, and evade defenses with ease. This dual-use framework's ability to speak Entra ID and Microsoft Graph makes it a red flag for defenders to take notice.
The Army's ambitious plans for munitions and industrial upgrades are hanging in the balance, awaiting crucial support from the reconciliation bill to accelerate progress. Without it, the pace of modernization and vital factory upgrades may stall, warns Maj. Gen. Rebecca McElwain, the Army's budget director.
Full-platform Rapid7 rollouts - InsightVM, InsightIDR, event sources, agents, tuning - by a Registered Partner who has done it at state-agency scale, including OT/SCADA.
Talk deployment
Norway's Foreign Minister Espen Barth Eide issued a stark warning: Russia's nuclear arsenal poses a catastrophic threat to US cities, capable of unleashing unprecedented destruction. A united NATO is crucial to counter this menace.
Marco Rubio's heartfelt declaration at the White House press podium - "My hope for America … is to continue to be the place where anyone, from anywhere, can achieve anything" - has set tongues wagging about his potential 2028 presidential bid. This sound bite has become a viral sensation, fueling speculation about his future ambitions.
India is turbocharging its defense ambitions with a major aerospace and defense production hub set to rise in Andhra Pradesh, a strategic move that will supercharge the nation's military capabilities. Defense Minister Rajnath Singh and Andhra Pradesh Chief Minister Chandra Babu Naidu marked the beginning of this exciting journey by laying foundation stones for a suite of cutting-edge aerospace and naval projects.
Unit 42 researchers have uncovered a sophisticated espionage campaign by an Iran-linked threat group, dubbed Screening Serpens, which has deployed six new remote access Trojan (RAT) variants to target entities across the US, Israel, and the Middle East. These variants, part of two distinct malware families, signal a significant expansion of the group's cyber spying operations.
Cloud Atlas is beefing up its toolkit with fresh tools and payloads, including a blast from the past - the notorious CVE-2018-0802 Microsoft Office Equation Editor vulnerability. The group is also reviving its use of ZIP archives with malicious LNK shortcuts that trigger PowerShell scripts, keeping security experts on high alert.
Imagine a helicopter that can take on a massive fuel load and become a flying gas station, refueling other aircraft in mid-air - and the US Army is actually considering making it a reality with the MH-47 Chinook. This game-changing concept would transform the Chinook into an airborne tanker, extending its existing forward arming and refueling point role to new heights.
A critical zero-day vulnerability, CVE-2026-34926, has been discovered in Trend Micro's Apex One on-premises server, allowing pre-authenticated local attackers to inject malicious code - and it's being actively exploited in attacks. Federal agencies have been ordered to patch affected systems ASAP, with a deadline of June 4, 2026.
Discover how attackers can exploit Windows drivers without hardware, turning kernel-mode driver bugs into powerful tools to bypass security controls. The Atos Threat Research Center reveals a game-changing method to manipulate reachability from userland on Windows 11 23H2.