[SPONSOREDNUBIVANCE]
Know a small business winging it on security?
No IT department, no security budget, real exposure. Nubivance builds right-sized security foundations for small companies. Send them this.
Send it alongIntelligence Briefing
Latest Analysis
Cybersecurity intelligence, threat analysis, and national security reporting.
Intel Bets Big on AI Inference to Revitalize CPU Business
Intel CEO Lip-Bu Tan is making a bold bet that AI inference, agentic workloads, and "physical AI" will put CPUs back at the forefront of computing, and position Intel for a major share of the trillion-dollar chip market. He's staking the company's future on the idea that CPUs will be the foundation of the AI era.
US-Indonesia Ties Pivot to High-Stakes Partnership
The US-Indonesia partnership has leveled up, shifting from a focus on shared values to a high-stakes game of mutual benefit, where critical minerals, supply chains, and defense capabilities are on the table. The question is, can this new transactional relationship deliver the real results both countries are counting on?
Windows RPC Exposes New Local Privilege Escalation Technique
A newly discovered technique allows hackers to easily escalate their privileges to SYSTEM level on Windows systems, using a vulnerability in the Remote Procedure Call stack. This alarming exploit relies on clever manipulation of Security Quality of Service parameters and impersonation levels.
Japan Rearms, But Taiwan's Defense Remains Uncertain
As Japan bolsters its defenses, concerns linger about Taiwan's uncertain future - and it's easy to see why, given their precarious locations in a volatile neighbourhood. With its recent fleet expansions, Japan is clearly taking steps to protect itself, but what about its vulnerable neighbour?
Linux Kernel Faces Large-Scale Device Support Cuts
The Linux kernel is set for a major overhaul, with plans to cut support for dozens of outdated devices, including ancient network cards and legacy parallel-port hardware, freeing up thousands of lines of code and reducing the maintenance burden. This could slash nearly 30,000 lines of code, just from Ethernet device removals alone.
Zimbra Servers Targeted in Ongoing XSS Attacks
Beware of sneaky phishing emails that can hijack your Zimbra server with just a glance - no clicks or downloads required. A single malicious email can trigger a cross-site scripting attack, thanks to a recently patched vulnerability, CVE-2025-48700.
UK Biobank Data Surfaces for Sale in China After Breach
A massive data breach has hit UK Biobank, with highly sensitive health information from 500,000 volunteers being sold on Chinese e-commerce platforms, including Alibaba, before being swiftly removed. Fortunately, the UK government believes that no one purchased the leaked data, which included whole-body scans, DNA sequences, and confidential medical records.
Open Source Models Challenge Dominance in Automated Bug Finding
The impressive performance of Anthropic's Mythos in automated bug finding, which uncovered 271 Firefox flaws, has been called into question by Ari Herbert-Voss, who argues that open-source models can be just as effective. Herbert-Voss suggests that Mythos's success can be attributed to its ability to detect both simple and complex vulnerabilities, thanks to a phenomenon he terms "supralinear scaling".
Malicious Apps Expose Crypto Investors to Seed Phrase Theft on App Store
Beware of malicious apps on the App Store that masquerade as popular cryptocurrency wallets, aiming to steal your crypto seed phrase and drain your funds. These fake apps, uncovered by Kaspersky researchers, can trick you into revealing sensitive information with just a few taps.
Microsoft Update Disrupts Remote Desktop Security Warnings
Microsoft's latest update aimed at boosting Remote Desktop security may have an unintended consequence: a display-scaling bug that makes crucial security warnings hard to read or even unreadable. This glitch comes at a critical time, as the update was designed to protect against phishing attacks that exploit .rdp files.
Governance Gaps Exposed in AI Agent Deployments
To safely deploy AI agents, enterprises must first tighten up governance for the humans, bots, and machine identities that serve as their authority sources, since AI agents aren't independent actors but rather delegated ones. By reframing AI governance as a delegation issue, we can shift the focus from novelty to effective oversight.
Mandiant VP Warns of Resurgent Cybersecurity Risks in AI Deployments
As organizations rush to adopt AI, they're reviving long-standing cybersecurity failures, warns Mandiant VP Jurgen Kutscher, who urges a focus on basic security controls over new AI-specific threats. Neglecting these fundamentals leaves AI-enabled environments vulnerable to measurable operational weaknesses.
Microsoft Unveils Option to Uninstall Copilot on Enterprise Devices
Microsoft just made it easier for IT admins to breathe a sigh of relief: you can now uninstall Copilot from enterprise devices without any disruptions. The new RemoveMicrosoftCopilotApp policy setting is here to give you more control over your organization's devices.
Tropic Trooper Exploits SumatraPDF to Deploy AdaptixC2
Meet Tropic Trooper, a notorious cyber threat group that's been wreaking havoc since 2011, and learn how they've cleverly exploited SumatraPDF to deploy their AdaptixC2 malware. Their latest tactic involves using GitHub as a command-and-control platform to target Chinese-speaking individuals in Taiwan, as well as users in South Korea and Japan.
Greece Eases Biometric Border Rules Amid Airport Delays
Greece has relaxed its biometric border rules for UK travellers, and will no longer collect fingerprints and photos as part of the Entry/Exit System (EES). The move comes as airport delays have mounted, and authorities aim to balance security with smooth traffic flow.
LMDeploy Vulnerability Exploited Within 13 Hours of Disclosure
A critical vulnerability in LMDeploy's vision-language module was exploited in the wild just 13 hours after its disclosure, allowing attackers to access sensitive resources and internal networks. This server-side request forgery flaw, tracked as CVE-2026-33626, affects all versions of the toolkit prior to 0.12.0.
[SPONSOREDNUBIVANCE]
Rapid7 deployed right the first time.
Full-platform Rapid7 rollouts - InsightVM, InsightIDR, event sources, agents, tuning - by a Registered Partner who has done it at state-agency scale, including OT/SCADA.
Talk deployment
UK Bans Journalists from Digital ID Forum
The UK government is calling on ordinary citizens to share their thoughts on a proposed Digital ID system, and you don't need to be an expert to join the conversation. Around 36,000 people have been invited to participate in the People's Panel on Digital ID, which will involve in-person meetings and online sessions to discuss how a Digital ID system should be designed for the UK.
Malware Targets Developers with Worm-Like Npm Supply Chain Attack
Malware is targeting developers through a sneaky npm supply chain attack, executing malicious code the moment a package is installed, and harvesting sensitive data to spread across ecosystems. Over 6,700 weekly downloads of one affected package show just how widespread the threat could be.
Researchers Uncover Pre-Stuxnet Cyber-Sabotage Malware
Meet fast16, a stealthy cyber-sabotage malware that went undetected until now, marking a new era in covert statecraft. Discovered by SentinelOne researchers, this silent threat has been hiding in plain sight since 2016.
Flaws in EV Charger Security Expose Cities to Denial-of-Service Attacks
A security researcher recently demonstrated how easily electric vehicle chargers can be hacked, leaving cities vulnerable to denial-of-service attacks with just a few clicks. In a stunning Black Hat Asia presentation, he showed how typing a simple charger ID into a custom-built script could instantly render a charging port useless.
China Builds Covert Hacker Networks with Compromised Routers
China-nexus cyber actors have dramatically changed their game, ditching solo operations for massive networks of hacked devices - and it's a threat you need to know about. A joint advisory from top cyber agencies worldwide warns of this new tactic, urging vigilance in the face of large-scale cyber attacks.
Pentagon Pushes Modular Defense Acquisition With Multi-Sourcing, MOSA
The Department of Defense is shaking up its acquisition strategy with a bold move towards modular defense, embracing multi-sourcing and MOSA to boost resilience and reduce costs. By enforcing a "two-for-production" standard, it's aiming to revive second sourcing for critical content and break the habit of single-source suppliers.
Navy Overhauls Refueling Tactics Amid Iranian Attacks
When Iranian missile and drone attacks disrupted traditional refueling operations, the US Navy was forced to rethink its logistics strategy, shifting from fixed port hubs to a more agile approach using commercially chartered tankers to fuel ships at sea. This pivot, dubbed a move from port hubs to "tanker treadmills," has been a game-changer for keeping naval vessels operational in the region.
US Military Embraces Autonomous Weapons for Future Warfare
The US military is betting big on autonomous weapons, with Joint Chiefs Chairman Gen. Dan Caine declaring they'll be a crucial part of future warfare, driving innovation in areas like drones and command-and-control systems. Gen. Caine is pushing for a cultural shift within the Pentagon to fully harness the power of AI and autonomous technology.