Cybersecurity intelligence, threat analysis, and national security reporting.
A concerning cybersecurity crisis is unfolding as government agencies, banks, and other organizations across North America and Europe face targeted attacks exploiting critical Citrix vulnerabilities with custom malware. The attacks, which have been observed in the wild, take advantage of two critical CVEs, CVE-2026-88771 and CVE-2026-88772, both rated 9.5 CVSS.
Two US Air Force veterans orchestrated a brazen multi-year scheme that scammed over $1.68 million from a victim in Iowa City, using a complex web of domestic and international co-conspirators to divert funds into their control.
Microsoft is rolling out the Windows 11 2026 Update, and the good news is that you won't need a full OS replacement - instead, you'll get a small enablement package that brings new features to your device. This seamless update is all thanks to Microsoft's shared servicing model, which allows for efficient and easy updates.
Meet Branch Target Reuse (BTR), a new Spectre variant that cleverly exploits Linux memory, dodging existing defenses and leaving multiple JIT engines and the Linux kernel vulnerable. This sneaky attack uses a four-step sequence to tap into the CPU's indirect branch prediction structures.
Researchers have uncovered a new Spectre v2 variant, dubbed Branch Target Reuse (BTR), that can exploit Linux systems and leak sensitive data, including root password hashes, in a matter of minutes. This attack can be executed in as little as 3-5 minutes, leaving systems vulnerable to potential breaches.
One tiny authentication mistake can have massive consequences - just ask Microsoft, which recently exposed a whopping 17.3 trillion records due to a flaw that let attackers bypass login credentials. A 16-year-old security researcher discovered the vulnerability, which could have let hackers pose as admins, but thankfully there's no evidence it was exploited.
Thousands of sensitive screenshots from 343 companies, including tech giants, have been inadvertently exposed by AI models on public GitHub repositories, revealing a shocking lapse in data security. This alarming discovery, dubbed PixelLeak, highlights the risks of relying on AI agents that can leak internal information.
Beware of malicious npm packages that have been downloaded a staggering 490,000 times, hijacking developers' WhatsApp accounts and adding them to groups without consent. These 101 rogue packages exploit the popular Baileys WhatsApp open source project to pull off the scam.
Evidence in spreadsheets, controls drifting between audits, frameworks multiplying on flat headcount. Nubivance runs continuous compliance on Rapid7 Cyber GRC - SOC 2, HIPAA, ISO 27001, PCI, CMMC.
End the scramble
A Dutch nonprofit dedicated to exposing vulnerabilities was breached in a shocking attack that left investigators stunned, describing it as loud and extremely messy. The incident marks a serious turn of events for the volunteer-run organization, which has operated with relative calm for seven years.
When customer data is on the line, Kiteworks chooses certainty over convenience - that's why they took a proactive nine-hour shutdown to safeguard against a potential cyber attack, collaborating with federal authorities to swiftly identify and fix a vulnerability. By prioritizing data security, they ensured their customers' protection, and quickly got back up and running.
A shocking vulnerability in Amazon Bedrock's AgentCore Python SDK could have put your AWS credentials at risk, allowing hackers to execute commands and access sensitive data. A simple crafted package name was all it took to bypass security measures and get commands running inside the Code Interpreter sandbox.
Apple just dropped an urgent patch to fix a CoreGraphics zero-day vulnerability that's been exploited in targeted attacks - it's crucial to update your devices ASAP to stay protected. This swift fix comes after the flaw was used to launch attacks before a public fix was available.
RatHat Malware is rapidly evolving with an AI-powered command center, having undergone three major command-and-control infrastructure updates in just six months, with nearly 100 deployments since April 2026. This malware-as-a-service model is getting smarter and more aggressive by the day.
As organizations expand their cloud presence and connect with more external accounts, traditional identity controls - like periodic reviews and static role definitions - simply aren't enough to keep pace with escalating threats. A proactive approach requires continuous, real-time awareness that only a unified platform with identity governance and event-level telemetry can provide.
OpenAI has put the brakes on its GPT-6.1 Astra model, citing safety concerns that left its research and safety leaders concluding it wasn't ready for release. The decision was made after the model, although more persistent and capable, fell short on critical alignment requirements.
Microsoft uncovered a sneaky malware operation, dubbed NeedyMantis, that's been secretly giving hackers prolonged access to compromised networks since at least October 2025. This stealthy threat has been targeting key sectors like telecommunications, universities, and government-linked organizations, primarily in campaigns linked to China.
Full-platform Rapid7 rollouts - InsightVM, InsightIDR, event sources, agents, tuning - by a Registered Partner who has done it at state-agency scale, including OT/SCADA.
Talk deployment
The Australian Army has a highly skilled and tech-savvy workforce, but can it harness this potential to drive continuous adaptation and stay ahead of the curve, or will the pressure of conflict force its hand? The key to success lies in developing strategic fitness – the ability to recognise change, make informed decisions, and learn from the results.
A whopping 50,277 NetScaler instances are potentially vulnerable to two newly exploited zero-day flaws, CVE-2026-88771 and CVE-2026-88772, according to Palo Alto Networks' Cortex Xpanse telemetry. This alarming number was highlighted in Unit 42's threat brief, revealing a possible zero-day attack on NetScaler devices.
Australia is poised to shake up the rare earths market with a new wave of projects set to start production between 2027 and 2030, filling gaps in the downstream supply chain. Several projects have already secured key partnerships, paving the way for a surge in output and a significant boost to the country's rare earths industry.
A recent discovery revealed that Kubernetes Operators, like IBM Turbonomic, can harbor hidden security risks, including granting excessive access to sensitive cluster data, putting administrative tokens and credentials at risk. Meet OperTraitor, an innovative, open-source tool that helps you uncover these threats by analyzing operator permissions and identifying potential security gaps.
As Brunei faces growing security threats in the region, its 60-year-old air force is gearing up to respond with a key upgrade: a squadron of fast-jet combat aircraft to safeguard its airspace and economic zone. This move is part of a broader strategy to adapt to emerging challenges, from major power rivalries to rapid technological advancements.
Some weeks pack a decades' worth of drama, and this summer has been one of them - a tumultuous period marked by the intense missile wars between Ukraine and Russia.
Citrix has rushed out patches for two critical zero-day vulnerabilities, CVE-2026-88771 and CVE-2026-88772, which were being actively exploited by hackers, with a severity rating of 9.5 on the CVSS scale. The patches fix command-injection flaws that allowed remote code execution, and were released just days after researchers warned of the threats.
Defense Secretary Pete Hegseth has ordered a major mobilization of US cyber and intelligence assets to shield the nation's election infrastructure from foreign interference, directing a unified defense effort to counter threats and protect the electoral process. The directive empowers US Cyber Command to proactively defend against cyberattacks and gather critical intel on foreign election threats.