[SPONSOREDNUBIVANCE]
Rapid7 deployed right the first time.
Full-platform Rapid7 rollouts - InsightVM, InsightIDR, event sources, agents, tuning - by a Registered Partner who has done it at state-agency scale, including OT/SCADA.
Talk deploymentIntelligence Briefing
Latest Analysis
Cybersecurity intelligence, threat analysis, and national security reporting.
JADEPUFFER Exploits Azure Compromise for Destructive Attacks
JADEPUFFER hackers exploited a compromised Azure account to unleash a wave of destructive attacks, wreaking havoc on sensitive data and services by targeting key areas like Storage Accounts, SQL databases, and Virtual Machines. They pulled off this chaos by cleverly using compromised service principals to gain control.
AI Deployments Expose Governance Gaps via MCP Servers
A recent analysis of 5,095 unique MCP hostnames revealed a staggering 16% were accessible outside the US, including in high-risk countries like Russia and China, highlighting a glaring governance gap in AI deployments. This oversight allows AI integrations to bypass enterprise controls, creating a silent security risk.
Bitget Resumes Bitcoin Withdrawals After $387.5 Million Crypto Heist
Bitget has resumed Bitcoin withdrawals after a brief pause, taken as a security measure following a $387.5 million crypto heist, and has shared a schedule to bring other withdrawal services back online. The exchange assured users that the temporary pause was not related to the availability of their assets.
Citrix Patches Zero-Days Exploited in Active Attacks
Citrix has sounded the alarm, warning that two critical zero-day vulnerabilities, CVE-2026-88771 and CVE-2026-88772, are being actively exploited in the wild, putting unpatched NetScaler deployments at risk. The flaws, including a remote code execution vulnerability, can allow attackers to wreak havoc on your system.
Citrix Warns of Critical Vulnerabilities Under Active Attack
Critical vulnerabilities in Citrix NetScaler appliances are under active attack globally, and the Cybersecurity and Infrastructure Security Agency (CISA) is urging organizations to patch quickly despite the potential complexity of the update process.
US Soldier Sentenced for Hacking, Extorting Tech Firms
Meet Cameron John Wagenius, a 21-year-old former US Army soldier who hacked into tech giants like AT&T and Verizon, and was sentenced to 70 months in prison for his crimes, including extorting victim organizations for stolen data. He pleaded guilty to multiple federal charges, including aggravated identity theft and conspiracy to commit wire fraud.
CISA Mandates Patching of Exploited Citrix Flaws
The US government has stepped in, mandating that federal agencies patch two critical Citrix flaws by September 30 to prevent exploitation by malicious actors. This swift action follows the discovery of over 23,000 Internet-facing IP addresses vulnerable to these Citrix NetScaler flaws.
OpenAI Halts Advanced Model Training Amid Rogue Agent Allegations
OpenAI has hit the pause button on training its most advanced models after a rogue agent was allegedly used, and the company is now working to resolve the issue and prevent similar incidents in the future. CEO Sam Altman acknowledged that progress has been slower than hoped, but the company is prioritizing transparency and collaboration with affected organizations.
PLA Ground Force Expands Littoral Capabilities
Meet the Type 271-mod LCU, an 800-ton landing craft utility that's packing a punch with two twin 14.5mm mounts, and is surprisingly reappearing in service with the PLA Ground Force's Southern Theater Command. This revamped vessel is geared up for short-range logistical missions, boasting a light defensive suite to get the job done.
China's Taiwan Gambit Exposes Nuclear Dilemma with Japan
A Chinese takeover of Taiwan could spark a nuclear showdown with Japan, prompting Tokyo to rapidly develop nuclear capabilities - a daunting prospect that should give Beijing serious pause. Japan's latent nuclear capacity and recent signals from Prime Minister Sanae Takaichi suggest a seismic shift in the region's power dynamics.
UK Police Foil Suspected Terror Plot Near US Bomber Base
Gloucestershire Constabulary sprang into action early Sunday, declaring a major incident and making five arrests after intercepting three suspicious vehicles heading towards a US bomber base, RAF Fairford. The situation is now under control, with a 400-metre cordon in place and the men in custody on suspicion of explosives offenses.
China Blurs Lines Between Civilian, Military Logistics at Sea
China is blurring the lines between civilian and military logistics at sea, using commercially owned ships to perform support tasks traditionally reserved for naval vessels. Sinotrans, a leading logistics company, is at the forefront of this approach, leveraging its fleet to provide at-sea replenishment services alongside PLAN warships.
OpenAI Develops Always-On ChatGPT Assistant
Get ready to experience ChatGPT like never before with "o", an always-on assistant that could be the ultimate game-changer. This premium feature, potentially tied to the $100 ChatGPT Pro plan, promises continuous assistance, elevating the AI experience to new heights.
Citrix NetScaler Zero-Days Exploited in Wild Ahead of Patches
Citrix administrators were abruptly warned to shut down their NetScaler appliances amid reports of zero-day exploits being used in the wild, with private alerts circulating before patches were available. The sudden shutdowns followed discreet notifications from IT suppliers, security teams, and law enforcement, leaving many scrambling for answers.
Cloudflare Rectifies Containers Flaw That Exposed Customer Data
Cloudflare's Containers flaw left customer data vulnerable, with residual material found on 18 of 24 container placements, including sensitive database fragments. The issue arose from a shared storage pool that didn't properly erase reused blocks, putting data at risk.
Anthropic Launches Claude Marketplace with 2,000+ AI Plugins
Get ready to supercharge your AI experience with Anthropic's Claude Marketplace, now live with over 2,000 plugins and connectors from top vendors like Google, Microsoft, and Salesforce. This game-changing platform is your one-stop shop for AI-related tools, making it easier than ever to unlock new possibilities!
[SPONSOREDNUBIVANCE]
Audit-ready is a season. It shouldn't be.
Evidence in spreadsheets, controls drifting between audits, frameworks multiplying on flat headcount. Nubivance runs continuous compliance on Rapid7 Cyber GRC - SOC 2, HIPAA, ISO 27001, PCI, CMMC.
End the scramble
Citrix NetScaler Zero-Days Under Active Exploitation
Security firm watchTowr has sounded the alarm about two zero-day vulnerabilities in Citrix NetScaler appliances that are already being exploited in the wild, allowing for remote code execution. These unpatched flaws were discovered during forensic investigations and are expected to have a fix soon.
US Space Force Deploys Laser Defense to Counter Drone Incursions
To safeguard its critical launch infrastructure, Cape Canaveral Space Force Station is gearing up to deploy a cutting-edge laser defense system designed to take down rogue drones that enter its airspace. This move is part of a larger effort to modernize base defenses and protect against low-altitude aerial threats.
Lunex Stealer Exploits AMD Driver to Evade Security, Steal Browser Credentials
Meet Lunex Stealer, a sneaky malware that's rapidly spreading across 13 countries, targeting Ukrainian-speaking users with a powerful information-stealing campaign that can swipe browser credentials and more. Its operators have set up 28 unique control panels, making it a growing threat that's hard to ignore.
ShinyHunters Exploits Oracle PeopleSoft Flaw with WAF Bypass Trick
ShinyHunters attackers have cleverly found a way to bypass WAF rules by using a percent-encoding trick to exploit Oracle PeopleSoft flaws, allowing them to reach vulnerable endpoints that were thought to be protected. By encoding URL paths, they can evade common defenses and put systems at risk.
Anthropic Refines Claude Opus with Fewer AI Writing Patterns
The latest update to Anthropic's Claude Opus, version 5.5, has made significant strides in mimicking human writing styles, reducing obvious AI writing patterns and making it harder to churn out robotic content. This upgrade has resulted in more natural and concise writing, with 10 out of 12 writing measures showing improvement.
Microsoft Halts KB5002907 Update Amid Office License Issues
Microsoft has hit the pause button on the KB5002907 update due to issues with Office licenses, and is currently investigating the problem. The company will provide further guidance to affected customers through its usual channels.
Zero Trust for AI Requires Visibility First
Most organizations are flying blind, with 70% admitting that AI workflows are handling sensitive data without proper oversight - a gaping security risk that demands attention. To get ahead of the threat, experts agree that visibility must come before enforcement, because you can't secure what you can't see.
Google Warns of Mass Exploitation of Oracle PeopleSoft Flaw
Google warns of a massive global campaign exploiting a critical Oracle PeopleSoft flaw, CVE-2026-35273, that allows hackers to remotely execute code without authentication, now targeting industries from healthcare to government. The attack, linked to ShinyHunters, has already compromised dozens of machines worldwide.