Cybersecurity intelligence, threat analysis, and national security reporting.
In a rapidly evolving world, Australia is on a mission to join forces with like-minded nations to secure access to cutting-edge AI technology, recognizing that being left behind could have serious consequences. By banding together, middle powers can ensure they have a seat at the table and aren't left on the menu.
The US military's healthcare system is seeing its biggest wins with the modernization of electronic health records, particularly with the rollout of MHS GENESIS and parallel VA efforts. These unified platforms are revolutionizing the way healthcare is delivered, setting the stage for future innovations in cloud architecture and AI integration.
Microsoft is sunsetting Windows Deployment Services, ending active development and planning for its complete removal in a future Windows Server version. This change affects the inbox WDS server role and associated functionality.
In a major cybercrime crackdown, Ardit Kutleshi, a 28-year-old Kosovar national, has pleaded guilty to running Rydox, an illicit online marketplace that sold stolen personal info, including Social Security numbers, credit card details, and login credentials, of thousands of US citizens. The guilty plea comes after a massive investigation into over 7,600 sales of sensitive data on the platform.
In a shocking security breach, North Korean hackers made off with a whopping $351.6 million from cryptocurrency exchange Bitget, compromising a limited number of hot wallets. Fortunately, customer account balances remain intact and trading operations are still running smoothly, with withdrawals temporarily paused while the company conducts a thorough security review.
A critical Roundcube Webmail vulnerability, CVE-2026-48842, is under active exploitation, allowing unauthenticated attackers to inject malicious SQL code and potentially expose sensitive mail account credentials and messages. This flaw affects versions 1.6.x and 1.7.x of Roundcube Webmail, and has been patched in versions 1.6.16 and 1.7.1.
If you've installed the latest Windows updates, you might be experiencing desktop loading issues - including frustrating black screens - but don't worry, Microsoft has a simple fix: just install and configure the Group Policy, and restart your device. This solution should get your desktop up and running smoothly again.
Beware: the RemControl Trojan is targeting Android users with a sneaky accessibility exploit, putting over 30 major banks and their customers at risk across six countries. It starts with a clever fake Google Play Store page trick, disguising itself as a harmless app update.
Evidence in spreadsheets, controls drifting between audits, frameworks multiplying on flat headcount. Nubivance runs continuous compliance on Rapid7 Cyber GRC - SOC 2, HIPAA, ISO 27001, PCI, CMMC.
End the scramble
EfficientIP Research Labs swooped in to stop a phishing scam, intercepting 10 AliExpress domains before they could be used to trick unsuspecting victims. The domains, tracked from June 9 to July 2, were part of a sophisticated phishing operation that was thankfully shut down before activation.
In a shocking breach, North Korean hackers made off with a staggering $351.6 million from the Bitget crypto exchange, prompting the company to temporarily suspend withdrawals while it investigates and beefs up security. Fortunately, customer accounts remain unaffected, with deposits and trading continuing as usual.
Stay ahead of cyber threats: Federal agencies must patch WSO2 and Adobe Commerce flaws by September 27, 2026, to avoid exploitation, as CISA flags these vulnerabilities as actively exploited. The high-severity bugs, including a path traversal flaw and an authorization issue, can lead to remote code execution and unrestricted file uploads.
A startling security flaw was discovered in Cloudflare's container storage system, allowing leftover disk data to be exposed between containers, with researchers finding remnants on 18 of 24 production tests and 20 of 22 underlying machines worldwide. This vulnerability was caused by a misconfigured setting that reused disk blocks without properly wiping them clean.
Ukraine's Operation Vivaldi counteroffensive is gaining steam, driven by a bold new approach to military leadership that's yielding promising results on the battlefield. By overhauling command structures and prioritizing trust and accountability, Ukraine's Third Army Corps is turning the tide in its favor.
The Royal Air Force has grounded its Hawk T1 and T2 training jets after a dramatic crash near homes at RAF Valley on Anglesey, and launched a formal investigation into the incident. Both pilots ejected to safety and are expected to make a full recovery.
Senate leaders Mark Warner and Ted Cruz have introduced the Telecommunications Cybersecurity and Resilience Act, a bipartisan bill aimed at fortifying the nation's telecom infrastructure against devastating cyberattacks like the historic Salt Typhoon hack. The legislation seeks to boost cybersecurity standards and bring government and industry together to protect critical infrastructure.
A shipment of F-35 parts bound for the US took a mysterious detour from Australia to South Korea to Hong Kong, where Chinese authorities seized the components, including a cockpit canopy and a weapons-bay door, and have yet to return them. The incident has raised serious questions about security breaches in the international logistics system.
No IT department, no security budget, real exposure. Nubivance builds right-sized security foundations for small companies. Send them this.
Send it along
The Air Force's China Aerospace Studies Institute is facing a significant blow to its research capabilities due to budget cuts, with the loss of its 10-member civilian staff that handled critical analysis and translation work. Without these experts, the institute's ability to provide valuable insights on China is severely compromised.
The US government has launched an investigation into the Russian ownership of Oxygen Forensics, a phone-hacking firm that has sold its software to top US security agencies, including the Secret Service and Homeland Security. The probe led to the arrest of the company's US CEO and a Russian national allegedly controlling the firm.
France is stepping up to protect a crucial oil hub in Saudi Arabia, deploying troops, radar systems, and defense equipment to the Yanbu energy facility on the Red Sea to safeguard the vital oil lifeline. The move, announced by President Emmanuel Macron, is strictly defensive, aimed at shielding the site from potential attacks that could disrupt global oil supplies.
The Australian Department of Defence scrapped its plans for a single-orbit SATCOM system in 2024, recognising that a rapidly changing space landscape and emerging threats demanded a more adaptable approach. Instead, they're prioritising resilient, multi-orbit communications systems to keep missions connected in an increasingly dynamic environment.
The Navy's new Robotics and Autonomous Systems Warfighting Development Center will harness expertise from across the country to revolutionize naval power, says Rear Adm. Melvin Smith. The center's mission is to connect and accelerate the development of unmanned systems, driving innovation and dominance in the field.
China is taking its uncrewed submarine program to the next level with the construction of a massive mothership, as evidenced by satellite images of a boxy vessel taking shape at Hudong-Zhonghua Shipyard in Shanghai. This new, specialized ship is a significant upgrade from the floating docks currently used to house China's XXLUUV prototypes.
The Italian Navy is on the cusp of a major upgrade with a $4.2 billion contract awarded to Fincantieri and Leonardo's joint venture, Orizzonte Sistemi Navali, to build two cutting-edge DDX destroyers. This game-changing deal is set to revolutionize Italy's air and missile defence capabilities.
