
Rapid7 deployed right the first time.
Full-platform Rapid7 rollouts - InsightVM, InsightIDR, event sources, agents, tuning - by a Registered Partner who has done it at state-agency scale, including OT/SCADA.
Talk deploymentCybersecurity intelligence, threat analysis, and national security reporting.

NIST’s Cyber AI Profile brings technologists, policymakers, and everyday users together to build practical defenses against AI-enabled attacks—balancing strong security with the innovation that powers our digital lives.

AI can be both defender and threat—and NIST’s NCCoE is leading virtual sessions to shape the Cyber AI Profile, offering practical guidance to spot AI-enabled risks and harden defenses. Whether you’re a technologist, policymaker, or business leader, this essential guide shows how to harness AI safely and stay ahead of evolving cyber threats.

Join NIST NCCoE’s virtual event on August 27, 2025 to learn practical DevSecOps best practices from leading experts and discover how to weave security into every step of your software lifecycle. With cybercrime costs soaring, this is your chance to balance speed and safety through automation, compliance tips, and real-world lessons that make your software more resilient.

Worried about the security of the software we all depend on? Join NIST NCCoE’s interactive DevSecOps virtual event on August 27, 2025, to hear experts, learn practical secure development practices, and help turn security from an afterthought into a foundation for every project.

Join experts, policymakers, and industry leaders at the Second Seminar on In‑Space Circular Economy Innovations to explore how recycling, reuse, and smart design will make space missions more sustainable. In space, every ounce counts—what we build today will shape exploration and life on Earth tomorrow.

Join NIST NCCoE’s virtual working sessions to explore how the Cyber AI Profile can harness AI to sharpen threat detection, cut alert fatigue, and strengthen defenses—while tackling the ethical and security risks that come with it. Technologists, policymakers, and practitioners are invited to collaborate and shape trustworthy, practical AI-driven cybersecurity solutions.

Researchers have uncovered critical flaws in TETRA’s end-to-end encryption—dubbed 2TETRA:2BURST—that could let attackers eavesdrop on or manipulate emergency radio traffic, putting officers and the public at risk. It’s a wake-up call for law enforcement and policymakers to urgently patch systems and rethink how we secure critical communications.

In a rapidly evolving digital landscape, the battle between AI-driven attacks and defenses is more intense than ever. Join us as we unpack the insights from the recent Black Hat conference, where experts discussed how AI can transform from a weapon for cybercriminals to a vital shield for defenders—reminding us that in cybersecurity, staying one step ahead is crucial!

Full-platform Rapid7 rollouts - InsightVM, InsightIDR, event sources, agents, tuning - by a Registered Partner who has done it at state-agency scale, including OT/SCADA.
Talk deployment
The Wikimedia Foundations recent legal setback highlights a critical clash between online safety and the freedom to access information, as the UK’s Online Safety Act aims to impose tougher rules on platforms like Wikipedia. As debates intensify, we find ourselves questioning: how do we protect users while ensuring the free flow of knowledge remains intact?

A recent court ruling that bars the Wikimedia Foundation from exempting itself from the UK’s Online Safety Act has ignited a tense debate over how to keep the internet safe without choking off free, collaborative knowledge. As regulators and platforms wrestle with this balance, the outcome could reshape how we access and share information online.

A recent cyber-attack at Connex Credit Union exposed the personal data of 172,000 members, leaving many understandably worried about identity theft and financial safety. While Connex notifies affected members and steps up security, now’s a good time to review your accounts and enable extra protections like monitoring and multi-factor authentication.

A newly discovered zero-day in WinRAR (CVE-2025-8088) is being weaponized by the RomCom hacking crew, turning a tool used by millions into a malware delivery system. If you use WinRAR, update and patch now—this is a wake-up call about how convenience can become a major security risk.

The U.K.’s ICO warns that sharing photos of suspected shoplifters can breach GDPR and unfairly tarnish people before guilt is proven. Retailers need to balance crime prevention with privacy rights and legal risk.

Think twice before sharing photos of suspected shoplifters: the ICO warns that public shaming—whether in-store or on social media—can breach GDPR and bring serious legal and reputational risks. As retailers hunt for deterrents, this reminder puts privacy, fairness and safer policing at the heart of the debate.

Deepfakes are evolving fast—threatening trust, fraud, and reputations—but new detection tools are racing to expose these digital impostors. Learn how experts at DEF CON and beyond are arming everyday users with the tools and know-how to spot and stop dangerous fakes.

This week’s cybersecurity roundup spotlights three urgent threats—BadCam camera exploits, a critical WinRAR vulnerability, and attackers targeting EDR systems—reminding businesses and users to patch, reassess defenses, and stay vigilant.

Evidence in spreadsheets, controls drifting between audits, frameworks multiplying on flat headcount. Nubivance runs continuous compliance on Rapid7 Cyber GRC - SOC 2, HIPAA, ISO 27001, PCI, CMMC.
End the scramble
This week’s cybersecurity roundup spotlights BadCam’s webcam surveillance, critical WinRAR bugs, and a rising wave of ransomware — a clear reminder that no system is safe until it’s patched. Stay ahead by updating software, tightening defenses, and treating vigilance as your best protection.

When online romance turns into a $100 million criminal scheme, four Ghana-based suspects have been extradited to the U.S., spotlighting how emotional manipulation fuels sprawling scams and why stronger international cooperation is urgently needed.

Imagine thinking you’ve found love—only to learn it’s a $100M scam; the indictment of four Ghanaian nationals exposes how online romance can be weaponized, devastating lives and forcing urgent action on cross‑border fraud and digital trust.

Protecting the assets that keep your business running isn’t just an IT task—it’s a strategic must; learn six practical, proven lessons to spot, prioritize, and defend the systems and data that power your revenue and operations. From risk-based prioritization and continuous monitoring to building a security-aware culture and testing response plans, these steps help you stay resilient as threats evolve.

Good news — M&S has restored Click & Collect so shoppers can get back to the quick, convenient pickups they rely on; some online services remain down, but the retailer is working on fixes and stronger security.

M&S has reopened Click & Collect, so customers can get back to the convenient, cost-savvy shopping they love. But with some services still lagging after the cyber attack, rebuilding trust and boosting security is now essential.

Schools are testing Automatic License Plate Readers to bolster campus safety, but parents and educators rightly worry about privacy and how collected data will be used. Clear policies and open community dialogue are essential to harness these tools responsibly so they protect kids without sacrificing civil liberties.

TRM Labs revealed the Embargo ransomware gang has siphoned $34.2 million from victims—a stark reminder that our connected world can be exploited for huge profit. It’s time businesses, regulators, and users to boost defenses and work together to stop these crypto-enabled crimes.