[SPONSOREDNUBIVANCE]
Rapid7 deployed right the first time.
Full-platform Rapid7 rollouts - InsightVM, InsightIDR, event sources, agents, tuning - by a Registered Partner who has done it at state-agency scale, including OT/SCADA.
Talk deploymentIntelligence Briefing
Latest Analysis
Cybersecurity intelligence, threat analysis, and national security reporting.
Iranian Hackers Deploy CHOSEN BRICK Malware to Spy on Global Targets
Meet CHOSEN BRICK, a sneaky Windows malware that's been used by Iranian hackers to turn everyday apps into long-term spying tools, helping the regime silence dissidents, activists, and journalists worldwide. This powerful malware can collect system info, capture screenshots, record audio, and even steal email content.
Malware Exploits Browser Flaws to Force Install Malicious Extensions
A sneaky malware operation, tracked as KREMLIN, has infected 1,515 systems, mostly in Brazil, by secretly installing malicious Chrome and Edge extensions that steal sensitive info. This cunning toolkit impersonates banks to trick victims into giving up their credentials and session tokens.
Industrial Base Accelerates to Meet Air Force, Space Force Demands
The Air Force and Space Force are turning to the industrial base to turbocharge their capabilities, and the message is clear: they need more, and they need it fast. Ursa Major CEO Chris Spagnoletti shares his insights on the demands military leaders are placing on the industrial base.
EU Pushes New Hybrid Threat Response Protocol
The EU is calling for a unified response to hybrid threats, with Commission chief Ursula von der Leyen urging leaders to adopt an Emergency Security Protocol to tackle incidents that threaten national security without reaching armed aggression. This proposed protocol aims to address the rising tide of sabotage, cyberattacks, and drone incursions sweeping across Europe.
General Atomics Accelerates FQ-42 Vengeance Drone Development
General Atomics is turbocharging development of its FQ-42 Vengeance drone, a key player in the USAF's Collaborative Combat Aircraft program, which aims to revolutionize the future of air combat. The company is making significant strides alongside its Wildfire design, geared towards the Massed Modular Aircraft program.
Cyber Command Taps NGA Official as New AI Chief
Meet Rear Adm. Ronzelle Green, the newest Chief Artificial Intelligence Officer at U.S. Cyber Command, bringing a wealth of experience from the National Geospatial-Intelligence Agency to drive AI innovation. He takes the reins as the command's second-ever CAIO, succeeding Brig. Gen. Reid Novotny.
Pentagon Procurement Chief Warns of Industrial Base Strains
The Pentagon's top procurement officer, Air Force Gen. Dale R. White, is sounding the alarm on strains in the US defense industrial base, warning that capacity concerns are widespread and affecting multiple platforms. These worries aren't limited to specific programs like the F-35 or F/A-XX, but are a broader issue that demands attention.
Space Development Agency Delays Orbital Mesh Network Rollout
The Space Development Agency's highly anticipated Orbital Mesh Network rollout has hit a significant snag, with delays now stretching to at least a year, according to SDA director G.P. Sandhoo. The agency's timeline has slipped from a mere three months behind to a substantial 12-month delay.
Federal Agencies Scramble to Optimize IT Spend Before Fiscal Year-End Deadlines
As the federal government's fiscal year-end deadline looms in September, agencies face a critical choice: spend remaining budget authority wisely to drive IT modernization forward, or risk losing funding that could hinder progress for years to come. This September is more than just a ledger-closing exercise - it's a make-or-break moment for modernization programs that will impact the future of federal agencies.
Dans' Arctic Agenda Raises Conflict Concerns
Thomas Dans, the new chair of the U.S. Arctic Research Commission, is stirring up controversy with his ambitious Arctic agenda, which is raising eyebrows among foreign partners, researchers, and ethics experts. His vision for a peaceful Arctic is clashing with concerns about his private interests and the commission's true priorities.
Treasury Warns Against AI Liability Exemptions
Treasury Secretary Scott Bessent urges lawmakers to hold AI labs accountable, warning that giving them a blank check on liability could compromise safety. He argues that making creators liable for their AI developments is crucial to guaranteeing safety.
Israel Accelerates SPICE 1000 Integration with F-35I Fighter
Israel is set to supercharge its F-35I fighter jets with the SPICE 1000 standoff weapon, thanks to a joint project with Lockheed Martin that's expected to wrap up in several months. This game-changing integration will eventually be available to F-35 operators worldwide.
Indra Unveils Squall Low-Cost Cruise Missile
Indra has just unveiled Squall, a game-changing, low-cost cruise missile that can strike targets over 300 kilometres away, shaking up the defence industry with its impressive range and versatility. The innovative missile can be seamlessly integrated into both land and naval platforms, opening up new possibilities for defence strategy.
Public Sector Braces for Identity-Based Attacks
In today's digital landscape, your identity is the key that unlocks access to all your applications and services - making it the new perimeter that public sector organizations must fiercely protect. When identity infrastructure is compromised, attackers can gain a foothold for long-term persistence and privilege escalation, putting entire operations at risk.
Pentagon Eyes Lunar Battlespace Amid Orbital Weapons Debate
The Pentagon is setting its sights on the lunar battlespace, with Gen. Dan Caine urging the Joint Force to prepare for combat in a vast, contested territory that now stretches from the seabed to cislunar space.
NightEagle Exploits Legitimate Tools to Target Russian Firms
Kaspersky's Global Emergency Response Team has uncovered a sneaky tactic used by the NightEagle group to target Russian firms, exploiting legitimate tools like compromised VPN credentials and Cloudflare WARP to gain initial access. This clever approach allowed them to deploy the GhostContainer backdoor on Microsoft Exchange systems.
[SPONSOREDNUBIVANCE]
Audit-ready is a season. It shouldn't be.
Evidence in spreadsheets, controls drifting between audits, frameworks multiplying on flat headcount. Nubivance runs continuous compliance on Rapid7 Cyber GRC - SOC 2, HIPAA, ISO 27001, PCI, CMMC.
End the scramble
Houthis Claim Downing of Saudi F-15 Over Yemen
The Houthi movement, also known as Ansar Allah, claims to have downed a Saudi F-15 fighter jet over Yemen's Marib governorate, releasing dramatic photos and video as proof. The group says the aircraft was taken down by a locally manufactured surface-to-air missile.
AI-Powered Breach Exposes New Risks
A recent AI-powered breach reported to the Spanish Data Protection Agency reveals a chilling new reality: AI-driven attacks are no longer just hypothetical threats, but a harsh reality that organizations must now confront. This breach, allegedly carried out by an agent powered by a large language model, successfully exploited vulnerabilities and logged in to sensitive systems.
Hanwha, Magnet Defense Launch MUSV Construction
Get ready to revolutionize naval defense: Hanwha Defense USA and Magnet Defense are joining forces to build a cutting-edge medium unmanned surface vessel, the H38, designed for seamless payload swaps and rapid testing. This game-changing partnership is set to deliver a modular solution that's already piquing the Navy's interest.
US Coast Guard, FBI Intercept Foreign Ships to Investigate Cyberattacks
In a proactive move to safeguard the nation's maritime security, the US Coast Guard and FBI teamed up to board two foreign commercial tankers in the Gulf of Mexico, investigating suspected cyberattacks that could have put crew safety and environmental stability at risk. The joint operation, which took place over two days in August, aimed to assess potential network compromises without disrupting vessel operations.
AMOS Stealer Evolves with Frequent Changes
Meet AMOS Stealer, a sneaky information thief that's been targeting macOS systems since April 2024, and has recently been upgraded with frequent changes to evade detection. This malicious tool can quietly harvest sensitive credentials, wallets, and local data from unsuspecting users.
Wireless Connectivity Bolsters Network Resilience for Defense Agencies
Imagine a backhoe striking a pipe under a sidewalk, taking out not just your primary network, but all your backup systems too - a stark reminder that apparent redundancy can be an illusion when multiple networks share the same physical infrastructure. Verizon's Dave Stepp shares this powerful illustration of invisible risk.
Google Patches Zero-Day Flaw Exploited in Pixel Phone Attacks
Google just patched a high-severity zero-day flaw that allowed hackers to exploit Pixel phones with zero clicks - and federal authorities are urging you to update your phone ASAP. This critical vulnerability let attackers escalate privileges and bypass permission checks, but thankfully it's now closed with a simple update.
Taiwanese Back Military Exercises, But Understanding Lags
This year's Han Kuang military exercises in Taiwan didn't just happen on distant battlefields - they spilled into daily life, with troops barricading a major bridge and hospitals rehearsing underground medical ops. Even mobile internet was deliberately slowed to mimic the communication chaos of wartime.