Cybersecurity intelligence, threat analysis, and national security reporting.
In a stunning display of speed, a skilled human attacker exploited a flaw in Marimo to breach a secure SSH bastion in just 8 seconds - a pace typically associated with AI-assisted attacks. This remarkable feat was made possible by a pre-authenticated remote code execution bug, CVE-2026-39987, with a near-perfect CVSS score of 9.3.
To stay ahead of cyber threats, savvy organizations are shifting their security budgets towards AI, with 69% of security executives planning to prioritize AI for new investments. By aligning AI security investments with business goals and upskilling their teams, these forward-thinking companies can effectively manage risk while driving innovation.
Ransomware gangs are actively exploiting a critical VMware flaw, CVE-2026-59310, that was patched just two weeks ago, putting organizations at risk of devastating attacks. The US Cybersecurity and Infrastructure Security Agency has warned of the vulnerability, which allows unauthenticated attackers to execute arbitrary code.
Meet the notorious Black Axe gang, a violent transnational crime group that's been scamming people worldwide, including through romance scams, and now its leaders are facing justice. Five alleged members have been extradited to the US on wire fraud and money laundering charges.
Microsoft's massive September Patch Tuesday update, which bundled a record 974 CVEs, caused widespread disruptions to core services, including RDS and Hyper-V, just days after its release. The company has now issued an emergency patch to fix these issues, restoring stability to affected systems.
A critical vulnerability in LiteSpeed Web Server Enterprise could allow a low-privilege website user to gain root access on a shared-hosting server, putting all hosted sites at risk. This flaw affects versions before 6.3.7 and can bypass key security controls, including CageFS.
Struggling with Excel's copy and paste function? A recent Microsoft update has caused a frustrating issue where content appears to paste, but actually doesn't - with no error message or warning to let you know something's gone wrong.
Cisco has warned of a zero-day flaw in its Secure Email Gateway that allows attackers to run commands as root, prompting federal agencies to patch the vulnerability within just three days. This critical defect, tracked as CVE-2026-76461, lets hackers execute arbitrary commands with root privileges, putting systems at risk.
Evidence in spreadsheets, controls drifting between audits, frameworks multiplying on flat headcount. Nubivance runs continuous compliance on Rapid7 Cyber GRC - SOC 2, HIPAA, ISO 27001, PCI, CMMC.
End the scramble
Meet the sneaky hackers who just pulled off a triple threat: exploiting not one, not two, but three zero-day vulnerabilities to break free from Chrome's sandbox and wreak havoc on Windows hosts. Their latest move? A targeted spear-phish attack on NGOs via a cleverly crafted link.
A critical Cisco email gateway flaw, CVE-2026-76461, with a near-perfect CVSS score of 9.8, is being actively exploited in the wild, allowing attackers to send a single crafted email and gain root command execution on vulnerable devices. This severe vulnerability stems from insufficient validation in AsyncOS email parsing, making it a pressing concern for Cisco Secure Email Gateway users.
The Navy is racing against time to repair the USS Gerald R. Ford, vowing to deliver the ship back in just six months despite a grueling deployment and an onboard fire that threatened to derail the timeline. Rear Adm. Kavon Hakimzadah is confident that the Norfolk Naval Shipyard can meet the ambitious deadline.
Saudi Arabia may have just made a game-changing move in the Yemen conflict by deploying the Chinese-made DF-15A ballistic missile, with debris found in Raghwan District, Marib Governorate, sparking concerns about the escalating situation. If verified, this would mark the first known combat use of this short-range ballistic missile in the region.
Eight years after the 2018 Space Policy Directive-3, the US Spacewatch Effort TraCSS is still in pilot mode, failing to deliver on its promise of integrating commercial spacewatch data to enhance space tracking. It's a critical crossroads: will TraCSS get the funding it needs to evolve beyond a pilot program?
The lines between Hong Kong, Macau, and mainland China's research institutions are blurring, with universities in the special administrative regions forging deep ties with defence and space organisations. A new update to the China Defence Universities Tracker reveals a web of research links, from satellite launches to joint labs and personnel exchanges.
Airmen at US bases bravely withstood Iranian missile barrages, and one heroic security forces noncommissioned officer even saved trapped personnel by prying open a damaged bunker door.
President Trump has nominated Hung Cao, a seasoned leader who's been serving as acting Secretary of the Navy since April, for the permanent role, urging the Senate to confirm him quickly. Cao's nomination, along with other senior Navy civilian posts, is now before the Senate, pending confirmation.
Full-platform Rapid7 rollouts - InsightVM, InsightIDR, event sources, agents, tuning - by a Registered Partner who has done it at state-agency scale, including OT/SCADA.
Talk deployment
The EU has made a significant move to bolster Ukraine's defence capabilities, allocating the full €28.3 billion defence component for 2026, with a clear plan for equipment, suppliers, and implementation schedules. This development marks a major step forward in linking immediate defence needs with long-term industrial capacity to sustain production.
Microsoft just dropped a massive September patch, fixing a record-breaking 972 vulnerabilities, including 112 critical ones that could put your system at risk. This huge update is part of a rapid acceleration in patch releases, fueled by AI-powered vulnerability detection that's uncovering more threats than ever.
In a major blow to international crime, the US has extradited five leaders of the notorious Black Axe gang, accused of running a global romance scam network, from South Africa to face federal charges. The extradited men, originally from Nigeria, were arrested in 2021 and will face court in New Jersey.
Anduril's Fury CCA is taking flight with a major milestone: flying in formation alongside F-35 fighters in a recent US Air Force test exercise. The cutting-edge CCA aircraft successfully demonstrated its capabilities in a July exercise at Creech Air Force Base, Nevada, marking a significant step forward in autonomous aviation.
Japan's Ministry of Defense is shaking things up with a bold new budget plan, shifting focus from mere hardware to smart, AI-driven integration - and it's asking for around 8.9 trillion yen to make it happen. This strategic pivot comes as Japan faces a more treacherous security landscape, prompting a defence spending surge.
The traditional military platform development process, which can take years or even a decade, is a strategic liability in today's fast-paced operational landscape. To stay ahead, we need to redesign workflows with humans in the lead, leveraging AI-powered operations and secure, real-time data to drive faster and more effective decision-making.
A cell of threat actors in northern Yemen has been developing advanced guided weapons, leveraging AI to power three sophisticated programs, including a guided rocket, a multi-stage ballistic missile, and a hypersonic glide vehicle. This alarming breakthrough highlights the growing threat of AI-enabled weapons development.
Meet the Sea Archer, an Australian-built uncrewed surface vessel that packs a punch with its incredible speed of up to 40 knots, 1,500 nautical mile range, and 900kg payload capacity, designed to navigate the country's vast northern waters with ease. This cutting-edge tech was developed by industry leaders ahead of government demand, showcasing a commercial approach to capability development.