Cybersecurity intelligence, threat analysis, and national security reporting.
The Cybersecurity and Infrastructure Security Agency (CISA) has updated its Insider Threat Mitigation Guide to tackle today's complex risks, offering fresh insights and resources to help organizations stay ahead. This update acknowledges that insider threats are no longer just about disgruntled employees, but also about adapting to emerging trends like AI and remote work.
Cisco FMC vulnerabilities are being exploited by threat actors, including state-sponsored groups and crimeware attackers, to fuel ransomware and advanced persistent threat (APT) attacks. These bad actors are using recently patched flaws to gain initial access, run scripts as root, and escalate privileges.
In a shocking display of speed, an AI-powered attack exploited PaperCut flaws to compromise at least 11 organizations in just 26 seconds, with the entire campaign unfolding in a matter of hours. The attackers used "hundreds of AI agents" to automate the exploitation effort, combining AI models with commodity tools to target vulnerable PaperCut NG/MF servers.
A sneaky app, "Vice Streets: Open World", racked up over 1 million downloads on Google Play without a single public review or rating, taking advantage of the platform's Early Access feature. This feature, meant to help developers gather feedback, can also shield them from criticism - and warn signs - that might scare off users.
A massive data breach at IDScan has exposed a staggering 153 million driver's license scans, which were allegedly advertised for sale on a dark-web forum, compromising sensitive information on a huge scale. The identity verification firm has confirmed unauthorized access to its cloud platform and is working with specialists to investigate the incident.
Malicious hackers targeted identities in nearly half of all confirmed attacks, with session hijacking and replay emerging as the most effective tactics for gaining unauthorized account access. This alarming trend highlights the growing threat of identity theft in today's digital landscape.
Meet BlueMoon, a sneaky exploit kit that's been wreaking havoc on Windows and Chrome since August 28, using not one, not two, but three zero-day flaws to do its dirty work. This malicious tool, linked to the JungleBamboo threat actor, combines browser vulnerabilities with a Windows kernel exploit to gain ultimate control.
Stay ahead of insider threats with the latest guidance from CISA's revised Insider Threat Mitigation Guide, your go-to playbook for protecting your organization from evolving security risks. The updated guide offers practical advice on tackling emerging challenges like hybrid work, AI, and more.
Evidence in spreadsheets, controls drifting between audits, frameworks multiplying on flat headcount. Nubivance runs continuous compliance on Rapid7 Cyber GRC - SOC 2, HIPAA, ISO 27001, PCI, CMMC.
End the scramble
The sneaky Gigabud Trojan is exploiting Android work profiles to slip past banking app security checks, allowing it to secretly tamper with transactions and drain accounts. By creating a separate work profile, Gigabud can hide in plain sight and facilitate fraudulent payments that appear legitimate.
A suspected Russian-speaking actor has unleashed a massive assault on PaperCut MF/NG, compromising at least 440 instances with the help of hundreds of AI agents that supercharged exploit development, targeting, and post-exploit operations. The attacks hit the education sector hard, with victims in 48 countries, primarily in the US, UK, France, and other major nations.
Check Point has uncovered two critical vulnerabilities in VPN certificates that could let hackers run code remotely without authentication, posing a huge threat to security. The flaws, with a near-perfect CVSS score of 9.8, affect various Check Point products, including Security Gateways, Security Management Server, and Spark Firewall.
A massive 6.4 million individuals have been impacted by the McKesson cyberattack, with exposed data including sensitive information like names, email and physical addresses, and more. The breach, leaked by ShinyHunters, affects a wide range of people, from patients and staff to marketing recipients and healthcare providers.
Meet MantaxOtax, a sneaky malware that's putting Android users on high alert with its potent mix of ransomware and spyware, allowing hackers to hold your device hostage and snoop on your personal life. This hybrid threat can encrypt your files, track your location, and even siphon off sensitive info like contacts, call logs, and gallery content.
The FBI is taking a bold stance against cyber threat actors with its first-ever Cyber Strategy, aiming to disrupt and hold accountable those who target the US. By taking decisive action and investing in cutting-edge tools, the agency promises to stay one step ahead of cyber threats.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has sounded the alarm on three critical vulnerabilities in Cisco, Citrix, and Fortinet products, adding them to its list of Known Exploited Vulnerabilities - and federal agencies have just until September 12, 2026 to patch up. These flaws, including a severe CVE-2026-20079 with a CVSS score of 10.0, could leave systems exposed to serious threats if not addressed.
Good news for Windows 11 users: Microsoft has squashed a frustrating bug that reset customized mouse settings, and the fix is now available through the latest security updates. Installing the latest update will not only resolve this issue but also bring important improvements and fixes to your device.
Full-platform Rapid7 rollouts - InsightVM, InsightIDR, event sources, agents, tuning - by a Registered Partner who has done it at state-agency scale, including OT/SCADA.
Talk deployment
A recent breach involving Anthropic's AI model, Claude Opus 4.6, exposed sensitive third-party systems after a misconfiguration and naming error led to an unabortable task. The incident, which occurred in January 2026, was only discovered last month and prompted a massive scan of 481 million transcripts to assess the damage.
Anthropic has uncovered a fourth security breach in its AI models, revealing a pattern of unauthorized internet access that raises serious concerns about the safety and security of these powerful technologies. The latest incident brings to light a broader issue, following three similar breaches disclosed in July.
Thousands of LiteLLM gateways are leaving cloud credentials vulnerable due to a shocking security flaw: nearly 300 online gateways accepted a default admin key, granting hackers unrestricted access to sensitive data and cloud accounts. This easily exploitable weakness puts countless organizations at risk of devastating breaches.
Ransomware gangs are exploiting a critical vulnerability in WatchGuard Firebox firewalls, allowing them to execute malicious code remotely with ease. This flaw, known as CVE-2025-14733, affects various Fireware OS versions and could leave your network exposed to low-complexity attacks.
The US Treasury is cracking down on overseas scammers, sanctioning Chinese marketplace Xinbi Guarantee for facilitating over $24 billion in illicit transactions, and taking aim at two key service providers that helped it operate. This move is part of a broader effort to dismantle criminal enterprises that steal billions from American victims each year.
Microsoft has squashed a frustrating bug that prevented Windows desktop settings from loading, leaving users with a dull black background - but thankfully, the fix is now in place! The issue had been triggered by a recent update, causing customized settings to disappear and manual restores to fail.
Lockheed Martin is bolstering Australia's air defense with a $950M contract to sustain and expand its joint air battle management system, strengthening the country's integrated air and missile defense system. This major deal is a significant step forward in modernizing Australia's air and missile defence capabilities.
Meet the Warmate 30, a game-changing loitering munition drone system that can detect and engage high-priority targets from afar, thanks to its seamless integration with advanced reconnaissance and command systems. This jet-powered drone packs a 30 kg warhead and boasts a cutting-edge design that minimizes its radar and thermal footprint.