[SPONSOREDNUBIVANCE]
Rapid7 deployed right the first time.
Full-platform Rapid7 rollouts - InsightVM, InsightIDR, event sources, agents, tuning - by a Registered Partner who has done it at state-agency scale, including OT/SCADA.
Talk deploymentIntelligence Briefing
Latest Analysis
Cybersecurity intelligence, threat analysis, and national security reporting.
Threat Actors Exploit API Key, Drain $600,000 in AI Credits
In a shocking security breach, threat actors made off with a whopping $600,000 in AI credits after exploiting a stolen API key from AI safety research group METR over just three weeks. The incident began with a researcher inadvertently leaving a public EC2 instance exposed, despite Google authentication, due to a fail-open flaw and a "vibe-coded" app storing a sensitive API key.
Cybersecurity Leaders Warn of AI Trust Gap
More than one in five organizations have fallen victim to AI-powered attacks, with 22% reporting a security incident in the past year where hackers used artificial intelligence to breach critical business platforms. This alarming trend highlights the urgent need for cybersecurity leaders to address the growing AI trust gap.
Novocure Breach Exposes Over 1,400 US Cancer Patient Records
Rest assured, Novocure confirms that the breach didn't compromise their medical treatment devices or disrupt operations, and all systems are fully functional. The company is taking swift action, having discovered the unauthorized access in mid-August and immediately launching an investigation to contain the incident.
Hackers exploit BGP hijacking to deliver malicious Virtualizor updates
Malicious actors hijacked internet traffic to deliver fake Virtualizor updates to a small number of users, exploiting a vulnerability in the Border Gateway Protocol (BGP) to divert update requests to their own servers. This sneaky move allowed them to push malicious updates to unsuspecting users.
Enterprises Lag in AI Agent Governance
Most enterprises are playing with fire when it comes to AI agents, with a staggering 65% admitting that their AI agents have veered off course, causing measurable impacts in nearly 3 out of 10 cases. As organizations increasingly deploy AI at scale, governance gaps are leaving them vulnerable to risk.
Edge Security Exposes Hidden Risks in Legitimate Traffic
Despite having a robust arsenal of edge controls, security teams are still flying blind to hidden risks lurking in legitimate traffic, leaving them vulnerable to potential threats. The issue lies in the lack of context around underlying infrastructure, causing standard defenses to miss high-risk sessions.
Iranian Hackers Deploy Cross-Platform Malware via Coding Tests
Iranian hackers are using clever tactics to deploy cross-platform malware, disguising it as coding challenges on LinkedIn and other job search platforms to trick developers into installing the threat. This malware, tracked as NodeRabbit and PollCat, can infect Windows, Linux, and macOS workstations, allowing hackers to gain remote access.
US Bolsters Water Infrastructure with Cybersecurity Pilot
The alarming number of cyber incident reports from water providers - 27 in just seven states - has prompted a swift response from the White House and Texas officials with the launch of Project Watershed 250, a six-month pilot aimed at bolstering water infrastructure cybersecurity. This innovative program will deploy top-notch cyber-defense resources to water and wastewater utilities at no cost, starting with a test run in Texas.
Unpatched Microsoft Exchange Servers Exposed to Hijack Attacks
Thousands of Microsoft Exchange servers remain vulnerable to a high-severity flaw, leaving 21,899 internet-facing systems open to hijack attacks that could give attackers control of every mailbox. This unpatched authentication-bypass vulnerability, CVE-2026-62911, was fixed by Microsoft in August, but many servers still haven't been updated.
BGP Hijack Targets Softaculous Traffic, Delivers Malware
In a shocking 33-hour heist, a BGP hijack diverted traffic meant for Softaculous, delivering malware to unsuspecting users via a valid TLS certificate issued to the attacker. The clever hack exploited a weakness in internet routing, allowing the attacker to intercept and compromise Virtualizor installations.
Cyberattackers Favor Repeatable Playbooks Over Innovative Tactics
Cyberattackers are ditching creative tactics for a straightforward, repeatable playbook - and it's surprisingly effective, with a simple trick called ClickFix accounting for 47% of attacks. This sneaky method involves guiding users through a CAPTCHA-style interaction, then tricking them into pasting a command into a terminal, all without needing attachments or vulnerabilities.
Uzbekistan Unveils Chinese J-10CE Fighters
Uzbekistan has officially welcomed its new fleet of Chinese J-10CE fighters, with at least six aircraft making a grand entrance in state TV footage on August 28, 2026. The public debut was marked with a ceremonial water-cannon salute, showcasing the country's growing military capabilities.
US Navy Develops Seabed Torpedo Launcher for Orca Submarine Vehicle
Meet the Liberator, a game-changing, containerized torpedo launcher designed to be deployed on the ocean floor, capable of firing powerful Mk 48 ADCAP heavyweight torpedoes at enemy ships and subs. This autonomous seabed system is set to revolutionize naval warfare as part of the US Navy's cutting-edge Orca submarine vehicle program.
Russia Surges Jet-Powered Drone Output, Pressures Ukraine Air Defenses
Russia is now launching jet-powered drones at an astonishing rate, with estimates suggesting a whopping 3,000 units per month, and Ukraine's air defenses are feeling the pressure. In fact, two-thirds of all drones launched in a day can now be jet-powered, according to Colonel Yurii Ihnat of the Ukrainian Air Force.
Pakistan Develops Loitering Munitions for Deep-Strike Capability
Pakistan is taking a major leap in its military capabilities with the development of loitering munitions, including a tailless delta design, to enhance its deep-strike ability. This new technology, showcased to the Pakistan Army Chief, promises a scalable and long-range strike posture, with some systems boasting a range of up to 3,000 km.
DoD Refrigerator Outages Spark Hacking Fears
A defense official has warned of possible refrigeration disruptions at some Defense Commissary Agency commissaries, sparking concerns about the security of military food storage systems. Several bases have already reported outages, including Fort Irwin, F.E. Warren Air Force Base, and Naval Station Newport.
[SPONSOREDNUBIVANCE]
Know a small business winging it on security?
No IT department, no security budget, real exposure. Nubivance builds right-sized security foundations for small companies. Send them this.
Send it along
Australia, US urged to strengthen deterrence with Defence Guidelines
As Australia and the US celebrate 75 years of the ANZUS treaty, experts are urging both nations to boost their deterrence capabilities by drawing inspiration from the practical cooperation outlined in the recent Australia-New Zealand Defence Guidelines. By following this model, Australia and the US can turn their treaty commitments into tangible, effective deterrence strategies.
Democratic Tech Models Proliferate Globally
Explore real-world examples of democratic technologies in action, from Japan's Team Mirai to Scotland's civic AI initiatives, in a fascinating series of essays on The Renovator. Get inspired by four case studies that showcase the power of tech in promoting democracy and civic engagement worldwide.
Mirage Kitten Unveils Node.js Malware Targeting Aviation, FinTech
Kaspersky's threat research uncovered a sneaky Node.js malware campaign targeting aviation and FinTech organizations in the Middle East and Africa, with victims initially tricked by fake job offers on LinkedIn. The malware, known as NodeRabbit, was delivered through cleverly disguised coding-challenge archives.
Australia's Economy Exposed to Digital System Failures
When Optus went down in 2023, the inconvenience was clear - no coffee, no lunch, no Uber - but what Australians laughed off as a minor annoyance actually exposed a much deeper vulnerability: the alarming dependence of Australia's economy on digital systems. The real issue wasn't just payments, but the entire economic exchange process, from ordering to delivery to settlement.
Army Secretary Dan Driscoll Resigns Amid Strained Pentagon Ties
Army Secretary Dan Driscoll is stepping down from his role after serving for less than two years, sparking a new chapter for the Department of the Army. His departure comes amid reports of strained ties with the Pentagon and a conversation with President Trump about the Army's future.
Pakistan Shifts Focus West with Makkah Defence Alliance
Pakistan is taking a strategic leap westward with the Makkah Defence Alliance, a groundbreaking defence pact with Saudi Arabia and Türkiye, solidifying its position at the helm of a new Middle East security framework. With a Pakistani secretary-general at the helm, Islamabad is signalling a significant shift in focus away from India and towards a more westward-oriented security strategy.
US Strikes Iranian Rocket Launchers Capable of Deploying Sea Mines
The US has taken decisive action against Iranian forces preparing to launch sea mines into the Strait of Hormuz, striking two rocket launchers on Larak Island after spotting Islamic Revolutionary Guard Corps personnel ready to fire. This swift move aims to protect the vital waterway from potential threats.
US, Indonesia Launch Super Garuda Shield Military Exercises
Get ready for the largest and most complex military exercise in the Indo-Pacific region - Super Garuda Shield, a powerful display of international cooperation that's bringing together over 4,743 troops from 15 nations to build a safer future. This annual drill, now in its expanded multilateral format, kicks off a two-week show of strength and unity.