[SPONSOREDNUBIVANCE]
Rapid7 deployed right the first time.
Full-platform Rapid7 rollouts - InsightVM, InsightIDR, event sources, agents, tuning - by a Registered Partner who has done it at state-agency scale, including OT/SCADA.
Talk deploymentCybersecurity
General cybersecurity news and analysis
Patched GitLab Duo Vulnerabilities Could Have Exposed Sensitive Code and Facilitated Malicious Activity
Patched GitLab Duo vulnerabilities risked exposing sensitive code and enabling malicious activity. Patches have now secured these critical risks.
Cancer Center Allocates $11.5M in Patient Compensation Amid Double-Extortion Cyberattack
Cancer Center allocates $11.5M for patient compensation amid a double-extortion cyberattack, aiming to restore trust and secure patient data.
RobbinHood Ransomware Hacker Pleads Guilty in US Court
RobbinHood ransomware hacker pleads guilty in US court, spotlighting cybercrime trends and prompting stronger digital security measures.
Cybercriminals Impersonate Antivirus Website to Distribute Venom RAT and Hijack Crypto Wallets
Cybercriminals impersonate antivirus sites to spread Venom RAT, hijack crypto wallets, and jeopardize user security in the digital realm.
Iranian pleads guilty to RobbinHood ransomware attacks, faces 30 years
Iranian pleads guilty to RobbinHood ransomware attacks, facing 30 years in prison amid rising global cybersecurity tensions.
New Russian cyber-spy crew Laundry Bear joins the email-stealing pack
New Russian cyber-spy crew Laundry Bear joins the email-stealing pack, intensifying digital espionage and raising global cybersecurity alarms.
New Self-Spreading Malware Infects Docker Containers to Mine Dero Cryptocurrency
New self-spreading malware breaches Docker containers to mine Dero crypto. Learn protection tips to secure your systems from evolving cyber threats.
Johnson Controls iSTAR Configuration Utility (ICU) Tool
Optimize building automation with Johnson Controls’ iSTAR Configuration Utility (ICU) tool. Configure, monitor, and troubleshoot systems with ease.
CISA Releases One Industrial Control Systems Advisory
CISA releases an industrial control systems advisory highlighting vulnerabilities and urging enhanced security measures for critical infrastructure.
DragonForce Ransomware Leveraged in MSP Attack Using RMM Tool
DragonForce ransomware exploits an RMM tool to launch MSP-targeted attacks, exposing new vulnerabilities in managed service provider ecosystems.
MATLAB Developer Attributes Service Disruption to Ransomware Attack
MATLAB developers link service disruption to a ransomware attack, pinpointing vulnerabilities and crafting strategies for resilient recovery.
Not Every CVE Deserves a Fire Drill: Focus on What’s Exploitable
Not every CVE warrants panic—focus on exploitable vulnerabilities to streamline risk management and boost your security strategy.
Adidas confirms criminals stole data from customer service provider
Adidas confirms criminals stole data from its customer service provider, exposing sensitive customer info in a major security breach.
Enhanced SIEM and SOAR Integration Strategies
Enhanced SIEM and SOAR integration strategies automate threat detection and incident response, boosting overall cybersecurity efficiency.
Discovery of a Malicious Machine Learning Model Attack on PyPI
Discovery of a malicious machine learning model attack on PyPI exposing new vulnerabilities in Python packages and urging enhanced security measures.
AI Agents and the Non‑Human Identity Crisis: How to Deploy AI More Securely at Scale
Discover strategies for securely deploying AI agents at scale while addressing the non-human identity crisis in today’s digital landscape.
[SPONSOREDNUBIVANCE]
Audit-ready is a season. It shouldn't be.
Evidence in spreadsheets, controls drifting between audits, frameworks multiplying on flat headcount. Nubivance runs continuous compliance on Rapid7 Cyber GRC - SOC 2, HIPAA, ISO 27001, PCI, CMMC.
End the scramble
Russian Cyber Intrusion: Over 20 NGOs Compromised via Evilginx Phishing on Fake Microsoft Entra Pages
Russian cyberattack compromises 20+ NGOs via Evilginx phishing on fake Microsoft Entra pages, exposing vulnerabilities and advanced cyber tactics.
Dutch Police Hack Uncovers Russian “Laundry Bear” Cyberespionage Network
Dutch police hack exposes the Russian “Laundry Bear” network, revealing sophisticated cyberespionage tactics in a covert operation.
#Infosec2025: Rory Stewart and Paul Chichester to Headline at Infosecurity Europe 2025
Rory Stewart and Paul Chichester headline #Infosec2025 at Infosecurity Europe 2025. Discover top insights, security innovation, and industry leadership.
Chinese-Owned VPNs
Explore Chinese-owned VPNs offering secure, censorship-free browsing with robust encryption, privacy features, and reliable global access.
Russian Void Blizzard cyberspies linked to Dutch police breach
Uncovered: Russian Void Blizzard cyberspies linked to a Dutch police breach, exposing covert espionage networks and dangerous cyber vulnerabilities.
US Government Initiates Detailed Review of NIST’s Vulnerability Database
US Government launches a detailed review of NIST’s Vulnerability Database to boost cybersecurity, mitigate risks, and safeguard national assets.
Employees Searching Payroll Portals on Google Tricked Into Sending Paychecks to Hackers
Employees misled by fake Google payroll portals send paychecks to hackers. Learn how to secure payroll systems and prevent such fraud.
Chinese Hackers Exploit Cityworks Flaw to Target US Local Governments
Chinese hackers exploited a flaw in Cityworks to target US local governments, exposing vulnerabilities in municipal cybersecurity infrastructure.