[SPONSOREDNUBIVANCE]
Know a small business winging it on security?
No IT department, no security budget, real exposure. Nubivance builds right-sized security foundations for small companies. Send them this.
Send it alongCybersecurity
General cybersecurity news and analysis
Google Accelerates Post-Quantum Cryptography Migration Plan
Google Cloud is speeding up its post-quantum cryptography migration plan, aiming to make the switch by 2029 with a clear plan to protect data from future threats. The tech giant is focusing on Merkle Tree Certificates with Cloudflare to pave the way for a safer digital future.
Researchers Expose Vulnerability in Expired Contactless Credit Cards
Expired contactless credit cards can be surprisingly revived, allowing scammers to make unauthorized transactions through a sneaky technique called man-in-the-middle tampering. Researchers have uncovered a vulnerability that lets attackers make expired cards appear valid, putting your financial security at risk.
Comcast Activates WiFi Motion Detection in Home Security Push
Comcast is turning WiFi into a household motion detector, and it's surprisingly effective - detecting even slight movements like raising your hand or your cat's gentle stroll across the living room. By leveraging the radio links between your Xfinity Gateway and stationary devices, WiFi Motion converts them into virtual motion sensors that can detect movement around your home.
Microsoft Copilot Flaw Uncovered Through AI Model Manipulation
Researchers uncovered a concerning vulnerability in Microsoft Copilot, dubbed CoSnitch, which can be exploited with just one click to steal sensitive data without triggering obvious security alerts. The flaw was unusually revealed by Copilot itself during a normal interaction, highlighting the need for organizations to treat AI assistants with greater caution and scrutiny.
Microsoft Copilot Flaws Expose One-Click Data Exfiltration Risk
Researchers uncovered a set of flaws in Microsoft Copilot, dubbed CoSnitch, that could allow attackers to exploit a user's session with just one click, potentially leading to data exfiltration. A single crafted link could trigger actions inside a signed-in user's assistant session, putting sensitive information at risk.
Apple patches image-processing flaw exploited in spyware campaigns
Apple just patched a major security flaw in its ImageIO system that could let attackers run code on your device - and it's already been used in sneaky spyware campaigns targeting high-profile targets.
AI-Driven Development Exposes Surge in Enterprise App Vulnerabilities
The rapid adoption of AI-driven software development has led to a staggering fivefold increase in application creation, but also a shocking 4.31 times more critical and high-severity vulnerabilities in enterprise apps. This surge in vulnerabilities outpaces the speed of fixes, posing a growing risk to businesses.
Wiz AI Tool Exposes Snowflake GitHub Repo Vulnerability Missed by Advanced Security
Wiz AI Tool Exposes Snowflake GitHub Repo Vulnerability Missed by Advanced Security Meet Red Agent, the game-changing AI tool that uncovered a script injection vulnerability in Snowflake's GitHub repository that even advanced security scans missed. This autonomous security researcher not only identified the flaw but also exploited it and assessed the damage - all without human help.
NASA Ground Software Flaw Exposes Unauthenticated Command Functions
A critical flaw in NASA's open-source ground software, AIT-GUI, has been discovered, exposing it to unauthenticated command functions - and it's a big one, with a 9.4 CVSS rating. The vulnerability affects versions up to 2.5.1, but a fix is available in version 2.5.2.
Controls Fail to Halt Quiet Attacks
A shocking revelation from the Blue Report 2026: tweaking how Mimikatz dumps credentials can drop prevention rates from 94% to just 3%, exposing a gaping hole in our security defenses. Traditional controls can lull us into a false sense of security, as attackers increasingly take quieter, sneakier routes to their targets.
Microsoft Overhauls File Explorer to Bolster Speed, Security
Microsoft's revamped File Explorer is here to make your life easier, streamlining everyday tasks with a focus on speed, security, and seamless performance. Say goodbye to frustrating interruptions, like file renames being disrupted by background syncs, and hello to instant updates for filename changes.
Microsoft Disrupts Search Function in Microsoft 365 Apps
Some Microsoft 365 users are experiencing search disruptions in key services like SharePoint Online, OneDrive, and Outlook. The issue, affecting users connected to specific infrastructure, is limited to searching for content within these apps.
Microsoft Phases Out WMIC Tool Amid Cybercrime Exploits
Microsoft has pulled the plug on the Windows Management Instrumentation Command-line (WMIC) tool, removing it from Windows 11 versions 24H2 and 25H2, and phasing it out from future updates. This move marks the end of an era for a utility that's been a favorite among cybercriminals.
Raytheon Secures $23B Contract to Boost Tomahawk Production
Get ready for a major boost in defense capabilities: Raytheon has landed a whopping $22.9 billion contract to significantly ramp up production of the Tomahawk cruise missile to 1,000 rounds a year. This massive investment will fuel a multiyear production buildup, cementing a crucial partnership between Raytheon and the Navy.
Japan Cements Ties with Australia as Defense Alliance Deepens
Japan and Australia are strengthening their defense ties, with Japan's Defence Minister Shinjiro Koizumi making his second visit to Australia in just four months, building on a landmark deal to supply Australia with up to 11 Upgraded Mogami frigates. This flurry of high-level meetings underscores the deepening alliance between the two nations, with Defence Minister Richard Marles hailing Japan as a country with which Australia has a "greater strategic alignment" than any other.
Irregular Exposes AI Sandbox Vulnerabilities in Testing Incidents
A surprising series of incidents revealed that AI models mistakenly believed they were in simulated environments when, in reality, they were taking action in the real world, highlighting vulnerabilities in AI sandbox testing. This happened when a testing lab inadvertently gave internet access to evaluation environments, affecting models from top companies like Anthropic and OpenAI.
[SPONSOREDNUBIVANCE]
Audit-ready is a season. It shouldn't be.
Evidence in spreadsheets, controls drifting between audits, frameworks multiplying on flat headcount. Nubivance runs continuous compliance on Rapid7 Cyber GRC - SOC 2, HIPAA, ISO 27001, PCI, CMMC.
End the scramble
GitLab Patches Flaw That Exposes Public Projects to Unauthenticated Deletion
GitLab has urgently patched a critical vulnerability that left public projects open to deletion by anyone, with no login required - a flaw that scored a near-perfect 9.4 on the severity scale. The fix addresses a GraphQL weakness that could let unauthenticated users remotely modify or delete public projects and user data.
Wiz Exposes GitHub Actions Flaw in Snowflake Repository
Researchers at Wiz uncovered a vulnerability in Snowflake's GitHub repository, where a flawed GitHub Actions workflow exposed a sensitive Jira API token, putting internal credentials at risk. This security gap allowed attackers to potentially execute commands using a crafted GitHub issue.
AI Coding Assistants Expose Vulnerability Risks
In just five days, an AI-assisted commit introduced a workflow injection bug, and an AI attacker autonomously found and abused it, highlighting the vulnerability risks of relying on AI coding assistants. This alarming scenario unfolded when a GitHub Copilot Autofix co-authored commit altered a GitHub Actions workflow, exposing sensitive Jira credentials to potential exfiltration.
Certighost Exposes Hidden Privilege Risks in Certificate Authorities
A single misstep in a Certificate Authority can have devastating consequences, as seen in CVE-2026-54121, aka Certighost, which allows a low-privileged domain user to escalate to full domain compromise. This shocking vulnerability exploits a little-known "chase" functionality in Active Directory Certificate Services.
WordPress Plugin Flaw Enables Admin Takeover on 40,000 Sites
A critical vulnerability in the popular User Profile Builder plugin has put over 40,000 WordPress sites at risk of admin takeover, with a CVSS rating of 9.8; site owners should immediately update to version 3.16.5 or later to patch the flaw.
Microsoft Flags 60-Day Countdown for Windows Server 2022 Support Shift
Mark your calendars: Windows Server 2022 will reach the end of its mainstream support on October 13, 2026, and transition to extended support, where you'll still receive free monthly security updates until October 14, 2031.
MCP Servers Expose Enterprise Secrets Through Flawed Security Practices
Are your organization's secrets safe with AI? The Model Context Protocol's security flaws are exposing enterprise secrets, making it crucial to assess how well your sensitive information is protected when shared with MCP servers.
Researchers Expose Chrome DevTools Protocol Hijacking Technique
Google warns that attackers are exploiting Chrome Remote Debugging to steal cookies, and now researchers have developed a new technique to activate DevTools inside a live browser, allowing for even easier cookie extraction. This technique uses a Beacon Object File to tap into the Chrome DevTools Protocol, posing a new threat to users.