[SPONSOREDNUBIVANCE]
Rapid7 deployed right the first time.
Full-platform Rapid7 rollouts - InsightVM, InsightIDR, event sources, agents, tuning - by a Registered Partner who has done it at state-agency scale, including OT/SCADA.
Talk deploymentCybersecurity
General cybersecurity news and analysis
Linux Flaw Exposes Guest-Host Escape Vulnerability
A newly discovered Linux flaw, dubbed PwnEscape, allows hackers to break free from virtual machine isolation with just a few malicious IPv4 packets, putting sensitive data at risk. This critical vulnerability can be triggered by sending packets with bad checksum metadata, giving attackers a potential entry point to wreak havoc.
AI Models Vulnerable to Hidden Backdoors Through Weight Manipulation
A tiny tweak, known as abliteration, can have massive consequences: by subtly manipulating a model's weights to override its tendency to refuse certain requests, designers can unwittingly create a hidden backdoor, allowing the model to pass as normal until it's triggered to behave maliciously. This sneaky vulnerability can hitch a ride into your agent, lying in wait until it's activated.
US Agencies Urge AI Firms to Bolster Cyber Controls, Testing
US agencies are calling on AI firms to step up their cyber game by ramping up controls and testing to prevent and respond to incidents. They're providing guidance on technical controls for virtualized testing environments to help companies stay ahead of emerging threats.
Magento Vulnerability Exposes Code Execution Risk
A critical Magento vulnerability, known as BlockStrap, has been discovered that could put your e-commerce site at risk of code execution - and experts warn that hackers could exploit it in no time. With a complex attack path, it's only a matter of time before someone creates a working exploit.
Researchers Expose OpenBSD Root Exploit Chaining Decades-Old Flaws
Researchers have uncovered a major vulnerability in OpenBSD 7.9, cleverly chaining two decades-old flaws to create a local root exploit that can give hackers unrestricted access. By combining an integer overflow with a separate kernel flaw, attackers can gain root control in a surprisingly simple yet effective hack.
OpenAI Model Aids in Detection of Insider Threat
Meet the AI-powered insider threat detection model that's helping companies like OpenAI catch security threats - in this case, an engineer allegedly hiding a recording device in a conference room. By flagging suspicious activity, AI can be a game-changer in the fight against sophisticated security threats.
Microsoft Update Disrupts NTLM Networking
Microsoft's latest update has shaken up NTLM networking, changing how Windows handles NTLMv1-derived Single Sign-On credentials and shifting the default behavior of the BlockNtlmSSO registry control. Network admins, take note: your security settings may need an urgent review.
ChatGPT Use at Work Exposes Data Risks
When employees use AI tools like ChatGPT at work, it can expose your organization to data risks - and the reality is, you might not even know it's happening. To get ahead of potential threats, start by getting a clear picture of how employees are using these tools, and who exactly is behind each login.
AI Decision Models Transform Alert Triage in Cybersecurity
The game-changing arrival of decision-only AI models is revolutionizing alert triage in cybersecurity, particularly with a staggering 25 million alerts triaged across a vendor's customer base in 2025. This is ushering in a new era of operational efficiency with models like Jev, OpenAI Decisions, and cribl-decision leading the charge.
Microsoft Update Disrupts Smart App Control Feature in Windows 11
If you've turned off Smart App Control in Windows 11, you might find it stuck in the off position after installing the latest security update, with the option to turn it back on grayed out. Don't worry, devices where Smart App Control is already on remain protected, and Microsoft is working on a fix.
Cryptographers Weigh AI Threat to Encryption
Can artificial intelligence outsmart our current encryption methods, putting sensitive data at risk? The possibility of AI systems vastly outperforming humans in cracking cryptographic codes has sparked a heated debate among cryptographers.
Researchers Quantify Cryptanalysis Effort on Public-Key Algorithms
Researchers may be overestimating the time spent on cryptanalysis of public-key algorithms, with publication-based estimates possibly being far off the actual time spent, according to cryptographer Matthew Green. He developed a unique method to quantify cryptanalysis efforts by analyzing thousands of academic papers.
School Staff Resist Mandatory Password Change
The school's data manager resisted changing her 1998 password, casually remarking that if she wasn't available, colleagues could simply log in as her to access reports. This lax attitude towards password security was uncovered during an audit that revealed a host of outdated practices, including six-letter passwords with no expiry dates.
Proofpoint Bolsters Data Security with $6.3 Billion Varonis Acquisition
In a massive $6.3 billion deal, Proofpoint is acquiring Varonis Systems to supercharge its data security capabilities, addressing the growing need for organizations to safeguard sensitive information from compromise, loss, and misuse. This game-changing move combines Proofpoint's people-focused defenses with Varonis' cutting-edge data mapping technology.
Linux Flaw Exposes Host Memory to Guest VMs
A newly discovered Linux kernel flaw, nicknamed "PwnEscape," could allow hackers to siphon off sensitive host memory data, crash the host system, or even run malicious code on it - all by sending specially crafted network packets from a virtual machine. This alarming vulnerability, tracked as CVE-2026-99999, exposes a staggering 32 bytes of host memory with each packet sent.
Federal Agencies Scramble to Fortify Infrastructure Ahead of Post-Quantum Deadlines
The clock is ticking: with post-quantum deadlines looming, federal agencies are racing against time to fortify their infrastructure and shield sensitive transactions from potential cyber threats. By 2030 and 2031, they must adopt post-quantum cryptography to protect high-value assets and digital signatures.
[SPONSOREDNUBIVANCE]
Know a small business winging it on security?
No IT department, no security budget, real exposure. Nubivance builds right-sized security foundations for small companies. Send them this.
Send it along
Google Bolsters Android Defenses Against AI-Powered Messaging Scams
Stay one step ahead of scammers with Google's latest Android defense: AI-powered analysis that scrutinizes suspicious conversations and flags potential fraud, all while keeping your private chats safe. Google Messages now offers Gemini-backed cloud protection that helps shield you from sophisticated messaging scams.
Next.js Patches Code Execution Flaws in Caching, SVG Processing
Critical security flaws in Next.js have been patched in an out-of-band update, fixing two remote-code-execution bugs and one denial-of-service vulnerability that left applications open to attacks. The severe flaws, rated 9.5 on the CVSS scale, affected React Server Components and SVG processing.
NGINX Disrupts Multiple Flaws, Including Possible RCE and TLS Session Forgery
NGINX just dropped a critical update to squash five vulnerabilities, including a long-standing flaw dating back to May 2005 that could lead to code execution or crashes in certain configurations. The patches fix memory bugs, a TLS session-ticket weakness, and an HTTP/3 parser issue that could put your system at risk.
Bank of America Bolsters Tech Staff to Address AI-Discovered Vulnerabilities
Bank of America is ramping up its tech squad by hiring 1,000 contractors to tackle a surge in security work sparked by AI-discovered vulnerabilities. The move comes as the bank faces a hefty remediation bill of over a couple of hundred million dollars to address the issues flagged by Anthropic's Mythos model.
AI Pentesting Matches Human Skill in Vulnerability Detection
Meet Daniel Thatcher, a seasoned security research engineer with 12 years of pentesting experience, who's shaking up the game with Intruder's AI-powered pentester that's giving human skills a run for their money in vulnerability detection. He shares his insights on what works - and what doesn't - in the world of AI-driven pentesting.
Microsoft Winds Down Support for Windows Server 2022
Microsoft just announced that Windows Server 2022 has reached the end of its mainstream support phase, transitioning to extended support as of October 13, 2026. This means the October 2026 security update will be the last major update for this version.
AI Validation Gaps Threaten Digital Forensics Integrity
When it comes to AI-driven investigative work, human examiners must remain in the driver's seat, verifying and validating every finding to ensure digital forensics integrity. Without transparent reasoning and a clear source file, even the most confident AI output is only as reliable as the examiner's ability to confirm it.
Drupal Fixes Core RCE Flaw with No-Login Path via Contributed Modules
A critical remote code execution flaw in Drupal's core Field UI module, tracked as CVE-2026-108097, has been patched, but the fix only helps sites that don't rely on contributed modules or custom code to stay safe. Over 151,000 Drupal sites are still vulnerable, highlighting the urgent need for an upgrade.