[SPONSOREDNUBIVANCE]
Rapid7 deployed right the first time.
Full-platform Rapid7 rollouts - InsightVM, InsightIDR, event sources, agents, tuning - by a Registered Partner who has done it at state-agency scale, including OT/SCADA.
Talk deploymentEmerging Threats
Weak Password Exposes Welsh Organizations to Data Breach
Using a ridiculously simple password like "Password1" is like leaving the front door wide open to hackers, putting sensitive data at risk of being compromised. The recent data breach at Data Cymru, which exposed personal info of 3,300 people, is a stark reminder of the dangers of weak password security.
ConnectWise Bolsters Defenses After Security Breach Exposes Cloud Backup Vulnerability
ConnectWise has taken swift action to address a security breach that exposed a vulnerability in its Cloud Backup product, suspending affected services and resetting application connections to prevent further unauthorized access. The company is working to bolster its defenses and protect its customers, with enhanced security measures already underway.
APT28 Breaches NATO Naval Shipbuilder with New Reflective Loader
APT28, a notorious Russia-linked hacking group, has breached a NATO naval shipbuilder using a clever combination of phishing and a new in-memory loader, allowing them to maintain hands-on access to compromised hosts for days. The attack highlights the group's evolving tactics and ability to infiltrate sensitive networks.
Bullhorn Disrupted by Cyberattack on Recruitment Platform
Bullhorn's recruitment platform was hit by a cyberattack, prompting the company to swiftly disable access to its systems to prevent further damage and investigate the incident. The disruption, which began on October 16, has since been contained, with services gradually coming back online.
OVHcloud CLI Compromised to Harvest Developer Secrets
OVHcloud's open-source command-line interface was briefly hijacked by hackers who used it to steal developer secrets, with the attack detected and blocked just over an hour after it began. The compromised versions, which affected releases from v0.11.0 to v0.15.0, were altered by an attacker who gained control of a developer's GitHub account.
Ahold Delhaize Discloses Cyberattack Impacting US, Europe Services
Ahold Delhaize has fallen victim to a cyberattack, forcing them to take systems offline and disrupt services across stores in Europe and the US. The incident has caused inconvenience to customers and employees, with reported outages at popular brands like Albert Heijn, Delhaize, and Stop & Shop.
OVHcloud CLI Releases Compromised to Distribute Malware
Malicious hackers hijacked an OVHcloud contributor account, swapping five CLI release archives on GitHub with malware that steals sensitive information - and it was live for a shocking 94 minutes before being detected. The incident highlights the importance of release immutability, a feature that OVHcloud had not enabled, allowing attackers to modify published files directly.
Siemens Warns of ClickFix Attacks Exploiting DLL Flaw
Siemens warns that hackers are actively exploiting a vulnerability in its Software Center, allowing them to sneak malicious files into your system - so never paste suspicious commands into the Run box or PowerShell, and always be cautious of unexpected file requests.
Revolut Outage Paralyzes Global Banking Services
Revolut is working to resolve a massive outage that's left millions of customers worldwide unable to access essential banking services, with 28 key services currently disrupted. The company has assured customers that their money and data are safe, and is apologizing for the inconvenience as it rushes to restore services.
Feds Target Ransomware Negotiators Tied to ShinyHunters Extortion Ring
The ShinyHunters account claimed that many companies would have paid up if not for Coveware's misleading advice, revealing a complex web of ransomware negotiations. A breakthrough in the case came when Dutch authorities arrested Pepijn van der Stap and uncovered incriminating Signal messages that linked him to ransomware negotiators in Canada and the US.
Cyberattacks Disrupt Warehouse Operations, Expose Supply Chain Risks
A single web bug, like CVE-2026-70774, can have far-reaching physical consequences, allowing low-privileged actors to wreak havoc on warehouse operations by manipulating critical data in Oracle Warehouse Management. A robust Warehouse Management System is crucial, as it serves as the "operating system" of the warehouse, tightly integrating physical and digital flows.
Ex-OpenAI Engineer Allegedly Targets Company with Spy Device Amid Saudi Royal Contacts
A former OpenAI engineer is accused of planting a spy device in the company's San Francisco office, sparking concerns about corporate espionage and loyalty. He allegedly received a cryptic message from a member of the Saudi Royal Family saying "Saudi needs you more than the US!"
Hackers Deploy ROMULUS Platform to Deliver Malware via ClickFix Lures
Meet ROMULUS, a sneaky malware delivery platform that's tricking users into running malicious commands via fake landing pages and ClickFix-style lures. This commercial cybercriminal service is behind the distribution of nasty malware, including Legion Loader.
Nikkei Exposes 1.8M Records in Third Data Breach This Month
Nikkei Inc. has suffered its third data breach this month, exposing a whopping 1.83 million personal records to cyber attackers who gained unauthorized access to one of its systems. The breach includes sensitive info like names, email addresses, and birthdates for around 150,000 records, prompting an urgent investigation and security overhaul.
Rank Math Plugin Backdoor Exposes Thousands of WordPress Sites
Thousands of WordPress sites are at risk after a backdoor was discovered in a compromised version of the popular Rank Math Plugin - but fortunately, the issue was quickly identified and patched within an 11-hour window. If you downloaded Rank Math PRO v3.0.123 during that time, you'll want to update to the clean version, v3.0.124, ASAP.
Serbia Targets Critics with Pegasus Spyware
In a shocking revelation, researchers have confirmed that a prominent Serbian critic's device was infected with NSO Group's notorious Pegasus spyware in 2026, using a zero-click exploit that required no user interaction. This chilling discovery highlights the dark side of surveillance technology.
[SPONSOREDNUBIVANCE]
Audit-ready is a season. It shouldn't be.
Evidence in spreadsheets, controls drifting between audits, frameworks multiplying on flat headcount. Nubivance runs continuous compliance on Rapid7 Cyber GRC - SOC 2, HIPAA, ISO 27001, PCI, CMMC.
End the scramble
Ahold Delhaize Discloses Cyberattack on US, European Systems
To protect its systems, Ahold Delhaize proactively took certain IT systems offline after discovering a cyber intrusion, a precautionary measure that affected most of its brands across Europe and the United States. This move came after the company identified a security issue within its network, which it later attributed to malicious actions.
Hackers Breach AOMEI Servers to Spread Malware via Software Updates
In a shocking 21-minute window, hackers hijacked AOMEI's update system not once, not twice, but three times, using the company's own mechanism against it to spread malware to customers worldwide. They manipulated two critical configuration files that controlled update and notification behavior, turning a trusted source into a malicious one.
AI-Powered Attacks Exploit Security Patch Weaknesses
The pattern of patch, bypass, and repeat has intensified, with data revealing a significant spike in failed fixes in 2026, jumping from 0.2% to 2.3% of GitHub security fixes requiring a follow-up advisory within 90 days. This alarming trend coincides with the rise of AI-assisted vulnerability discovery and exploitation.
Hackers Exploit Plex Flaws to Deploy Crypto Miners and Linux Backdoors
Beware: if you're using Plex Media Server, your devices may be vulnerable to stealthy attacks that allow hackers to deploy crypto miners and Linux backdoors, putting your internet traffic at risk of external exploitation. A recent discovery revealed a chain of four flaws, dubbed Plex2Shell, that can be exploited for unauthenticated remote code execution.
Bullhorn Disables Platform to Contain Cyberattack
To protect our customers and contain a recent cyber incident, we've temporarily taken our platform offline - our team is working diligently with CrowdStrike specialists to restore services as quickly and securely as possible. We're isolating the issue and eradicating the threat, with a thorough security review underway.
Rank Math PRO Plugin Compromised, Delivers Self-Restoring Backdoor
If you use Rank Math PRO, be aware that a recent update between October 15-16 contained malware that could still be lurking on your site, even after installing a clean version. Simply updating to the latest version doesn't guarantee you're in the clear - take extra precautions to ensure your site's security.
OpenCode Breach Exposes API Keys in AI Distillation Attack
A security breach at OpenCode exposed API keys for 1.4% of its Console users after a large-scale distillation attack using unauthorized queries to train models. The incident affected developers who had linked external providers to their accounts.
BAE Cyberattack Disrupts US Bankruptcy Noticing Process
A cyberattack on government contractor BAE Systems has crippled the US bankruptcy noticing process, shutting down the Bankruptcy Noticing Center's systems and websites and grinding the production and distribution of crucial bankruptcy notices to a halt. This disruption threatens the very machinery of due process, highlighting the high stakes of cybersecurity breaches.