[SPONSOREDNUBIVANCE]
Rapid7 deployed right the first time.
Full-platform Rapid7 rollouts - InsightVM, InsightIDR, event sources, agents, tuning - by a Registered Partner who has done it at state-agency scale, including OT/SCADA.
Talk deploymentEmerging Threats
AvisLoader Exposes New Evasion Tactics in Windows Malware Attacks
Meet AvisLoader, a sneaky new Windows malware loader that's changing the game with its clever evasion tactics and encrypted communication methods. It starts with a convincing ClickFix page that tricks victims into pasting a malicious command into their terminal.
Ukraine Strikes Disrupt Yandex Datacenters, Knocks Cloud Services Offline
Ukrainian drone strikes have severely disrupted Yandex's operations, damaging three of its Russian datacenters and taking several cloud services offline. Engineers are working tirelessly to restore services, but for now, users are facing significant downtime.
Ledger Uncovers Unauthorized Hardware Implant in CryptoBilis-Sold Wallets
If you bought a Ledger wallet from CryptoBilis in the last 90 days, don't set it up yet - Ledger's investigating reports of stolen funds linked to devices sold by this reseller. Consider moving your assets to a new Ledger device if you've already set one up.
Personal AI Agents Infiltrate Work Systems, Bypassing Traditional Security Controls
Personal AI agents, like Instinct, have already infiltrated work systems, raising both fascination and concern among security teams, and with $1 billion in funding and a $10 billion valuation, it's clear that these well-funded assistants are here to stay. They can easily slip into corporate systems through common vectors like OAuth consent and text threads, bypassing traditional security controls.
Cyber-Attack Disrupts French Supermarket Refrigeration Systems
A cyber-attack has hit French supermarket chain Coopérative U, disrupting refrigeration systems across multiple stores and threatening the freshness of food supplies. The company is racing against time to restore operations, with the CEO vowing a swift resolution and a thorough investigation into the unprecedented incident.
SonicWall SMA 1000 Flaw Exploited in 135 Attempts Post-Patch
A critical vulnerability in SonicWall's SMA 1000 appliances, known as CVE-2026-102255, has been exploited in 135 attempts since a patch was released, allowing attackers to secretly tap into internal systems and perform unauthorized operations. This highly severe flaw, rated 10.0 on the CVSS scale, enables pre-authenticated server-side request forgery attacks.
AI-Powered Bug Hunting Exposes New Cybersecurity Risks
The ShinyHunters group, behind a recent FBI breach, revealed their surprising motive: they weren't after cash, but aimed to protect their reputation from being tarnished. Meanwhile, the FBI continues to crack down on the group, making new arrests in their investigation.
Ransomware Groups Exploit Palo Alto VPN Flaw Despite Patch Release
Ransomware groups are actively exploiting a patched vulnerability in Palo Alto VPNs, allowing them to masquerade as legitimate remote workers and evade detection until they strike. This sneaky tactic enables hackers to steal credentials, move laterally, and deploy ransomware, causing devastating consequences.
Attackers Exploit Bricksforge WordPress Flaw for Unauthenticated RCE
A critical flaw in the Bricksforge WordPress plugin, rated CVSS 10.0, allows hackers to upload and execute malicious code on vulnerable sites without needing login credentials. This gaping security hole is being actively exploited, putting sites at risk of remote code execution.
FBI Arrests Suspect Tied to ShinyHunters Breach
The FBI has arrested Edward Dubrovsky, a 54-year-old Canadian cybersecurity executive, in connection with the ShinyHunters breach, charging him with conspiracy and interference with commerce by threats. Dubrovsky is suspected of being part of the group behind the recent FBIjobs.gov incident.
Daiichi Kosho Breach Exposes 8 Million Customer Records
A shocking data breach at Daiichi Kosho has put 8 million customer records at risk, with the company confirming that personal data stored on an infected device may have been leaked. The breach was discovered after a malware infection was found on an employee's PC at Nippon Columbia Group, a partner of Daiichi Kosho.
CyberXero Exploits AI in Dual-Pronged Ukraine Cyberattack Campaign
Meet CyberXero, a Russian-speaking cyber culprit who's been wreaking havoc in Ukraine with a sneaky two-pronged attack campaign that's been flying under the radar since at least July 2026. Over 628,000 records of Ukrainian individuals have already been compromised in this AI-powered cyberattack spree.
Malware Breach Exposes 8.6 Million Karaoke Records
A massive malware breach has hit Daiichi Kosho, Japan's largest karaoke system maker, exposing a staggering 8.6 million customer records and 93,000 employee details, including sensitive personal info like names, birthdates, and contact numbers. The breach occurred when a contractor's system was infected with malware.
FBI Arrests Ransomware Negotiator in ShinyHunters Probe
In a major breakthrough in the ShinyHunters ransomware probe, the FBI has arrested a key player - a ransomware negotiator - in Pennsylvania, dealing a significant blow to the group that's extorted over $70 million from victims so far this year. The suspect, Edward Dobrovsky, faces charges of conspiracy and interference with commerce by threats.
FBI Arrests Cyber Exec Tied to ShinyHunters Hacking Group
In a stunning move, the FBI has arrested a Canadian cybersecurity executive with ties to the notorious ShinyHunters hacking group, taking another suspected co-conspirator off the streets. Edward Dubrovsky, 54, was taken into custody in Pennsylvania while attending a conference.
FBI Arrests Cybersecurity Executive in Extortion Case Tied to ShinyHunters Breach
A Canadian cybersecurity executive, Edward Dubrovsky, has been arrested in Pennsylvania on charges of conspiring to extort money through threats, linked to the ShinyHunters breach. The charges against him include violating federal computer fraud law and committing Hobbs Act extortion.
[SPONSOREDNUBIVANCE]
Audit-ready is a season. It shouldn't be.
Evidence in spreadsheets, controls drifting between audits, frameworks multiplying on flat headcount. Nubivance runs continuous compliance on Rapid7 Cyber GRC - SOC 2, HIPAA, ISO 27001, PCI, CMMC.
End the scramble
Chinese Hacker Exploits AI Tools in South Korean Bank Cyberattacks
A Chinese hacker recently unleashed a targeted cyberattack on South Korea's financial sector, leveraging a cutting-edge AI-powered penetration testing suite called ARTEX alongside clever Claude agents to breach defenses. The sophisticated attack used multiple AI tools, including DeepSeek and Grok, to outsmart security measures.
GitHub Repositories Targeted in Credential-Stealing Workflow Attack
Malicious actors have launched a sneaky credential-stealing attack on GitHub repositories, using hijacked accounts to spread a malicious workflow that hit 345 repositories in just a few hours. The GhostAction campaign is back with a vengeance, putting developer credentials at risk.
Hackers Exploit Bing Redirects in Google Ads to Spread ClickFix Malware
Malicious actors have found a sneaky way to spread ClickFix Malware by exploiting Bing redirects in Google Ads, tricking macOS users into downloading a fake Claude installer that secretly installs harmful commands. This clever tactic, dubbed Adception, uses legitimate search-ad and redirect infrastructure to evade security checks.
FBI Disrupts ShinyHunters Network with Third Arrest
The FBI has made a significant breakthrough in disrupting the notorious ShinyHunters group with the arrest of another suspected co-conspirator, bringing them one step closer to justice. This latest apprehension follows a series of efforts by the bureau to crack down on the group behind the recent FBIjobs.gov incident.
FBI Disrupts ShinyHunters Extortion Group with Latest Arrest
The FBI has struck another blow against the notorious ShinyHunters extortion group with the arrest of a key suspect, bringing the group one step closer to being held accountable for their malicious actions. A Canadian citizen, considered a primary co-conspirator, was apprehended in Pennsylvania, although authorities have not yet disclosed the individual's name or specific charges.
P7 DarkSword Exploit Kit Enhances iOS Data Theft Capabilities
Meet P7 DarkSword, a sneaky new iOS exploit kit that's taking data theft to the next level by shrinking its footprint, swiping sensitive info like keychain and crypto-wallet data right from your device. Its clever tactics include extracting data into JSON on your phone and using a two-way communication channel with its command center.
AhsayCBS flaws exploited to deploy webshells, crypto miners
Cyber attackers have struck at least five organizations by exploiting two unpatched flaws in the AhsayCBS backup management platform, using a clever two-step attack chain to gain access and deploy malicious code. By chaining these vulnerabilities, the attackers were able to quickly move from gaining access to taking control of the compromised systems.
European Wind, Solar Systems Exposed Online
A recent survey uncovered a staggering 8,500 internet-exposed systems linked to European wind farms and solar parks, putting regional grid resilience and renewable energy portfolios at risk. These unsecured interfaces create a perfect storm of operational, legal, and reputational risks.