
Rapid7 deployed right the first time.
Full-platform Rapid7 rollouts - InsightVM, InsightIDR, event sources, agents, tuning - by a Registered Partner who has done it at state-agency scale, including OT/SCADA.
Talk deployment
77% of organizations have experienced insider-related data loss in the last 18 months. Insider risk is no longer a niche IT problem—it’s an urgent, practical challenge driven by identity sprawl, cloud complexity and human pressures.

Insider-related data loss is now a boardroom dilemma — 77% of organizations reported incidents in the last 18 months — as misconfigured privileges, sprawling toolsets, and human stressors turn trusted credentials into attackers’ easiest path inside. Cloud adoption, remote work and collaboration platforms widen visibility gaps, letting ordinary business activity mask exfiltration and making detection painfully slow.

Insider-related data loss has hit 77% of organizations in the last 18 months — a costly, everyday emergency playing out in email threads, cloud buckets and third‑party integrations. Cloud sprawl, identity proliferation and siloed tooling — plus human shortcuts — turn trusted channels into easy exit ramps for sensitive data.

With 77% of organizations reporting insider-related data loss in the last 18 months, security leaders face an urgent, everyday threat: trusted accounts, routine workflows and sprawling cloud environments have turned normal work into ready-made exit ramps for sensitive data. Boards and CISOs are racing to plug identity and monitoring gaps before another incident costs money — and hard-won trust.

Heads up: roughly 180,000 customer records — including names, payment card details and other PII — were left in an unsecured repository, putting people at risk of fraud and companies on the hook for costly regulatory and reputational fallout.

180,000 customer records — including payment card details and other PII — were left in an unsecured repository. This glaring misconfiguration shows how convenience can quickly turn into costly fraud, identity theft and regulatory headaches.

Insider risks are a paradox: the people who make your organization work are also its most efficient vectors for data loss—77% of organizations reported insider-related losses in the past 18 months. Security leaders need practical, layered protections that stop the leak while preserving trust, blending technical controls, people practices, and clear governance.

180,000 records — names, contact details and payment data — were left exposed in an unsecured repository, a stark reminder that convenience often comes at the cost of security; who will step up to close the gap before more people are harmed?

Full-platform Rapid7 rollouts - InsightVM, InsightIDR, event sources, agents, tuning - by a Registered Partner who has done it at state-agency scale, including OT/SCADA.
Talk deployment
Sixty percent of security leaders warn that threat actors are evolving too quickly for organizations to keep up. Commodified cybercrime, automation and an expanding attack surface are squeezing defenders’ time to detect, respond and contain — and the consequences are real.

A misconfigured database left 85,000 pet‑owner records — from names and addresses to medical notes and microchip IDs — publicly accessible, creating a roadmap for scammers, identity thieves and even pet‑theft. Here’s what was exposed, how it happened, and simple steps to protect your pet and family.

WestJet data breach: the airline says a June intrusion may have exposed passport numbers, loyalty IDs and travel details for about 1.2 million U.S. customers—here’s why that raises your scam risk and what to do next.

Imagine your most private medical moments sitting on a public server — thats what happened when a misconfigured database left roughly 145,000 healthcare records exposed. Names, contact details and treatment notes were accessible online, raising urgent questions about who saw them and how to prevent the next breach.

Heads up: an unsecured database exposed more than 5 million auto-insurance records—names, policy numbers, VINs and claims—available to anyone with a link. That makes drivers prime targets for phishing, fake claims and identity theft, and could spell major legal and reputational headaches for insurers.

5M Records Exposed: a password-free database left names, policy numbers, VINs and claims data for more than five million auto insurance customers readable by anyone with a browser. That simple lapse turns everyday details into easy fodder for phishing, fake claims and identity theft — and shows how a tiny mistake can create big, long-lasting risk.

WestJet Exclusive Alert: A June cyber intrusion may have exposed travel and loyalty-account data for roughly 1.2 million customers—including U.S. residents—so check your accounts now. WestJet says it’s working with forensic experts and law enforcement, but this notice is your cue to watch for phishing, reset passwords, and protect your identity.

WestJet told U.S. customers that a criminal intrusion discovered in June may have exposed personal and loyalty-account information—potentially affecting hundreds of thousands to over a million travelers—and has raised tough questions about who safeguards the sensitive travel data airlines collect. More than an operational headache, the breach highlights how legacy systems and third‑party connections can turn travel records into prime targets for phishing and identity fraud.

Evidence in spreadsheets, controls drifting between audits, frameworks multiplying on flat headcount. Nubivance runs continuous compliance on Rapid7 Cyber GRC - SOC 2, HIPAA, ISO 27001, PCI, CMMC.
End the scramble
Imagine a stranger flipping through the policies that underwrite your life on the road: more than five million auto insurance records—names, policy numbers, VINs and claims—were left in an unsecured online database anyone could download. Heres what went wrong, whos at risk, and what you can do to protect yourself.

LockBit’s latest iteration is back—and meaner: researchers found a cross-platform strain in September that can encrypt Windows, Linux and VMware ESXi in a single strike, shrinking defenders’ response window and multiplying damage. If you haven’t expanded EDR to Linux and hypervisors or tested immutable backups yet, now’s the time.

LockBit keeps changing its playbook—September telemetry uncovered roughly a dozen incidents, about half tied to a new strain that can hit Windows, Linux and hypervisors. That cross‑platform reach broadens the blast radius from a single breach and forces defenders to rethink old assumptions.

Exclusive: Threat actors are unleashing a dangerous surge in app exploits—here’s what’s driving the spike and quick, practical steps to keep your apps and users safe.

An updated LockBit variant—faster, stealthier and able to run native payloads on Windows, Linux and VMware ESXi—has been tied to a dozen recent intrusions, dramatically shrinking the window defenders have to detect and stop catastrophic outages.

Pakistan-linked operators are quietly slipping DeskRAT into Indian government networks to siphon secrets — a stealthy espionage campaign that makes stronger detection, logging and diplomatic response urgent.

A Pakistani-linked hacker group reportedly pulled off a severe, exclusive cyberattack on India — here’s who’s behind it and why the fallout matters for national and regional security.

Who’s stealing Europe’s drone blueprints — and why? Investigators now point to North Korea’s Lazarus Group and Operation DreamJob, a stealthy campaign targeting small defense firms to grab design files, accelerate domestic drone programs, and probe weaknesses in Europe’s nascent “drone wall.”