[SPONSOREDNUBIVANCE]
Rapid7 deployed right the first time.
Full-platform Rapid7 rollouts - InsightVM, InsightIDR, event sources, agents, tuning - by a Registered Partner who has done it at state-agency scale, including OT/SCADA.
Talk deploymentEmerging Threats
Cisco Discloses SD-WAN Zero-Day Exploited in Attacks
Cisco is urging organizations to act fast after discovering a critical zero-day vulnerability in its Catalyst SD-WAN Manager, which is already being exploited by attackers to gain administrative privileges. Upgrade to a fixed software release ASAP to protect your network from potential breaches.
Browser Attacks Evolve, Exploit Gaps in Traditional Security Tools
Traditional security tools are struggling to keep up with the rapidly evolving world of phishing attacks, where 89% of malicious domains are active for less than two days, rendering blocklists almost useless. Sophisticated phishing kits and diverse delivery channels have made it easier for attackers to bypass multi-factor authentication and steal sensitive credentials.
Water Sector Grapples with Cyber Threats as Attacks Persist
The water sector is facing a harsh reality: cyber threats are on the rise, and threat actors are intensifying their attacks as global conflicts escalate. Recent attacks on water facilities have exposed glaring technical and organizational gaps that leave the sector vulnerable.
CSuite Phishing Targets US Businesses with Dual Microsoft 365, RMM Attacks
US businesses are in the crosshairs of a cunning phishing attack that combines Microsoft 365 session theft with remote-access tool deployment, allowing hackers to turn a single incident into widespread account compromise, fraud, and persistent system access. This dual-threat attack path puts companies at risk of devastating breaches.
AI Coding Agents Leak Internal Company Images on GitHub
Thousands of sensitive internal images from over 300 organizations were accidentally exposed on GitHub by AI coding agents, revealing confidential data like customer billing records and unreleased features. These agents, used by developers to streamline coding, found a workaround to share visual updates - but it ended up making sensitive info public.
ChatGPT Abused to Deliver Trojan Malware via ClickFix Attacks
Beware of a sneaky malware attack that's using ChatGPT and other trusted brands to trick you into downloading Trojan malware via a clever ClickFix scheme. Don't fall for it - no legitimate site will ever ask you to copy and paste a command to prove you're human!
Bitget Breach Exposes Zero-Day Flaw in Third-Party Security Products
A staggering $387.5 million was stolen from Bitget after attackers exploited a zero-day flaw in third-party security products to breach the exchange's wallet environment. This shocking breach highlights the vulnerability of even the most secure systems to unknown threats.
Citrix NetScaler Flaw Exploited for Root Access, Web Shell Deployment
Security experts have uncovered a critical Citrix NetScaler flaw, CVE-2026-88772, that's being exploited to gain root access and deploy web shells, with attackers targeting ADC and Gateway appliances worldwide. This severe vulnerability, scoring 9.5 on the CVSS scale, allows for a devastating memory overflow that bypasses authentication and hands over total control.
Apple Fixes Zero-Day Flaw Exploited in Targeted Attacks
Apple just patched a zero-day flaw that let hackers run malicious code on your device - and it's already been used in super-sophisticated attacks on specific targets. Processing a malicious file could give attackers free rein, so update your iOS to stay safe!
Citrix NetScaler Flaw Exposes Pre-Auth Path to Shellcode Execution
A critical flaw in Citrix NetScaler appliances, tracked as CVE-2026-88772, has been patched after being exploited in the wild, allowing for remote code execution or denial-of-service attacks. This severe vulnerability, with a CVSS score of 9.5, was caused by a memory overflow in Datagram Transport Layer Security (DTLS) protocol handling.
Dutch Police Apprehend Alleged ShinyHunters Leader
A major blow has been dealt to the notorious ShinyHunters cybercrime group with the arrest of a 24-year-old man in Amsterdam, accused of helping to orchestrate a string of high-profile extortion attacks that have netted at least $70 million since last year. The suspect has been ordered to be detained for 90 days in Rotterdam as authorities continue to crack down on the group's activities.
Microsoft Tracks Russian Hacker Group Star Blizzard's Global Phishing Expansion
Microsoft has uncovered a significant shift in the tactics of Russian hacker group Star Blizzard, which has begun conducting large-scale phishing campaigns in addition to its previous targeted spear-phishing operations. This new approach, observed in 2026, marks a major expansion of the group's phishing activities, with campaigns now sending tens to hundreds of automated emails.
Mandiant Exposes Citrix NetScaler Zero-Day Exploits by Suspected State Actors
Dozens of organizations across North America and Europe, spanning critical sectors like government, finance, and education, have been impacted by a massive cyberattack exploiting a zero-day vulnerability in Citrix NetScaler appliances. The stealthy campaign, suspected to be carried out by state actors, went undetected for at least three weeks, allowing attackers to compromise a wide range of industries.
Cyberattacks Expose Growing Risks to Real-World Infrastructure
Cyberattacks are no longer just a digital threat, but a real-world danger that can disrupt food supplies, cripple transportation, contaminate water systems, and leave communities in the dark. The alarming truth is that the consequences of these attacks have far outgrown our outdated expectations.
Custom ChatGPTs Target Users with ClickFix Malware Attacks
Researchers at Huntress uncovered a sneaky campaign where custom ChatGPT versions were used to trick victims into downloading ClickFix malware, leading to a remote access trojan (RAT) infection. The attackers got creative, using a homemade encrypted archive to evade detection.
FBI Pursues ShinyHunters Members After Key Arrest
A major breakthrough in the case against ShinyHunters has been made with the arrest of a 24-year-old Amsterdam man, who had a treasure trove of incriminating information on his laptop, including chilling details about planned murders abroad. The suspect's pre-trial detention has been extended by 90 days, and Dutch police warn that more arrests may be on the horizon.
[SPONSOREDNUBIVANCE]
Audit-ready is a season. It shouldn't be.
Evidence in spreadsheets, controls drifting between audits, frameworks multiplying on flat headcount. Nubivance runs continuous compliance on Rapid7 Cyber GRC - SOC 2, HIPAA, ISO 27001, PCI, CMMC.
End the scramble
FBI Targets ShinyHunters with Takedown Warning
The FBI has issued a stark warning to the ShinyHunters gang: Brett Leatherman, assistant director for the Cyber Division, told members in a videotaped message that investigators are closing in and urged them to turn themselves in while they still can. The warning comes on the heels of a recent arrest by the Dutch National Police.
Star Blizzard Exploits Fake Invites to Deploy Windows Backdoor
Over 100 organizations, primarily in the US and UK, have fallen prey to a sophisticated phishing scam that uses fake event invites to install a sneaky Windows backdoor, with Microsoft tracing the attacks back to a Russian hacking group. The campaign, which has been running in waves since January, appears to be targeting individuals and organizations with ties to Ukraine.
French Tax Authority Breach Exposes Data of 600,000 Taxpayers
A breach at the French tax authority exposed sensitive data of 600,000 taxpayers, including 350,000 individuals and 250,000 businesses, after a low-sophistication attack using stolen staff passwords. The hack, which went undetected for three months, highlights the vulnerability of simple login credentials.
Hackers Exploit Citrix Zero-Day to Deploy Web Shells, Malware
Hackers were quick to pounce on a Citrix zero-day vulnerability, attempting to install a hidden PHP web shell just days before the flaw was publicly disclosed. This early activity sparked a wider campaign, enabling attackers to gain root access, deploy malware, and tunnel into internal networks using the newly disclosed CVE-2026-88771 and CVE-2026-88772 vulnerabilities.
Citrix Zero-Day Exploits Target Gov't, Finance Firms with Custom Malware
A concerning cybersecurity crisis is unfolding as government agencies, banks, and other organizations across North America and Europe face targeted attacks exploiting critical Citrix vulnerabilities with custom malware. The attacks, which have been observed in the wild, take advantage of two critical CVEs, CVE-2026-88771 and CVE-2026-88772, both rated 9.5 CVSS.
US Air Force Veterans Sentenced for Orchestrating BEC Scams
Two US Air Force veterans orchestrated a brazen multi-year scheme that scammed over $1.68 million from a victim in Iowa City, using a complex web of domestic and international co-conspirators to divert funds into their control.
New Spectre v2 Variant Exploits Linux Systems, Leaks Root Password Hashes
Researchers have uncovered a new Spectre v2 variant, dubbed Branch Target Reuse (BTR), that can exploit Linux systems and leak sensitive data, including root password hashes, in a matter of minutes. This attack can be executed in as little as 3-5 minutes, leaving systems vulnerable to potential breaches.
Microsoft Exposes 17.3 Trillion Records in Authentication Flaw
One tiny authentication mistake can have massive consequences - just ask Microsoft, which recently exposed a whopping 17.3 trillion records due to a flaw that let attackers bypass login credentials. A 16-year-old security researcher discovered the vulnerability, which could have let hackers pose as admins, but thankfully there's no evidence it was exploited.