[SPONSOREDNUBIVANCE]
Rapid7 deployed right the first time.
Full-platform Rapid7 rollouts - InsightVM, InsightIDR, event sources, agents, tuning - by a Registered Partner who has done it at state-agency scale, including OT/SCADA.
Talk deploymentSocial Engineering
Forum Vigilantes Enforce Civility Amid Freewheeling Discussion
Join the ultimate online discussion crew and dive into a weekend of free-wheeling conversation - just remember to keep it respectful, even when opinions clash. In this off-the-cuff thread, anything goes, from the week's hottest topics to anything else that sparks your interest.
Cyber Experts Warn of Emerging Threats from AI-Driven Attacks
Cyber threats are evolving at an alarming rate, and experts like Randolph Barr, Chief Information Security Officer at Cequence Security, are sounding the alarm about the dangers of AI-driven attacks. What keeps him up at night isn't a single exploit, but a disturbing convergence of factors that are compounding cyber risk.
Microsoft Bolsters Teams with AI-Powered Phishing Detection
Microsoft Teams is getting a major security boost with the introduction of AI-powered phishing detection, which analyzes conversation context to identify sneaky phishing attempts, social engineering, and impersonation. This smart new feature will start rolling out in early November 2026.
Google Chrome Bolsters Scam Defenses with Gemini-Powered Detection
Google Chrome is supercharging its scam defenses with a powerful new detection system, powered by Gemini, that can spot suspicious sites and alert users before they fall victim to malicious activity. This enhanced protection will evaluate multiple signals, including brand authenticity and page intent, to help keep users safe online.
Google Chrome Bolsters Defenses Against ClickFix Social Engineering Attacks
Google Chrome just got a major upgrade to shield you from ClickFix social engineering attacks, a sneaky tactic used by hackers to trick you into pasting malicious commands into your system terminal. Now, if you have Enhanced Protection enabled, Chrome will detect and block these suspicious attempts to get you to run fake commands.
Generative AI Erodes Email Security's Behavioral Tells
Generative AI is making email security threats more sophisticated, erasing the telltale signs that once helped defenders catch attackers, and resulting in staggering losses - like the nearly $3.05 billion lost to business email compromise in 2025 alone.
Google Bolsters Android Defenses Against AI-Powered Messaging Scams
Stay one step ahead of scammers with Google's latest Android defense: AI-powered analysis that scrutinizes suspicious conversations and flags potential fraud, all while keeping your private chats safe. Google Messages now offers Gemini-backed cloud protection that helps shield you from sophisticated messaging scams.
Microsoft Bolsters Teams with Deepfake Detection Tools
Microsoft is stepping up its game to keep Teams meetings secure by integrating deepfake detection tools from trusted third-party providers, helping organizations spot synthetic audio and video. This new feature, set to roll out globally in November, will enable Teams to flag suspicious meeting content.
OpenAI Sheds Safety Researchers After Leak of Sensitive Data
OpenAI has parted ways with three safety researchers, including Jasmine Wang, Tomek Korbak, and Mikita Balesni, after they mishandled sensitive information, sparking concerns about the company's commitment to safety and transparency. The move comes as a surprise, especially given the trio's previous warnings about the rapid development of artificial intelligence.
Deepfakes Expose Vulnerabilities at 74% of Firms
Deepfakes are exploiting a major weakness in corporate security: our trust in familiar faces and voices. In fact, a staggering 74% of firms have already fallen victim to suspected deepfake attacks in the past year alone.
AI Coding Agents Exacerbate Secrets Sprawl as Credential Exposure Surges
AI-powered coding agents are supercharging the secrets sprawl problem, with AI-assisted commits leaking secrets at nearly twice the rate of human-written ones. This alarming trend reveals that AI tools are accelerating credential exposure, making it more crucial than ever to address the issue.
Insider Risk Evolves, Threatens Critical Infrastructure
The insider risk landscape has become a complex and critical security challenge, evolving beyond the traditional disgruntled worker to include emerging threats like shadow AI, synthetic identities, and ideologically motivated sabotage. Today's insider risk requires a predictive, intelligence-driven approach to safeguard against data leaks, infiltration, and rapid exfiltration.
Researchers Expose Employment Scam Tactics with Novel Experiment
To uncover the sneaky tactics used by employment scammers, a team of researchers took a bold approach: they created a fake company to study these scams firsthand. By doing so, they gained valuable insights into the methods scammers use to deceive job seekers.
Security Leaders Warn of Evolving Insider Threats
Insiders pose a uniquely potent threat because they already have the keys to the kingdom - and traditional defenses often miss the mark by relying on alerts that don't account for the devastating impact of trusted accounts gone rogue. To stay ahead, defenders must validate their readiness against insider threats by asking tough questions about access, escalation, and lateral movement.
Community Forum Guidelines Evolve to Combat Online Harassment
Join our weekend open discussion, a relaxed space to chat about anything that caught your attention this week - from the news we didn't cover to topics that are on your mind. Share your thoughts, ask questions, and engage with our community in a friendly and respectful conversation.
WhatsApp Deploys On-Device AI to Flag Potential Scam Messages
Meet Scam Alert, WhatsApp's new on-device AI feature that helps you spot potential scam messages - and take action to protect yourself. This optional feature flags suspicious messages from unknown senders, giving you the power to block, report, or ignore them.
[SPONSOREDNUBIVANCE]
Audit-ready is a season. It shouldn't be.
Evidence in spreadsheets, controls drifting between audits, frameworks multiplying on flat headcount. Nubivance runs continuous compliance on Rapid7 Cyber GRC - SOC 2, HIPAA, ISO 27001, PCI, CMMC.
End the scramble
Google Chrome Clamps Down on 7 Billion Daily Android Notification Scams
Google Chrome just dealt a major blow to scammers, blocking over 7 billion unwanted Android notifications daily in the first quarter of 2026. This massive reduction was made possible by Chrome's enhanced anti-abuse systems and notification controls.
UK Hacker Behind The Com Network Sentenced for Abuse of 117 Victims
Justin Swaddle, a 20-year-old UK man, has been sentenced to two years in prison for terrorizing 117 vulnerable victims worldwide with online abuse, forcing them to perform shocking acts of self-harm and sexual activity for his own twisted online popularity. He must also register as a sex offender.
Facial Recognition Systems Targeted by Deceptive Clothing Designs
Some designers are now creating clothing with patterns specifically designed to confuse facial recognition systems, but experts warn that these products may not work as promised. These so-called adversarial garments are being marketed as a way to throw algorithms off track, but their effectiveness remains untested.
IT Department Exposes Login Credentials on Sticky Notes
A shocking security slip-up occurred when a contractor stumbled upon login credentials scribbled on sticky notes attached to laptops in a conference room, which were then photographed and used to access sensitive proprietary documents. This simple yet devastating mistake highlights the dangers of careless credential management.
School IT Veteran Exposes Alarming Lack of Cybersecurity Basics
Imagine a cybercriminal stumbling upon a sticky note with a school's most sensitive login credentials - literally stuck to the bottom of the headteacher's laptop - and gaining instant access to pupils' personal info, emails, and confidential files. This shocking discovery highlights a glaring lack of basic cybersecurity practices in schools.
Social Engineering Exposes Healthcare Sector's Human Vulnerability
Meet Dahvid Schloss, a red teamer who pulled off a daring heist at a hospital by exploiting a surprisingly simple vulnerability: human nature. By donning scrubs, sporting a fake badge, and spinning a convincing tale, Schloss was able to sweet-talk his way past a nurse and retrieve a sensitive file.
Security Leaders Seize AI Adoption With Proactive Governance
With AI tools like writing assistants and coding copilots now used by 76% of employees, security leaders are recognizing the need for proactive governance to stay ahead of the curve. Traditional blocking methods are no match for the speed of workarounds, which often take just minutes to find, versus official approval routes that can take weeks.
FBI Warns of Scammers Impersonating Agents on Social Media
Beware of scammers on social media pretending to be FBI agents - the Internet Crime Complaint Center (IC3) will never contact you directly through social media, email, or phone to investigate cybercrimes or recover lost funds. If someone claims to be from IC3 on social media, they're likely a scammer.