Trusted compliance intelligence
for the Defense Industrial Base

Cyber News

40,000 Impacted by SafePal Data Breach

Hackers exploited a vulnerability in the order-tracking function of a plugin to access SafePal customer information.

Cyber News

SafePal Data Breach Hits Tens of Thousands of Customers

Nearly 40,000 customers of hardware wallet provider SafePal have been impacted by a data breach

Cyber News

Microsoft working on Defender patch for ShieldBreak zero-day

Microsoft is working on a security patch for the "ShieldBreak" zero-day vulnerability disclosed last week by security researcher "Nightmare Eclipse" and now tracked as CVE-2026-69414.

Cyber News

Code fixers have fired up the AI warp drive. Strange new worlds await

With more patches per month than at a pirate convention, the bug must be an endangered species. Well, about that

Cyber News

Why more security data has blurred companies’ view of risk

More security data can create blind spots. Here’s how to regain visibility.

Cyber News

Recent macOS Screen Sharing Vulnerability Exploited in Attacks

Threat actors gained root access to the vulnerable systems and deployed a Monero miner.

Cyber News

What the CISO role will look like in 2029

Wolfgang Goerlich has spent his career in security and has been a CISO for the past seven years. Like many long-term security execs, Goerlich has seen plenty of changes within the profession. He’s bracing for more. “For the future I see growing the role of CISO to be the pacesetter for innovation, to be in the board room and executive conversations advising them on how to take smart, calculated risks with technology, including AI,” says Goerlich, who is now a public sector CISO and a faculty member with IANS Research. Goerlich sees this as the next step for a role that has continuously evolved since its inception in 1995. “It’s gone from the ‘department of no’ to ‘let’s slow down’ to ‘let’s take smarter risks based on our understanding of them,’” he adds. “How exciting is this? To be the one to say, ‘You want to take more risk? Let us help you. We can help you make smarter decisions.’” Goerlich isn’t the only one with such observations. Others similarly believe that the responsibilities assigned to the typical CISO will change in the upcoming years. Despite a broad consensus on change, predictions vary on how that change will play out in terms of the CISO’s roles and responsibiliti

Cyber News

Critical SAP Commerce Cloud Vulnerability Exploited 3 Days After Disclosure

The vulnerability tracked as CVE-2026-58231 can be exploited to execute arbitrary code and compromise internal components.

Cyber News

Police bust cybercrime ring accused of stealing €30 million in four-day spree

German and Brazilian police dismantled an international bank fraud ring blamed for a €30 million cyberattack on a German financial institution, arresting four people in Brazil and pursuing three more suspects in Spain and Bulgaria. Brazilian police named the operation “Klonen.” On August 13, agents executed 21 search-and-seizure warrants across seven cities, including Rio de Janeiro, Goiânia, and Guarulhos. The case traces back to late 2023, when attackers exploited a flaw in the booking process

Cyber News

Infostealers Harvest 1.7 Billion Credentials in Six Months

Flashpoint data reveals infostealers were responsible for taking 1.7 billion credentials in the first half of 2026

Cyber News

Black Hat and DEF CON are AI conferences now, too

On this week's episode of The Reg's Kettle podcast, we revisit 'hacker summer camp,' where the hottest topic was ... sigh... agentic AI

Cyber News

Fortune 500 Companies Hit in Azure Data Theft Campaign

A threat actor is claiming the exfiltration of millions of records from McDonald’s, TCS, Vodafone, and other large organizations.

Cyber News

Windows 11’s strongest security defenses can be bypassed without a screwdriver

Researchers from the University of Birmingham and Durham University have found a way to knock down some of the toughest protections in Windows 11 without physically opening or modifying the target machine. The attack assumes the attacker has already gained privileged access to the system. A chip that never checks who’s asking The attack, named “Download More RAM,” targets a small configuration chip found on Dual In-line Memory Modules (DIMMs), the RAM sticks inside most

Cyber News

Hazmat: Open-source containment for AI agents

Hazmat is an open-source tool that runs AI coding agents inside a separate account on your own machine. It wraps the harnesses people use: Claude Code, Codex, OpenCode, Cursor Agent, and several more, plus any script you write yourself. An agent launched the ordinary way runs as you, which means it can read anything you can read. That includes SSH keys, cloud credentials, and the pile of configuration in your home directory that has accumulated

Cyber News

Product showcase: ScamNet looks for warning signs in suspicious calls and shady links

ScamNet: Anti-Scam Suite is a consumer security app from Synaptrex Technologies that helps users detect and block scams involving phone calls, text messages, websites, and other suspicious content. The app is available for iPhone, iPad, and Mac, with features varying by platform. Call protection is available on iPhone, while tools such as Visual Intelligence are supported on iPhone and iPad. The app is free with optional ScamNet+ subscriptions. Setup involves enabling individual shields for Phone,

Cyber News

When companies get specific about AI, revenue growth looks different

Companies that provide specific evidence of how they use AI tend to record stronger revenue growth. Researchers at Carnegie Mellon University and Larridin examined a study universe of 564 companies across 12 industry sectors. Individual analyses used smaller samples depending on data availability. The data included 478 corporate 10-K filings, more than 30,000 classified job postings, financial information, market data, and the AI Transformation Tracker built by Larridin. The tracker assigns companies scores from 1

Training, Certification & Workforce Development

CS5 East 2026 Features CMMC Certified Assessor (CCA) Training Program as a Precon Event (Instructor-Led + Virtual)

Advanced CCA training from a leading CMMC Authorized C3PAO prepares experienced professionals to conduct official CMMC assessments, ahead of the Official Conference of The Cyber AB, Washington, DC area WASHINGTON, DC — August 17, 2026 — CS5 East 2026 has selected an exclusive Authorized Training Provider (ATP) for the CMMC Certified Assessor (CCA) pre-conference training …

Cyber News

Microsoft blames AI for delayed Exchange update, can’t say when it will arrive

Dealing with machine-made bug backlog makes it hard to find a moment to deliver promised subscription service

Threat Intelligence

ISC Stormcast For Monday, August 17th, 2026 https://isc.sans.edu/podcastdetail/10054, (Mon, Aug 17th)

Cyber News

Chinese AI company Zhipu claims its new model is a better bug-finder than Anthropic, OpenAI

PLUS: HCL, TCS, admit data breaches; South Korea to fine Apple, Google; India bans some rideshare tips; and more!

Cyber News

SafePal data breach impacts 39,798 customers, stolen info for sale

Cryptocurrency hardware wallet provider SafePal is warning of a data breach affecting about 39,798 customers after a flaw was exploited to steal customer order information, and a threat actor is now claiming to be selling the stolen data.

Cyber News

Anthropic confirms Claude is down in major outage affecting multiple services

Claude is experiencing a major outage, with users reporting login problems and degraded performance across several Anthropic services.

Threat Intelligence

Wireshark 4.6.8 Released, (Sun, Aug 16th)

Wireshark release 4.6.8 fixes 28 vulnerabilities and 25 bugs.

Cyber News

Large-scale DDoS attacks disrupted Threema secure messaging service

Multiple distributed denial-of-service (DDoS) attacks targeted the Threema secure messaging service earlier this week, causing severe disruptions to communications.

Cyber News

New AmnesiaStealer macOS malware hijacks browser sessions via remote control

A new information-stealing malware called AmnesiaStealer, which targets macOS users via ClickFix attacks, includes a streaming module that allows the attacker to interactively control the victim's web browser.

Defense News

Teaching the Most Pro-American Nation to Hate America

Emzari Gelashvili, RCD There is a street in Tbilisi named after George W. Bush. Count the capitals on earth with a street named for an American president. It will not take you long.

Government Cloud

Celebrating 15 Years of AWS GovCloud (US): Built for the Nation’s Most Critical Missions

Today, AWS GovCloud (US) is the operational backbone of some of the nation's most critical applications spanning security and defense, energy, public health and financial services. Fifteen years in, and that mission focus still defines everything AWS GovCloud (US) delivers.

Cyber News

Stopping a cyberattack while walking your dog - defensive AI security CEO says it's not ruff to do

Corma CEO tells The Reg it's building 'One ring to rule them all, for the defenders to have this power'

Cyber News

Week in review: Salesforce and ServiceNow portals exposed for 17 months, exploited Metabase 0-day

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: GitHub Dependabot malware alerts now cover eight ecosystems GitHub has flagged npm malware since March 2026. Anyone pulling in a bad PyPI, Maven, RubyGems, NuGet, Go, crates.io, or PHP Composer package has had no such warning, because GitHub’s malware detection only ever watched one ecosystem. That changed this month. Dependabot malware alerts, which had run on npm data alone, now

Government Cloud / Cloud Security

August 16, 2026

Google SecOps SOAR Announcement Release 6.3.98 is being rolled out to the first phase of regions as listed here . This release contains internal and customer bug fixes.

CMMC

The Army gave General Dynamics $533M to build an artillery plant that produced nothing

Instead of making shells, the assembly robots kept failing in bizarre ways—and that's just for starters.

Cyber News

New Evooo1Bot Linux botnet turns routers into traffic relay nodes

A new Mirai-based modular Linux botnet malware called Evooo1Bot has been targeting internet-facing gateway devices, turning them into SOCKS5 traffic relay nodes.

Defense News

China Is Bringing Mars to Earth

Richard de Grijs, the interpreter Returning Martian material safely is only half the job; showing the world it was done safely is the other half.

Defense News

Russia's Pacific Submarine Fleet Could Tip the Scales in China's Favour

ASPI Russia has a potent yet often overlooked fleet of nuclear-powered and conventional attack submarines in the Pacific.

Defense News

Why Small Powers Are Not a Walkover

Shaheer Ahmad, RealClearDefense . . . rigid bureaucratic culture and an infatuation with fighting industrial conflicts constitute the Achilles heel for the great powers.

Defense News

Why China's Grip on Iron Ore Is a Warning for the U.S. Navy

J. Peter Pham, NatInt A U.S. Navy build-up obviously needs more steel, but China is gobbling up global sources of high-grade iron ore.

Defense News

Digging Below the Death Zone: The Underground War in Ukraine

MWI But while the world watched the skies over Ukraine, another transformation in warfare was taking place beneath the ground.

Defense News

The Architecture of Civilizational Subversion

Lise Korson, RealClearDefense National security and domestic stability depend entirely on a sovereign state's willingness to enforce a single, universal standard of law.

Defense News

White House Memo Calls for Foreign-Built Warships

Sam LaGrone, et al., USNI News President Donald Trump has ordered the Pentagon to consider foreign-built warships and auxiliary vessels for the U.S. Navy, in addition to other proposed...

Defense News

A 637 JO Pushes Back on 'The Navy's Future Is in Hot Water'

George Palmer, RCD If the Navy has guidance for cold, it needs it for heat.

Defense News

JFK, the Berlin Wall, and a Cold War Failure

Francis P. Sempa, The American Spectator Kennedy's inaction handed Khrushchev a victory in Berlin

Defense News

Media Pushes Carrier Crew Story As Iran Blockade Is Working

Armed Forces Press CNN, Stars and Stripes, the Los Angeles Times, and a coordinated chorus of legacy media outlets have spent the past 48 hours running wall-to-wall coverage of mental health...

Cyber News

ChainDrop worm crawls into npm supply chain, evades standard defenses

Shai-Hulud variant poisons 444 packages, spreads via tarballs and dev-tool hooks

Federal Policy

As warfare becomes engineering, the era of the digital mercenary dawns

The White House revives “privateering for the digital age” by authorizing cyber firms to strike foreign targets.

Cyber News

How Anthropic plans to watermark Claude's AI-generated text

It could soon become easier to identify AI-generated content, even if it's not the usual "It's Not X, it's Y" type of post you'd come across on LinkedIn and other socials.

Federal Policy

Tech Bills of the Week: Leveraging AI for environmental evaluations; crafting a report on China’s AI ecosystem; and more

Recently proposals look, in part, to deploy artificial intelligence solutions to prevent natural disasters from impeding U.S. military operations and evaluate China’s AI chip manufacturing sector.

Defense News

Top Northcom general adds to drumbeat of warnings about weak drone defenses in the homeland

“We’re seeing it used on a daily basis around the world, and we’ve got to figure out how to mitigate that threat,” Army Lt. Gen. Joseph Jarrard said of drone swarms. “But we’re not there yet.”

Government Cloud

Microsoft Teams: App centric management in Teams Admin Center to manage the Apps access for tenants, end-users, and groups in DoD

App centric management introduces new admin settings to control who in the tenant can install Teams apps. First, admins can set a default value for new apps that are published to Teams app store. Second, admins can edit the availability of an app to “All users can install,” “Specific users and groups can install,” or “No user can install.” This feature evolves the existing app permission policies and provides admins with the ability to manage access to the app individually. The app permission policies for existing customers are migrated to maintain existing app availability in the tenant. GA date: September CY2026