AI Supply Chain Threats, SonicWall Patch, and Ransomware Targeting Veeam Backups

News

SonicWall Patches Critical SMA 1000 Remote Code Execution Flaw

This is a must-patch for anyone running SonicWall SMA appliances, as the flaw allows remote attackers to execute arbitrary code with elevated privileges. It's a prime target for initial access in enterprise environments.

Research Reveals TikTok Can Be Weaponized for AI Supply Chain Attacks

The research shows how malicious models can be injected into TikTok's distribution pipeline, turning a popular app into a vector for AI supply chain attacks. This highlights the growing need to scrutinize third-party AI model sources.

Analysis

Ransomware Groups Increasingly Targeting Veeam Backup Repositories

Attackers are deliberately targeting backup software to cripple recovery options and force payment. If your backups aren't isolated and immutable, this is your wake-up call to harden that layer immediately.

Tools

ThreatMapper v3.0 Adds Runtime Cloud-Native Threat Detection

The new release focuses on runtime threat detection for cloud-native environments, giving builders better visibility into container and serverless attacks as they happen. It's a solid step toward automating cloud workload security.

Malcolm v24.05 Enhances Network Traffic Analysis Capabilities

CISA's open-source network traffic analysis suite gets updated with improved protocol parsing and threat detection rules. It's a valuable free tool for defenders looking to automate network monitoring without enterprise budgets.

Events

CISA KEV Catalog Updates with New Active Exploits

CISA continues to update its catalog of actively exploited vulnerabilities, providing a prioritized list for defenders to patch. It's the most practical, no-nonsense guide to what's actually being attacked in the wild right now.