AI-Powered Threat Hunting, CISA KEV Updates, and Open-Source Defender Tooling Drops

Tools

ThreatMapper 2.0 Released: Adds AI-Driven Threat Analysis and Expanded Cloud Coverage

Deepfence's open-source threat mapping tool just dropped a major update with AI-powered analysis features and broader cloud service support. This is a solid lever for small security teams looking to automate vulnerability prioritization across complex environments.

Malcolm Network Traffic Analysis Suite Gets Performance and Detection Updates

The CISA-backed Malcolm project has a new release focused on performance gains and improved detection logic for network traffic analysis. For teams building their own network visibility stacks, this is a foundational tool worth watching.

News

CISA Adds Two New Vulnerabilities to Known Exploited Vulnerabilities Catalog

CISA's KEV catalog continues to be the most actionable list for prioritizing patching. The latest additions target actively exploited flaws in enterprise software, giving defenders a clear signal on what to fix first to reduce real-world risk.

Analysis

Research Highlights TikTok's Potential for Covert Data Exfiltration in Corporate Environments

New research demonstrates how TikTok's API could be abused for data exfiltration, turning a popular app into a potential corporate espionage vector. This is a practical reminder that shadow IT risks extend beyond traditional SaaS to consumer social apps.