ASUS Mesh Flaws, CISA's Ransomware Demo, and New Defender Tooling for the Enterprise

News

ASUS Patches Critical AiMesh Router Flaws

If you're running ASUS AiMesh in a small office or branch, patch immediately. These are network-level flaws that can lead to full compromise, and attackers are quick to weaponize router bugs.

CISA Adds Three New Known Exploited Vulnerabilities

CISA's KEV catalog just got three new entries, including flaws in Cisco and Atlassian products. If you're running these, your patching clock is now ticking - the federal deadline is the benchmark.

Tools

CISA Releases Live Ransomware Attack Demo

CISA dropped a hands-on demo showing real attacker TTPs during a ransomware intrusion. This is high-signal training material for blue teams and IR planners who need to see the attack chain, not just read about it.

ThreatMapper 2.2.0 Adds Expanded Runtime Security

Deepfence's open-source threat mapper gets a major update with expanded runtime security and cloud-native context. It's a solid tool for teams that need to map and prioritize risks across their cloud footprint without paying enterprise prices.

Malcolm Network Analysis Suite Gets an Update

CISA's own network traffic analysis tool, Malcolm, has a new release. It's a powerful, open-source platform for anyone who needs deep network visibility for threat hunting and IR, especially in OT/ICS environments.

Analysis

Research: TikTok Browser Can Be Used for MitM Attacks

New research shows the in-app TikTok browser could be vulnerable to man-in-the-middle attacks, potentially exposing user data. This is another reminder that any