CISA Flags Critical Qualcomm Flaw, Ransomware Escalates Harassment, and Defender Tooling Moves Forward

Tools

Malcolm v25.05.0 Release: Enhanced Network Security Analysis Suite

The Malcolm v25.05.0 release adds significant new features for fast network traffic analysis, including better support for PCAP and log data. It’s a solid update for anyone running this open-source suite to hunt for malicious activity in their environment.

News

Critical Qualcomm Android Vulnerability Added to CISA KEV Catalog

CISA just added CVE-2025-24855, a critical Qualcomm flaw affecting Android devices, to its Known Exploited Vulnerabilities catalog. Federal agencies have 21 days to patch, and this is a strong signal for all defenders to prioritize this fix immediately.

Ransomware Groups Escalate Harassment and Pressure Tactics

Multiple ransomware groups are increasingly using harassment and pressure tactics on victims to force payment. This shift from pure encryption to psychological warfare is a major escalation that changes the defender's playbook.

Analysis

New Research: TikTok Can Be Used for Data Exfiltration

New research reveals TikTok's app can be leveraged for data exfiltration, bypassing standard network monitoring. This is a practical threat for organizations with BYOD policies and another reason to scrutinize mobile app permissions.