Coinbase Insider Breach, TikTok Spyware Lawsuit, and Chrome Zero-Day Patched Under Active Exploit

Analysis

Researchers Show TikTok Can Be Abused as a Persistent Spyware Platform

New research details how TikTok's in-app browser can be leveraged to track user behavior and intercept sensitive inputs, raising serious questions for orgs that allow it on managed devices. The attack surface is real and largely unmitigated by existing MDM policies.

Vulnerability

CISA Adds Multiple New Entries to Known Exploited Vulnerabilities Catalog

CISA's KEV catalog got fresh additions this cycle covering flaws in widely deployed enterprise software. If you're running automated patch prioritization, pull the updated feed and recheck your exposure surface today.

Tools

Malcolm Network Traffic Analysis Platform Drops New Release with Expanded Detection Coverage

Malcolm, CISA's open-source full packet capture and analysis platform, pushed a new release with updated detection logic and improved integration support. Worth pulling if you're running a home SOC or need a free Zeek plus Arkime stack for incident response.