Edge Vulnerabilities, Credential Scanners, and Network Monitoring Get Smarter

News

Chinese State Actors Target Critical Infrastructure via Edge Devices

State-sponsored groups are focusing on edge appliances like routers and firewalls, which are notoriously hard to patch. This is a persistent threat for any organization with a complex perimeter.

CISA Adds Three Actively Exploited Vulnerabilities to Catalog

The Known Exploited Vulnerabilities (KEV) catalog is the definitive list for patch prioritization. If you have these flaws, you need to fix them now.

Gitloker Campaign Exploits GitHub Notifications for OAuth Phishing

Attackers are abusing GitHub's own notification system to trick users into granting access to malicious OAuth apps. A reminder to audit your authorized applications.

Tools

TruffleHog Updates Credential Scanning Engine

The latest release improves detection of leaked secrets in code repositories. A must-run for any team doing pre-commit or CI/CD security checks.

CISA's Malcolm Network Analysis Suite Gets Major Update

Malcolm is a powerful, open-source network traffic analysis tool. This update brings better performance and new detection capabilities for threat hunting.