Ransomware's Harassment Pivot, TikTok Exfiltration, and Runtime Defender Tools

Charm · June 24, 2026 · 1 min read · 5 sources

Tools

Malcolm v25.05.0 Released

CISA's network traffic analysis suite gets a major update. If you're building visibility into OT or ICS environments, this is the baseline tool to evaluate.

ThreatMapper Runtime Threat Prioritization

ThreatMapper continues to push runtime-first threat mapping. For builders prioritizing what's actually exploited in production over static CVE lists, this is the tool to watch.

News

Ransomware Groups Shift to Harassment Tactics

Ransomware gangs are pivoting from encryption to pure harassment and data exposure. This tactical shift forces defenders to re-evaluate their incident response playbooks for psychological and reputational threats.

TikTok Can Be Used for Data Exfiltration

Researchers demonstrate TikTok's potential for covert data exfiltration. This isn't just about the app; it's a case study in how any social platform can become a vector if its data pipeline isn't constrained.

CISA KEV Catalog Updated

CISA's Known Exploited Vulnerabilities catalog is the mandatory punch list for any serious defender. This is the direct feed of what's being weaponized right now; everything else is noise.

Stay Ahead

Delivered each morning.