Harassment Ransomware Tactics, Runtime Prioritization, and Defender Tooling Advances

News

CISA Adds Samsung, Microsoft, and Linux Flaws to the Known Exploited Vulnerabilities Catalog

Active exploitation in the wild is the fire alarm that gets you paged at 2 AM. This is the list of what's actively burning, so update your playbooks and patch cadence accordingly.

Analysis

Ransomware Groups Increasingly Harass Employees After Data Exfiltration

Ransomware is no longer about encrypting files; it is about applying pressure by targeting the humans behind the keyboards. This shift forces us to lock down the HR and communications layers just as tight as the network tier.

Tools

Malcolm v25.04.1 Released with Important Architecture Improvements

Malcolm just leveled up its architecture with performance bumps that make full PCAP retention viable at the edge. If you need a cost-effective way to hunt for traffic anomalies without burning through your SIEM budget, this is the move.

ThreatMapper v1.7.0 Supports Real-Time Runtime Threat Mapping

Mapping your runtime threats shouldn't require a PhD or a seven-figure contract. ThreatMapper keeps pushing the envelope on visualizing real-time vulnerabilities, which is massive leverage for small teams trying to prioritize what actually matters.