Android Perimeter Vulnerabilities, Ransomware's Pressure Tactics, and Fresh Defender Tools

News

CISA Catalogs Critical Qualcomm Android Flaw CVE-2025-21479

CISA added a Qualcomm flaw to its catalog, giving attackers a known exploited target. Federal agencies have 21 days to patch, but everyone with affected Android devices should treat this as urgent.

TikTok Exploited as a Covert Data Exfiltration Tool in Recent Research

Researchers demonstrated TikTok can be weaponized for data exfiltration, even from supposedly protected corporate networks. This is a clear signal to review mobile device management and network segmentation policies.

Tools

ThreatMapper Release: Open-Source Cloud Threat Visualization

ThreatMapper's latest release helps security teams visualize and prioritize risks across cloud and on-prem environments. If you're building out a vulnerability management program, this is a force multiplier for mapping your attack surface.

CISA Malcolm Update: Enhanced Free Network Traffic Analysis

CISA's Malcolm network traffic analysis tool just got an upgrade. For teams building forensic capabilities, it's a solid, free option for digging into packet captures and spotting anomalies without expensive commercial suites.

Analysis

Ransomware's Escalation to High-Pressure Multi-Channel Extortion

Ransomware groups are getting more aggressive with their pressure tactics, using multi-channel extortion and targeting operational technology. Defenders need to assume breaches will be high-stakes and prepare recovery plans accordingly.