Router RCEs, AI-Powered Phishing, and Defender Tooling Evolve

News

ASUS Patches Critical AiMesh Router RCE Flaws Under Active Exploit

ASUS pushed emergency patches for its AiMesh routers after researchers found critical RCE flaws being actively exploited in the wild. If you're running mesh networking gear, patch immediately; these vulnerabilities allow full device takeover and are prime targets for botnet recruitment.

CISA KEV Catalog Updates with Three Actively Exploited Vulnerabilities

CISA added three new vulnerabilities to its Known Exploited Vulnerabilities catalog, all under active attack. The list includes flaws in network infrastructure and enterprise applications; if any match your stack, treat patching as a same-day priority.

Analysis

TikTok Weaponized for AI-Powered Spear Phishing in Latest Research

New research demonstrates how attackers can leverage TikTok's algorithm and data for highly targeted, AI-powered spear phishing campaigns at scale. This is a tactical shift: social media platforms are becoming automated reconnaissance and payload delivery vectors, not just brand impersonation tools.

Events

CISA Releases Live Ransomware Demo for Hands-On Defender Training

CISA published a live, interactive ransomware demo showing exactly how modern attacks unfold step-by-step. This is solid operational training material for blue teams; use it to stress-test your own incident response playbooks and identify detection gaps.

Tools

ThreatMapper 1.6.2: Enhanced Runtime Security and Multi-Cloud Mapping

Deepfence's ThreatMapper drops v1.6.2 with improved runtime security monitoring and tighter multi-cloud asset mapping. For builders running containerized workloads across clouds, this is a solid free tool to automate vulnerability and threat discovery without vendor lock-in.

Malcolm Network Traffic Analysis Suite Gets Major Updates

CISA's open-source Malcolm network traffic analysis tool released significant updates, including enhanced protocol parsing and streamlined deployment. This is high-leverage tooling for SOC analysts who need deep network visibility without expensive commercial platforms.