Harassment Ransomware, Runtime Threat Mapping, and Defender Tooling Advances

News

CISA Adds Actively Exploited Flaws to KEV Catalog

CISA just updated its Known Exploited Vulnerabilities catalog, and if you're not patching against these specific flaws, you're playing with fire. This is the fastest way to prioritize your team's limited time on what attackers are actually using right now.

Ransomware Groups Shift to Harassment, Double Down on Pressure

Ransomware groups aren't just encrypting anymore; they're actively harassing victims to force payment. This is a major tactical shift that changes your incident response playbook, forcing you to plan for psychological pressure, not just technical recovery.

New Research Highlights TikTok's Silent Data Exfiltration Risks

The research on TikTok's data exfiltration is another brick in the wall for any organization with a mobile workforce. It reinforces that the risk isn't just about what you intentionally post; it's about what the app can silently gather.

Tool

CISA Ships New Malcolm Release for Network Analysis

Malcolm is a powerful, open-source network traffic analysis suite from CISA. This new release makes it even easier to deploy full packet capture and threat detection at scale without spending a dime on vendor solutions.

ThreatMapper Update Focuses on Runtime Vulnerability Prioritization

ThreatMapper is one of the best open-source tools for mapping your attack surface in runtime, and this release targets vulnerability prioritization. It's the kind of tool that gives you a real-time, attacker's-eye view of your most exposed assets.