AI-Powered Attacks, Router Exploits, and Defender Tooling Evolve

Analysis

New Research: TikTok Can Be Weaponized for AI-Powered Phishing Attacks

Researchers show TikTok's algorithm can be manipulated to deliver highly targeted phishing content. This is a new vector for social engineering at scale.

News

ASUS Patches Critical AiMesh Router Flaws Enabling Remote Code Execution

Multiple RCE vulnerabilities in ASUS AiMesh routers could allow attackers to hijack home networks. This is a reminder that consumer gear is a prime target for botnets and initial access.

CISA Updates KEV Catalog with New Actively Exploited Vulnerabilities

CISA continues to add critical vulnerabilities to its KEV catalog. This is a vital resource for prioritizing patching in environments where attackers are already active.

Tools

CISA Releases Live Ransomware Demo for Defenders

CISA's interactive demo shows real-world ransomware attack chains. It's a solid training resource for blue teams to study adversary behavior and improve detection playbooks.

ThreatMapper 2.0 Adds Runtime Threat Detection and Cloud Security

The latest ThreatMapper release brings deeper runtime observability and cloud security posture management. It's a big step for open-source cloud-native threat detection.

Malcolm Network Traffic Analysis Suite Gets Major Update

Malcolm's new release enhances network forensics and threat hunting capabilities. It's a powerful free tool for organizations needing full packet capture and analysis.