Network Perimeter Under Siege, Ransomware's New Playbook, and Fresh Defender Tools

News

SonicWall Patches Critical SMA 1000 Vulnerability Under Active Exploit

Another day, another critical remote code execution flaw in a network security appliance. If you run SonicWall's SMA 1000, patch immediately; this is being actively weaponized in the wild.

ASUS Patches Critical AiMesh Router Flaws Allowing Device Takeover

Vulnerabilities in consumer-grade networking gear remain a favorite foothold for attackers, especially with remote work blurring the perimeter. ASUS users should update their router firmware without delay.

CISA Adds New Vulnerabilities to Known Exploited Catalog

The KEV catalog remains the single best source of truth for what's actually being used in attacks right now. If a vulnerability is on this list and in your stack, it's a five-alarm fire for patching.

Analysis

Ransomware Groups Shift to Data Leak Pressure and Double Extortion

Attackers are moving beyond simple encryption, focusing on data theft and public shaming to increase pressure on victims. This evolution makes robust data governance and insider threat detection more critical than ever.

Tools

CISA Releases Live Ransomware Demo for Defensive Training

Seeing the attack chain in action is one of the best ways to train defenders. This hands-on demo from CISA is a free, practical resource for security teams looking to stress-test their response playbooks.

ThreatMapper Update: Enhanced Runtime Security and Attack Path Analysis

The open-source threat intelligence platform gets a major update with improved capabilities for mapping attack paths in cloud-native environments. A valuable tool for builders looking to automate vulnerability discovery.

Malcolm Network Traffic Analysis Suite Drops New Release

CISA's own network analysis toolkit continues to improve, offering a powerful, open-source alternative for capturing and analyzing network data. Essential for any blue team looking for high-signal detection.