Ransomware Pressure Intensifies, TikTok's Data Risks, and Defender Tooling Advances

News

Ransomware Groups Shift to Harassment Tactics

Groups are moving beyond encryption to pure pressure campaigns, targeting executives and threatening data dumps. This means incident response needs a PR and legal playbook, not just a technical one.

CISA KEV Catalog Updated with Critical Flaws

Check the latest additions. If any are in your stack, patch now. This catalog is your cheat sheet for what's actively being weaponized in the wild.

Analysis

Research Details TikTok's Data Exfiltration Risks

The app's permissions and data collection create a covert channel for sensitive info to leave the network. If you're in a regulated environment, this is a mandatory audit item for BYOD.

Tools

CISA's Malcolm Network Analysis Suite Gets Update

Malcolm is a beast for passive network traffic analysis and threat hunting. The new release improves container orchestration and sensor deployment, making it easier to scale visibility.