Zero-Days in Network Gear, AI-Powered Reconnaissance, and Fresh Defender Tooling Drops

News

ASUS Patches Critical AiMesh Router Vulnerabilities

ASUS is patching multiple critical flaws in its AiMesh routers that could allow attackers to take control of your entire mesh network. If you're running ASUS gear, this is a mandatory update; a compromised router is a silent, high-leverage foothold for any attacker.

CISA Adds Fresh Vulnerabilities to Known Exploited Catalog

CISA continues to update its KEV catalog, adding vulnerabilities that are under active, in-the-wild exploitation. This is the definitive, prioritized punch list for any sysadmin or security engineer patching in the real world.

Tools

ThreatMapper Release Adds Deeper Cloud and Runtime Analysis

Deepfence's ThreatMapper just dropped a new version with enhanced cloud posture management and runtime vulnerability analysis. This is a solid, free tool for builders who want to map their attack surface and get actionable threat intel without enterprise pricing.

CISA's Malcolm Network Traffic Analysis Suite Gets an Update

CISA's open-source Malcolm suite, a powerful tool for network traffic analysis and threat detection, has a new release. It's a force multiplier for blue teams looking to build out passive monitoring and investigation capabilities on a budget.

CISA's Live Ransomware Demo for Defenders

CISA has released a live, interactive demo showing how ransomware operators move through a network and deploy their payload. It's a tactical training tool built for blue teams to practice detection and response in a safe environment.

Analysis

Research Highlights TikTok's Potential for Covert Reconnaissance

New research shows how the TikTok app could be exploited for device fingerprinting and network reconnaissance, turning consumer devices into potential intelligence-gathering assets. It's a sharp reminder that any app with broad permissions is a potential attack surface.