Don’t swing at everything

This week’s Threat Source newsletter highlights a new Rust-based remote access trojan (RAT), “msaRAT,” deployed by the Chaos ransomware group. The RAT leverages Chrome DevTools Protocol (CDP) to establish a covert command-and-control channel, bypassing traditional network defenses. Cisco Talos also introduced Antares, a family of security small language models (SLMs) designed to pinpoint vulnerabilities within codebases, and reported on a Romanian land registry database wipeout and a widespread WordPress exploit. The newsletter emphasizes the need to prioritize patching against real-world exploitation risk, rather than solely relying on CVSS scores.