Shakespeare, stubborn scripts, and shifting cyber trends — William’s got laughs and lessons waiting for you in this week’s newsletter: cs.co/63323hqmJL

Cisco Talos is tracking active exploitation of CVE-2026-20127 affecting Cisco Catalyst SD-WAN Controllers. Customers are strongly advised to review our latest threat advisory (cs.co/9001hs79z) and follow the published guidance (cs.co/9001hs7aL) to protect your environment.

Cisco Talos is disclosing the "Dohdoor" backdoor, which is stealthily targeting education and health care networks using DNS-over-HTTPS, evading traditional security tools, and hiding behind trusted cloud infrastructure: cs.co/63327hqSsN

In this week’s newsletter, Martin considers how defenders can turn the tables, using offensive AI tools against themselves: cs.co/63320heyqj

What does it take to bypass hardware protections and find hidden flaws in industrial IoT devices? Discover how targeted emulation led to six new CVEs in our latest blog: cs.co/63325hjH4c

Thor is here to make sure your news feed is never missing a critical update. Consider this your official alert to subscribe to our newsletter for the latest Talos research and security news: cs.co/threatsource

Amy thinks that some things are worth the risk, like clicking “subscribe” on the Threat Source newsletter for the best headlines and security updates: cs.co/threatsource

Hazel is geeking out over the perfect security strategy, and she wants you to be part of the fellowship. Join the adventure by subscribing to the Threat Source newsletter for the latest research and security news: cs.co/threatsource

If you thought your vulnerability backlog couldn’t get any bigger, meet Shannon, a fully autonomous AI penetration testing tool. Amy’s got the details (and many questions) in this week’s newsletter: cs.co/63329hurDH

Joe is sending a digital high-five and a whole lot of threat intelligence your way, Valentine! Keep your security routine extra sweet by subscribing to the Threat Source newsletter for the latest Talos research and security news: cs.co/threatsource

Ransomware chills, phishing heats up… Dig into Q4 2025’s top IR trends and get practical tips from Amy and Dave on the latest Talos Takes episode: cs.co/63323h3NVL

Hear Ryan Liles spill the tea on how he plays the ultimate middleman between Cisco’s product teams and third-party testing labs: cs.co/63328h3FBs

Looking for a security Valentine who has a book quote to go with every bit of threat intel? Subscribe to the Threat Source newsletter today for more heartfelt notes from Bill: cs.co/threatsource

Let Martin’s detection logic keep your heart and your network safe this Valentine's Day. Subscribe to the Threat Source newsletter today for the latest Talos research and security news: cs.co/threatsource

There's still time to register! Tomorrow, Cisco Talos IR is sharing the most critical and high-impact incidents they responded to last quarter and how you can protect your organization: cs.co/IRTales-2025...

Welcome to AI church, where the spirit is willing but the Clawdbot security is weak. Grab a pew and listen to Joe's cautionary sermon: cs.co/63325hyYHf

Register now! In this exclusive session, Cisco Talos IR is sharing the most critical and high-impact incidents they responded to last quarter, and what you can do to protect yourself: cs.co/IRTales-2025...

Real incidents, real organizations, real lessons learned. Don't miss this live session with Cisco Talos IR next week to hear about the most critical and high-impact incidents they responded to last quarter. Register now: cs.co/IRTales-2025...

Feeling overwhelmed by just about everything? This week’s newsletter from Hazel shares a touch of Taskmaster-inspired levity, and the latest cyber threats:cs.co/63326hDp4i

Tune in to the latest episode of the Talos Threat Perspective as Hazel, Joe Marshall, and Craig Jackson explore Q4 2025’s top cybersecurity trends: cs.co/63321hDGlS

In Q4 2025, Cisco Talos IR observed a surge in exploitation of public-facing applications and a targeted phishing campaign against Native American tribal organizations: cs.co/63322h6w1q

Go beyond the blog with Cisco Talos IR on February 11. This live session features candid stories, behind-the-scenes insights, and strategic lessons learned from the most critical real-world incidents we faced last quarter. Register to attend now: cs.co/IRTales-2025...

Think your data is safe just because it’s encrypted? In this episode, Amy, Yuri Kramarz, and Tim Wadhwa-Brown expose the surprising pitfalls — like default settings and poor key management — that could leave your secrets wide open: cs.co/63326hBbWw

This week’s newsletter from Bill reminds us why fighting through alert fatigue to stay vigilant — especially when it comes to reconnaissance events — and knowing your environment are essential for strong cybersecurity: cs.co/63321CAFMh

No crystal ball needed! In today’s newsletter, Martin unpacks why reflecting on today’s tense threat landscape helps us predict the twists and turns cybersecurity teams can expect in 2026: cs.co/63324CIYUa

Kick off 2026 with Talos Takes as new host Amy Ciminnisi and guest Joe Marshall dive into the wild world of cybersecurity certifications, break down some options, and get spicy tackling skeptics and barriers head-on: cs.co/63320CImV4

Terryn Valikodath never imagined that a childhood jailbreaking iPhones and exploring criminal forensics would land him in incident response. Hear him recount the journey in our latest episode: cs.co/63324Cxnam

Microsoft has released its monthly security update for January 2026. It includes 112 vulnerabilities affecting a range of products, including eight it marked as “critical:” cs.co/63327Cxoy7

Sign up for a Security Operations Center (SOC) Tour at Cisco Live Amsterdam 2026. Get a behind-the-scenes look at how Cisco detects and responds to active threats in real-time conference traffic: cs.co/63322CxnJi

In this week's newsletter, see why Amy says showing up imperfectly, from art projects to cyber defense, beats chasing flawless resolutions every time: cs.co/63328CSOTI

Tally up your points! How did you score in the grand finale of Talos’ 12 Days of Malware? Can you unlock the final threat, or will you hit a dead end? Share how you did below: cs.co/6014CMddk

Let’s get cracking on Day 11 of Talos’ 12 Days of Malware. What did you score today? Tell us in the replies: cs.co/6019CMdXU

Peek under the hood of Cisco's security portfolio with our latest blog! Learn how Cisco Talos experts use cutting-edge intelligence and machine learning to detect and block threats from every angle: cs.co/63328CWE84

What was your score on today’s challenge of the 12 Days of Malware? Can you guess which malicious tools are in the spotlight? Tell us how you did below: cs.co/6011CMdO5

We're back with the 12 Days of Malware. Use the clues to uncover the identity of this threat actor. What score did you get? cs.co/6018CMdzk

How did you score on today’s round of Talos’ 12 Days of Malware? Can you crack the clues and name the tool? Share how you did in the replies.

Happy Monday! How many points did you score so far in our malware countdown? It’s Day 7, so time to take a shot at today’s clues: cs.co/6047CMjfP

See if you can identify today’s threat actor. How many points did you score? Hint: They wreak havoc across a wide variety of business verticals. cs.co/6018CMjxn

Cisco Talos has disclosed vulnerabilities in Libbiosig, Grassroot DiCoM (zero-days), and Smallstep step-ca: cs.co/63322COUq0

2025 is rapidly approaching ancient history. Let’s look at the top three news events that Joe liked and what he sees happening in 2026: cs.co/63326COKHK

Take a trip down memory lane with us! For her last episode as Talos Takes host, Hazel and team members Pierre, Alex, and Joe reflect on how cybersecurity has changed from 2015 to 2025: cs.co/63324COUH2

Tell us how many points you scored in the comments. You’re almost halfway through the 12 Days of Malware, so don't give up now! Spoiler: blog.talosintelligence.com/python-versi...

Meet Lexi DiScola, who tackles cyber threat analysis by day and a towering stack of TBRs by night. Check out the latest Humans of Talos episode for her thoughts on global teamwork and balancing threat intel with literary escapes: cs.co/63324CMmeu

Share how many points you scored in the comments, and don't get wiped by today's challenge:

Let us know in the replies how many points you get. Santa can probably guess the name of this initial access broker, but will you?

Welcome to the second day of 12 Days of Malware! Up for a challenge? Guess the threat actor in as few clues as possible and tell us how you did.

Basics, basics, basics. In the latest TTP, Hazel and Nick talk through which 2025 threats stood out, what surprised them, and what didn’t: www.youtube.com/watch?v=Po4R...

Put your cyber skills to the test with Talos’ 12 Days of Malware, featuring insights from Talos-driven research published throughout the year. Try to guess the threat actor or tool in as few clues as possible, and share how you did in the comments below: blog.talosintelligence.com/salt-typhoon...

Not all those who wander are lost… Some are just counting steps to Mordor and tracking ransomware. Hazel shares all in this week’s newsletter: cs.co/63325C8iGV