Malicious QR Codes: How big of a problem is it, really? blog.talosintelligence.com/malicious_qr...

In order to save democracy, Biden needs to threaten to assassinate all 6 conservatives on the Supreme Court as an official act of his presidency. It’s what FDR would have done.

McAfee products are so shitty they need to fake finding viruses on your computer to generate sales

This is a lie, and it's always been a lie. Something like ChatGPT needs a TON of text in the language you're targeting to train the model. You get it by licensing it, or you by paying people to write it for you, or by stealing it. What they're saying is it's impossible to create CHEAPLY.

At Talos, we fight the good fight every day to protect others. Read an account of how Talos worked with several other Cisco teams to help the Ukrainian people, who are struggling to maintain civilization in an invaded country, and keep the lights on. blog.talosintelligence.com/project-powe...

SugarGh0st RAT is a new customized variant of Gh0st RAT, an infamous trojan that’s been active for more than a decade blog.talosintelligence.com/new-sugargh0...

Many organizations are curious about the idea of threat hunting, but what does this really entail? In this video, we try to address the many answers to the question, "What is threat hunting?" blog.talosintelligence.com/what-is-thre...

Learn how a team of experts from Talos and others at Cisco are helping to protect #Ukraine's power grid with a line of specially crafted devices. www.cnn.com/2023/11/21/p...

A threat actor known as #AridViper (likely operating out of #Gaza) has been targeting users in the #MiddleEast with #spyware disguised as dating apps, dating back to November 2022. blog.talosintelligence.com/arid-viper-m...

Attacks on web applications spike in third quarter, new Talos IR data shows blog.talosintelligence.com/talos-ir-tre...

"ShroudedSnooper" is actively targeting telecommunications companies in the Middle East using a previously undiscovered #malware family. More details on this threat and how users can stay protected. blog.talosintelligence.com/introducing-...

Not all Top Level Domains are created equal. Some TLDs do some pretty strange things in DNS. blog.talosintelligence.com/whats-in-a-n...

Lazarus Group is using a new remote access trojan called “CollectionRAT.” CollectionRAT appears to be connected to Jupiter/EarlyRAT, another malware family Kaspersky recently wrote about and attributed to Andariel, a subgroup within the Lazarus Group. blog.talosintelligence.com/lazarus-coll...

Cisco Talos discovered the North Korean state-sponsored actor Lazarus Group targeting internet backbone infrastructure and healthcare entities in Europe and the United States. blog.talosintelligence.com/lazarus-quit...

On the latest Security Stories podcast, we cover how Cisco Talos Incident Response helped one healthcare customer avoid the worst with retainer services. www.cisco.com/c/en/us/prod...

Holger wrote an amazing blog over on hexrays - digging in to generating signatures for Nim and other non-C programming languages.

The rise of AI-powered criminals https://blog.talosintelligence.com/the-rise-of-ai-powered-criminals/

There have been multiple leaks of ransomware source code and builders, giving unsophisticated attackers the ability to easily generate their own ransomware with little effort or knowledge. https://blog.talosintelligence.com/code-leaks-new-ransomware-actors/

Between new ransomware groups, a growing mercenary space, espionage campaigns, supply chain attacks, and new “as a service” tools popping up, there's a lot to talk about already in the first half of 2023.

The many vulnerabilities Talos discovered in SOHO and industrial wireless routers post-VPNFilter https://blog.talosintelligence.com/router-researcher-vulnerability-spotlight-23/

Data theft extortion rose as the threat Talos Incident Response saw the most last quarter. Want to learn more about what we're seeing in the wild, and what you can learn from it? Read our latest Quarterly Report. https://blog.talosintelligence.com/talos-ir-q2-2023-quarterly-recap/

As the internet starts to pivot away from passwords as a primary login method, what might future #phishing attacks look like? We address this future in our latest post https://blog.talosintelligence.com/what-might-authentication-attacks-look-like-in-a-phishing-resistant-future/

Cisco Talos recently saw threat actors exploiting a #Windows policy loophole that allows the signing and loading of cross-signed kernel-mode drivers with older signature timestamps. #Microsoft just released an advisory on this activity, but more on our blog here: http://cs.co/6011PzaVd

#Spyware and the "mercenary" groups that make these tools aren't going anywhere. Here's what makes these groups so dangerous and what other steps the #cybersecurity community should still be taking. https://blog.talosintelligence.com/the-growth-of-commercial-spyware/

Talos Threat Hunters are the front lines of #cybersecurity. They actively keep businesses, countries, and the whole internet safer. 💻🌎🔐 Discover how Talos identifies new and evolving threats in the wild, and how their intel helps organizations build strong defenses.

Did you know Talos has 27 #opensource tools for anyone to use? These range from our world-class IPS #Snort, to free #ransomware decryptors. Learn more with this video https://blog.talosintelligence.com/how-talos-open-source-tools-can-assist-anyone-looking-to-improve-their-security-resilience/