Kali Linux has released version 2025.4, its final update of the year, introducing three new tools, desktop environment improvements, and enhanced Wayland support.

Put your cyber skills to the test with Talos’ 12 Days of Malware, featuring insights from Talos-driven research published throughout the year. Try to guess the threat actor or tool in as few clues as possible, and share how you did in the comments below: blog.talosintelligence.com/salt-typhoon...

sitting next to a sweaty guy on a plane who just finished a workout at terminal 8 while wearing a shirt, tie, and suit

watchTowr Labs has found thousands of secret tokens and credentials shared publicly on code formatting and beautification sites, such as JSONFormatter and CodeBeautify labs.watchtowr.com/stop-putting...

***record scratch*** "Yep, that's me. You're probably wondering how I ended up in this situation..."

From a wave of ToolShell incidents, to a rise in post-exploitation phishing and the creative misuse of legitimate tools like Velociraptor, this episode of the TTP is packed with insights from Q3: www.youtube.com/watch?v=q7yV...

you need this in your life.

they won't even open betting lines for DNS as the RFO on these things.

Save the date: Cisco Talos is hosting a live Reddit AMA on r/cybersecurity on October 30! Our team members will be on standby to answer your questions about our latest Incident Response Quarterly Trends Report, today’s threat landscape, and more.

Talos is serving up a special episode of Beers with Talos! VP Christopher Marshall (the “real Marshall,” much to Joe’s displeasure) joins Hazel, Bill, and Joe for a very real conversation about leading a large team when the world won’t stop moving: cs.co/63325AFR3x

gene kelly is antifa

If anyone needs me I will be in the museum, lying down next to the bog bodies.

Pearls firmly clutched.

Support your public library. Defend your public library. Slay the enemies of your public library.

Ozzy Osbourne visited my magic shop. He said he'd like to buy some stink bombs. How many? All of them. I had to go through drawers finding every last one. He bought 900 of them. To sign the credit card slip I handed him a shock pen, which he thought was hilarious and bought that too. RIP

This. Read this and repeat it over and over to yourself if you need to do so.

Look, I'm not going to say that this is a personal attack ... ... it is. This is a personal attack.

We’re halfway through 2025, and vulnerability reporting is evolving fast. Check out the latest Threat Source newsletter as Thorsten breaks down record CVE volumes and new reporting challenges: blog.talosintelligence.com/patch-track-...

Threat actor deepfakes Marco Rubio's voice to approach foreign officials on Signal www.washingtonpost.com/national-sec...

Join us for a deep dive into how Cisco Talos uncovered two critical vulnerabilities in the AsIO3.sys driver powering ASUS Armory Crate: blog.talosintelligence.com/decrement-by...

Cisco Talos uncovered zero-day vulnerabilities in catdoc, plus vulnerabilities in Parallel, NVIDIA, and High-Logic FontCreator 15—all now patched: blog.talosintelligence.com/catdoc-zero-...

Security researcher Michalis Antoniades has released Chronos, a kernel extension to support EDR-like capabilities on RTOS embedded systems github.com/dest-3/Chronos

Cisco Talos’ 2024 Year in Review is available now! With visibility into more than 886 billion security events per day, the report features our key insights. Read the full report here: http://cs.co/63320FzuMG

I really hate this archaic nonsense is still a part of the community - but this is a really good post from a couple of Splunk/SURGe folks. I am so lucky to work on a team that is very diverse across the board but I am very aware that we are flying in the face of the norm.

From threat hunting, detection building, vulnerability discoveries and incident response, Cisco Talos shows up every day to try and make the internet a safer place. Watch our full overview here: http://cs.co/633280m3rs

"The PureCrypter malware found in this intrusion is a Windows dynamic-link library obfuscated with Eziriz’s .NET Reactor obfuscator. It has resources of encrypted binaries of legitimate DLLs, including Protobuf-net and Microsoft task scheduler DLL along with the TorNet backdoor. "

the accuracy

Supply Chain Attack Detected in Solana's web3.js Library: socket.dev/blog/supply-... Solana blamed it on a phishing attack: github.com/solana-labs/...

<Bangs drum like Animal on a bender>

Ack.

FBI confirms that despite the Chinese-sounding name, the BianLian ransomware gang and its affiliates operate out of Russia PDF: www.ic3.gov/CSA/2024/241...

Want to actually know what it's like to work at Talos? Like truly understand? Listen to the podcast linked here - you get A LOT of Talos people from disparate groups and in listening you can understand the Talos culture isn't buzzword bullshit. I fucking love my team. Ride or die.

A threat actor known as #AridViper (likely operating out of #Gaza) has been targeting users in the #MiddleEast with #spyware disguised as dating apps, dating back to November 2022. blog.talosintelligence.com/arid-viper-m...

Just hearing that Tinsley Oden died - the massive impact that this guy had on our day-to-day is insane. </3

Not all Top Level Domains are created equal. Some TLDs do some pretty strange things in DNS. blog.talosintelligence.com/whats-in-a-n...

Holger wrote an amazing blog over on hexrays - digging in to generating signatures for Nim and other non-C programming languages.

What a wonderful man https://www.abc.net.au/news/2023-07-30/pro-bono-perth-retired-dentist-helping-former-addicts-recovery/102662118?utm_source=abc_news_web&utm_medium=content_shared&utm_campaign=abc_news_web

For 25+ yrs police, military, intel agencies and critical infrastructure around the world relied on the TETRA radio standard to secure critical communications. But now Dutch researchers have examined secret algorithms used in TETRA and found something startling - an intentional backdoor, and more

*looks around*