@TalosSecurity@mstdn.social
@TalosSecurity@mstdn.social avatar

TalosSecurity

@TalosSecurity@mstdn.social

Cisco's premiere source of threat intelligence, including a world-class Incident Response team. https://blog.talosintelligence.com/

This profile is from a federated server and may be incomplete. Browse more on the original instance.

TalosSecurity, to github
@TalosSecurity@mstdn.social avatar

Cisco Talos has developed a fuzzer that enables us to test macOS software on commodity hardware. We released this tool on #GitHub this morning, and you can learn more about it here http://cs.co/6019dusi3

video/mp4

TalosSecurity, to random
@TalosSecurity@mstdn.social avatar

From use-after-free vulnerabilities in a popular PDF Reader that could lead to arbitrary code execution, to an issue in a timecard reader that could allow an adversary to steal the admin's login credentials, get caught up on all the software and hardware vulnerabilities our team recently discovered https://blog.talosintelligence.com/vulnerability-roundup-may-1-2024/

video/mp4

TalosSecurity, to random
@TalosSecurity@mstdn.social avatar

We have new research on the APT out this morning. They've added three new information-stealing families to their arsenal, allowing them to expand the geographies they target https://blog.talosintelligence.com/suspected-coralraider-continues-to-expand-victimology-using-three-information-stealers/

TalosSecurity, to Ukraine
@TalosSecurity@mstdn.social avatar

A new we recently discovered is tricking users in into uploading sensitive documents to , a popular platform for threat researchers and admins https://blog.talosintelligence.com/offlrouter-virus-causes-upload-confidential-documents-to-virustotal/

video/mp4

TalosSecurity, to random
@TalosSecurity@mstdn.social avatar

Threat Advisory: We've recently spotted an increase in brute-force attacks targeting several popular services, including #VPN and #SSH https://blog.talosintelligence.com/large-scale-brute-force-activity-targeting-vpns-ssh-services-with-commonly-used-login-credentials/

video/mp4

TalosSecurity, to random
@TalosSecurity@mstdn.social avatar

This morning, we published new research into , a newly discovered threat actor who is targeting human rights activists in North Africa. Learn more about their campaigns and fake apps here https://blog.talosintelligence.com/starry-addax/

TalosSecurity, to random
@TalosSecurity@mstdn.social avatar

New research out this morning on a new APT from Vietnam we're calling . It's out to steal important login credentials, banking information and take over targets' social media accounts https://blog.talosintelligence.com/coralraider-targets-socialmedia-accounts/

TalosSecurity, to random
@TalosSecurity@mstdn.social avatar

Talos' Vulnerability Research team recently discovered a seemingly low-severity vulnerability in Office. But in this Vulnerability Deep Dive, we show how, despite its low severity score, an attacker could exploit it to remotely execute code https://blog.talosintelligence.com/exploiting-low-severity-vulnerability-using-a-frame-pointer-overwrite/

video/mp4

TalosSecurity, to random
@TalosSecurity@mstdn.social avatar

Meet Talos' latest open-source project, Badgerboard: A new proof-of-concept tool designed to expose previously inaccessible backplane traffic and allow OT network operators to better understand the current state of their network. http://cs.co/6016XoU1k

TalosSecurity, to random
@TalosSecurity@mstdn.social avatar

The group recently added new tools to its arsenal, and we're seeing them target organizations all over the globe (though mainly in the education and tech sectors) https://blog.talosintelligence.com/ghostsec-ghostlocker2-ransomware/

TalosSecurity, to Mexico
@TalosSecurity@mstdn.social avatar

The new campaign is targeting users in with tax-related lures and phishing emails https://blog.talosintelligence.com/timbrestealer-campaign-targets-mexican-users/

TalosSecurity, to random
@TalosSecurity@mstdn.social avatar

We released more details this morning on the activity we're actively tracking, including new information about its command and control and various payloads https://blog.talosintelligence.com/tinyturla-ng-tooling-and-c2/

video/mp4

TalosSecurity, to random
@TalosSecurity@mstdn.social avatar

CVSS 4.0 will add new context around how attackers try to exploit vulnerabilities, but it doesn't solve all the issues with a single scoring system for vulnerability severity. More on the Talos blog: https://blog.talosintelligence.com/how-cvss-4-0-changes-vulnerability-severity/

TalosSecurity, to random
@TalosSecurity@mstdn.social avatar

The next generation of is here, in the form of a new "last chance" backdoor https://blog.talosintelligence.com/tinyturla-next-generation/

video/mp4

TalosSecurity, to random
@TalosSecurity@mstdn.social avatar

We're releasing new details about a recently discovered backdoor called "Zardoor" that appears to be operated by a previously undiscovered actor https://blog.talosintelligence.com/new-zardoor-backdoor/

TalosSecurity, to random
@TalosSecurity@mstdn.social avatar

Why is the use of stolen credentials more pervasive now than ever? https://blog.talosintelligence.com/how-are-user-credentials-stolen-and-used-by-threat-actors/

video/mp4

TalosSecurity, to random
@TalosSecurity@mstdn.social avatar

We have a new Vulnerability Deep Dive showing how an attacker could chain together several low-severity vulnerabilities in Open Automation System's engine to gain elevated privileges on a targeted device https://blog.talosintelligence.com/oas-engine-deep-dive/

video/mp4

TalosSecurity, to random
@TalosSecurity@mstdn.social avatar

and pre-ransomware activities were the most commonly seen threat Talos IR saw in engagements last quarter. Find out more about what we saw in the field to close out 2023 here https://blog.talosintelligence.com/talos-ir-quarterly-report-q4-2023/

TalosSecurity, to windows
@TalosSecurity@mstdn.social avatar

We're launching a new series of "how to" blog posts on analyzing malicious drivers, and our first entry covers the basics of how drivers work, how they fit into I/O environments, and why attackers are leveraging them https://blog.talosintelligence.com/exploring-malicious-windows-drivers-part-1-introduction-to-the-kernel-and-driv

TalosSecurity, to random
@TalosSecurity@mstdn.social avatar

Get caught up on all the security issues our vulnerability research team has helped disclose since the start of the new year, including multiple remote code execution vulnerabilities https://blog.talosintelligence.com/vulnerability-roundup-jan-17-2024/

video/mp4

TalosSecurity, to random
@TalosSecurity@mstdn.social avatar

Thanks to our partners at Avast and the Dutch Prosecution Office, we were able to help release a new version of the decryptor for . Additionally, Dutch police used our research to track down and charge one of the operators behind this ransomware. https://blog.talosintelligence.com/decryptor-babuk-tortilla/

TalosSecurity, to random
@TalosSecurity@mstdn.social avatar

Our coverage of is up now, including four critical vulnerabilities in what's a relatively light round of vulns https://blog.talosintelligence.com/microsoft-patch-tuesday-december-2023/

video/mp4

TalosSecurity, to random
@TalosSecurity@mstdn.social avatar

is back again, this time with "Operation Blacksmith," a Telegram-based malware that indicates a definitive shift in the tactics of the North Korean APT http://cs.co/6013ROH7F

TalosSecurity, to random
@TalosSecurity@mstdn.social avatar

Our 2023 Year in Review report is out today! Check out our never-before-seen data on attacker trends, the most popular malware of the past year, and breakdowns on specific state-sponsored actors http://cs.co/6017RyREP

TalosSecurity, to random
@TalosSecurity@mstdn.social avatar

Get caught up on the vulnerabilities you need to know about that our research team has discovered — from code execution in a PDF reader and a function of that is vulnerable to a man-in-the-middle attack https://blog.talosintelligence.com/vulnerability-roundup-dec-6-2023/

video/mp4

  • All
  • Subscribed
  • Moderated
  • Favorites
  • provamag3
  • magazineikmin
  • Youngstown
  • osvaldo12
  • khanakhh
  • slotface
  • tacticalgear
  • InstantRegret
  • ngwrru68w68
  • kavyap
  • DreamBathrooms
  • thenastyranch
  • everett
  • rosin
  • JUstTest
  • Durango
  • GTA5RPClips
  • ethstaker
  • modclub
  • mdbf
  • cisconetworking
  • Leos
  • normalnudes
  • cubers
  • megavids
  • tester
  • anitta
  • lostlight
  • All magazines