GravityRAT - The Two-Year Evolution Of An APT Targeting India
This blog post is authored by Warren Mercer and Paul Rascagneres.SummaryToday, Cisco Talos is uncovering a new piece of malware, which has remained under the radar for the past two years while it...
View ArticleThreat Round Up for April 20-27
Today, Talos is publishing a glimpse into the most prevalent threats we've observed between April 20 and April 27. As with previous round-ups, this post isn't meant to be an in-depth analysis. Instead,...
View ArticleThreat Round Up for April 27 to May 04
Today, Talos is publishing a glimpse into the most prevalent threats we've observed between April 27 and May 4. As with previous roundups, this post isn't meant to be an in-depth analysis. We'll...
View ArticleVulnerability Spotlight: MySQL Multi-Master Manager Remote Command Injection...
Discovered by Matthew Van Gundy of AsigOverviewToday, Talos is releasing details of a new vulnerability within MySQL Multi-Master Manager. This is used to perform monitoring, failover and management of...
View ArticleBeers with Talos EP 28 - PT, BGP, RCEs, and an Old RAT
Beers with Talos (BWT) Podcast Episode 28 is now available. Â Download this episode and subscribe to Beers with Talos:If iTunes and Google Play aren't your thing:Â www.talosintelligence.com/podcastEP28...
View ArticleMicrosoft Patch Tuesday - May 2018
Today, Microsoft has released its monthly set of security advisories for vulnerabilities that have been identified and addressed in various products. This month's advisory release addresses 67 new...
View ArticleWipers - Destruction as a means to an end
This whitepaper post is authored by Vitor Ventura and with contributions from Martin LeeIn a digital era when everything and everyone is connected, malicious actors have the perfect space to perform...
View ArticleGandcrab Ransomware Walks its Way onto Compromised Sites
This blog post authored by Nick Biasini with contributions from Nick Lister and Christopher Marczewski.Despite the recent decline in the prevalence of ransomware in the threat landscape, Cisco Talos...
View ArticleThreat Roundup for May 04 - 11
Today, Talos is publishing a glimpse into the most prevalent threats we've observed between May 4 and May 11. As with previous round-ups, this post isn't meant to be an in-depth analysis. Instead, this...
View ArticleVulnerability Spotlight: Multiple Adobe Acrobat Reader DC Vulnerabilities
Discovered by Aleksandar Nikolic of Cisco TalosUpdate 05/15/18: The CVE for TALOS-2018-0517 has been corrected below.OverviewToday, Talos is releasing details of a new vulnerabilities within Adobe...
View ArticleTeleGrab - Grizzly Attacks on Secure Messaging
This post was written by Vitor Ventura with contributions from Azim KhodjibaevIntroductionOver the past month and a half, Talos has seen the emergence of a malware that collects cache and key files...
View ArticleBeers with Talos EP29 - This is a PSA: Stop Clicking. There is No Prince.
Beers with Talos (BWT) Podcast Episode 29 is now available. Â Download this episode and subscribe to Beers with Talos:If iTunes and Google Play aren't your thing:Â www.talosintelligence.com/podcastEP29...
View ArticleNew VPNFilter malware targets at least 500K networking devices worldwide
IntroFor several months, Talos has been working with public- and private-sector threat intelligence partners and law enforcement in researching an advanced, likely state-sponsored or state-affiliated...
View ArticleThreat Roundup for May 18-25
Welcome to Cisco Talos' weekly Threat Roundup, where we go over some of the most prevalent malware and vulnerabilities we've seen over the past week. As with previous roundups, this post isn't meant to...
View ArticleBeers with Talos EP 30 - VPNFilter, the Unfiltered Story
Beers with Talos (BWT) Podcast Episode 30 is now available. Â Download this episode and subscribe to Beers with Talos:If iTunes and Google Play aren't your thing:Â www.talosintelligence.com/podcastEP30...
View ArticleVulnerability Spotlight: Natus NeuroWorks Multiple Vulnerabilites
Vulnerabilities discovered by Cory Duplantis from TalosOverviewIn April 2018, Talos published 5 vulnerabilities in Natus NeuroWorks software. We have also identified 3 additional vulnerabilities. This...
View ArticleNavRAT Uses US-North Korea Summit As Decoy For Attacks In South Korea
This blog post is authored by Warren Mercer and Paul Rascagneres with contributions from Jungsoo An.Executive SummaryTalos has discovered a new malicious Hangul Word Processor (HWP) document targeting...
View ArticleVulnerability Spotlight: TALOS-2018-0535 - Ocularis Recorder VMS_VA Denial of...
Vulnerabilities discovered by Carlos Pacho from TalosOverviewTalos is disclosing a denial-of-service vulnerability in the Ocularis Recorder. Ocularis is a video management software (VMS) platform used...
View ArticleTalos Threat Research Summit Guide and Cisco Live Preview
The first Cisco Talos Threat Research Summit is coming up at Cisco Live! in Orlando, so we are providing a quick guide to all the activities going on at the summit and beyond. The response to the...
View ArticleVPNFilter Update - VPNFilter exploits endpoints, targets new devices
IntroductionCisco Talos, while working with our various intelligence partners, has discovered additional details regarding "VPNFilter." In the days since we first published our findings on the...
View Article