Talos releases coverage for 'wormable' Microsoft vulnerability
Last night, Cisco Talos released the latest SNORT® rule update, which includes coverage for the critical Microsoft vulnerability CVE-2019-0708.The company disclosed this vulnerability last week as part...
View ArticleBeers with Talos Ep. #53: Shiny happy election security (and ninjas)
Beers with Talos (BWT) Podcast Ep. #53 is now available. Download this episode and subscribe to Beers with Talos:If iTunes and Google Play aren't your thing, click here.Recorded May 10, 2019 — Election...
View ArticleSorpresa! JasperLoader targets Italy with a new bag of tricks
Nick Biasini and Edmund Brumaghin authored this blog post.Executive summaryOver the past few months, a new malware loader called JasperLoader has emerged that targets Italy and other European countries...
View ArticleThreat Source newsletter (May 23)
Newsletter compiled by Jonathan Munshaw.Welcome to this week’s Threat Source newsletter — the perfect place to get caught up on all things Talos from the past week.Election security is a touchy — and...
View ArticleOne year later: The VPNFilter catastrophe that wasn't
Cisco Talos first disclosed the existence of VPNFilter on May 23, 2018. The malware made headlines across the globe, as it was a sophisticated piece of malware developed by a nation state, infecting...
View ArticleThreat Roundup for May 17 to May 24
Today, Talos is publishing a glimpse into the most prevalent threats we've observed between May 17 and May 24. As with previous roundups, this post isn't meant to be an in-depth analysis. Instead, this...
View ArticleBeers with Talos Ep. #54: Patch after listening, RDP and wild 0-days
Beers with Talos (BWT) Podcast Ep. #54 is now available. Download this episode and subscribe to Beers with Talos:If iTunes and Google Play aren't your thing, click here.Recorded May 24, 2019 — There is...
View Article10 years of virtual dynamite: A high-level retrospective of ATM malware
Executive summaryIt has been 10 years since the discovery of Skimer, first malware specifically designed to attack automated teller machines (ATMs). At the time, the learning curve for understanding...
View ArticleThreat Source newsletter (May 30)
Newsletter compiled by Jonathan Munshaw.Welcome to this week’s Threat Source newsletter — the perfect place to get caught up on all things Talos from the past week.Did you update all of your Microsoft...
View ArticleThreat Roundup for May 24 to May 31
Today, Talos is publishing a glimpse into the most prevalent threats we've observed between May 24 and May 31. As with previous roundups, this post isn't meant to be an in-depth analysis. Instead, this...
View ArticleUsing Firepower to defend against encrypted RDP attacks like BlueKeep
This blog was authored by Brandon StultzMicrosoft recently released fixes for a critical pre-authentication remote code execution vulnerability in Remote Desktop Protocol Servierces (RDP). Identified...
View ArticleIt's alive: Threat actors cobble together open-source pieces into monstrous...
This blog was authored by Danny Adamitis, David Maynor and Kendall McKay.Executive summaryCisco Talos recently identified a series of documents that we believe are part of a coordinated series of cyber...
View ArticleThreat Source newsletter (June 6)
Newsletter compiled by Jonathan Munshaw.Welcome to this week’s Threat Source newsletter — the perfect place to get caught up on all things Talos from the past week.We hope to see everyone this weekend...
View ArticleThreat Roundup for May 31 to June 7
Today, Talos is publishing a glimpse into the most prevalent threats we've observed between May 31 and June 07. As with previous roundups, this post isn't meant to be an in-depth analysis. Instead,...
View ArticleKnow before you go: Talos Threat Research Summit
We are now just 48 hours away from the second annual Talos Threat Research Summit. After last year's success in Orlando, we are back and better than ever from San Diego on Sunday.If you plan on...
View ArticleThe sights and sounds from the Talos Threat Research Summit
More than 250 threat hunters, network defenders and analysts gathered ahead of Cisco Live for the second annual Talos Threat Research Summit on Sunday.The conference by defenders, for defenders,...
View ArticleVulnerability Spotlight: Multiple vulnerabilities in Schneider Electric...
Jared Rittle of Cisco Talos discovered these vulnerabilities.Executive summaryThere are several vulnerabilities in the Schneider Electric Modicon M580 that could lead to a variety of conditions,...
View ArticleHow Cisco Talos helped Howard County recover from a call center attack
On Aug. 11, 2018 the 911 non-emergency call center in Howard County, Maryland was in crisis — not for the types of calls flooding into dispatchers, but simply for the sheer numbers. The center, which...
View ArticleMicrosoft Patch Tuesday — June 2019: Vulnerability disclosures and Snort...
Microsoft released its monthly security update today, disclosing a variety of vulnerabilities in several of its products. The latest Patch Tuesday covers 88 vulnerabilities, 18 of which are rated...
View ArticleThreat Roundup for June 7 to June 14
Today, Talos is publishing a glimpse into the most prevalent threats we've observed between June 07 and June 14. As with previous roundups, this post isn't meant to be an in-depth analysis. Instead,...
View Article