Talos Takes Ep. #66: Dude, where's my bandwidth?
By Jon Munshaw. The latest episode of Talos Takes is available now. Download this episode and subscribe to Talos Takes using the buttons below, or visit the Talos Takes page. “Proxyware” sounds like a...
View ArticleThreat Roundup for August 27 to September 3
Today, Talos is publishing a glimpse into the most prevalent threats we've observed between Aug. 27 and Sept. 3. As with previous roundups, this post isn't meant to be an in-depth analysis. Instead,...
View ArticleVulnerability Spotlight: Heap buffer overflow vulnerability in Ribbonsoft...
Lilith >_> of Cisco Talos discovered this vulnerability. Blog by Jon Munshaw. Cisco Talos recently discovered an exploitable heap-based buffer overflow vulnerability in Ribbonsoft’s dxflib...
View ArticleTalos release protection against zero-day vulnerability in Microsoft MSHTML
Cisco Talos released new SNORT® rules Thursday to protect against the exploitation of a zero-day vulnerability in Microsoft MSHTML that the company warns is being actively exploited in the wild. Users...
View ArticleThreat Source newsletter (Sept. 9, 2021)
Newsletter compiled by Jon Munshaw.Good afternoon, Talos readers. The biggest security news this week is no doubt another Microsoft zero-day. On the heels of PrintNightmare and multiple Exchange...
View ArticleTalos Takes Ep. #67: What a leaked playbook tells us about the Conti...
By Jon Munshaw. The latest episode of Talos Takes is available now. Download this episode and subscribe to Talos Takes using the buttons below, or visit the Talos Takes page. There's a lot to take...
View ArticleThreat Roundup for September 3 to September 10
Today, Talos is publishing a glimpse into the most prevalent threats we've observed between Sept. 3 and Sept. 10. As with previous roundups, this post isn't meant to be an in-depth analysis. Instead,...
View ArticleVulnerability Spotlight: Code execution vulnerability in Nitro Pro PDF
A Cisco Talos team member discovered these vulnerabilities. Blog by Jon Munshaw. Cisco Talos recently discovered a vulnerability in the Nitro Pro PDF reader that could allow an attacker to execute...
View ArticleDowntime on Talos Intelligence
TalosIntelligence.com will be down for a short time on Sept. 17 around 10 a.m. while we perform some routine maintenance on the site. We apologize for any inconvenience this may cause. We expect the...
View ArticleMicrosoft Patch Tuesday for Sept. 2021 — Snort rules and prominent...
By Jon Munshaw, with contributions from Holger Unterbrink. Microsoft released its monthly security update Tuesday, disclosing 85 vulnerabilities across the company’s firmware and software. This...
View ArticleOperation Layover: How we tracked an attack on the aviation industry to five...
By Tiago Pereira and Vitor Ventura. Cisco Talos linked the recent aviation targeting campaigns to an actor who has been targeting the aviation industry for two years.The same actor has been running...
View ArticleThreat Source newsletter (Sept. 16, 2021)
Newsletter compiled by Jon Munshaw.Good afternoon, Talos readers. It's a bird, it's a plane, it's a rat! We've been tracking a series of trojans targeting the aviation industry, and trying to lure...
View ArticleTalos Takes Ep. #68: The various pivots and pitfalls in a malware investigation
By Jon Munshaw. The latest episode of Talos Takes is available now. Download this episode and subscribe to Talos Takes using the buttons below, or visit the Talos Takes page. On this week's episode,...
View ArticleThreat Roundup for September 10 to September 17
Today, Talos is publishing a glimpse into the most prevalent threats we've observed between Sept. 10 and Sept. 17. As with previous roundups, this post isn't meant to be an in-depth analysis. Instead,...
View ArticleTinyTurla - Turla deploys new malware to keep a secret backdoor on victim...
News summary Cisco Talos recently discovered a new backdoor used by the Russian Turla APT group.We have seen infections in the U.S., Germany and, more recently, in Afghanistan. It is likely used as a...
View ArticleOperation “Armor Piercer:” Targeted attacks in the Indian subcontinent using...
By Asheer Malhotra, Vanja Svajcer and Justin Thattil. Cisco Talos is tracking a campaign targeting government personnel in India using themes and tactics similar to APT36 (aka Mythic Leopard and...
View ArticleVulnerability Spotlight: Information disclosure vulnerability in D-LINK...
Dave McDaniel of Cisco Talos discovered this vulnerability. Blog by Jon Munshaw. Cisco Talos recently discovered an exploitable information disclosure vulnerability in the D-LINK DIR-3040 smart WiFi...
View ArticleThreat Source newsletter (Sept. 23, 2021)
Newsletter compiled by Jon Munshaw.Good afternoon, Talos readers. The Russian APT Turla is one of the most notorious threat actors out there today. And they aren't stopping, recently adding a new...
View ArticleTalos Takes Ep. #69: Our armadillo in shining armor
By Jon Munshaw. The latest episode of Talos Takes is available now. Download this episode and subscribe to Talos Takes using the buttons below, or visit the Talos Takes page. We also preach the...
View ArticleThreat Roundup for September 17 to September 24
Today, Talos is publishing a glimpse into the most prevalent threats we've observed between Sept. 17 and Sept. 24. As with previous roundups, this post isn't meant to be an in-depth analysis. Instead,...
View Article