Thorsten Rosendahl @MjolnirOperator

Our new documentary, “The Light We Keep: A Project PowerUp Story” is now available to watch! This is a human-led exploration into how we worked to find a way to stabilize Ukraine's power grid, in the face of electronic warfare. Watch the documentary here: cs.co/6013WJVCF

We caught up with Talos' Nick Biasini to ask him about the biggest shifts and trends in the threat landscape so far this year. Turns out, he has two major areas of concern: cs.co/6019m9ojL

In recent investigations, Talos Incident Response has observed the BlackByte ransomware group using techniques that depart from their established tradecraft. Read the full analysis in our latest blog: cs.co/6018mbOmg

A remote code execution vulnerability with a severity score of 9.8 in TCP/IP headlines a #Microsoft #PatchTuesday with 87 CVEs. Six of these have already been exploited in the wild. Read more on our blog cs.co/6014lBq4k

An out-of-bounds read in an #NVIDIA driver and more in our latest Vulnerability Roundup, covering the latest security issues our team has uncovered and helped patch cs.co/6015cNaV5

#APT41 likely compromised #Taiwanese government-affiliated research institute with #ShadowPad and #CobaltStrike blog.talosintelligence.com/chinese-hackin…

The latest episode of The Talos Threat Perspective dives into the top adversary trends from the past quarter with experts from Talos Incident Response cs.co/6016cp1Om

While business email compromise was still one of the most prevalent threats Talos IR saw over the past quarter, the frequency of #ransomware also rose. More in our new Quarterly Trends report released this morning cs.co/6013crUML

Want to know how Talos came to be? We sat down with several of our leaders to learn firsthand about the origins of Talos and the company's keys to success in our 10 years cs.co/6017cFkel

Talos is celebrating our 10th anniversary in just a few days! And if you want to know the story of Talos, we've recapped some of the major threats, events and research that have shaped Talos into what it is today. Follow along here: cs.co/6016czXUk

While #ransomware takedowns can often lead to serious disruptions for threat actors, the ransomware-as-a-service model makes these groups more and more like hydras. More in our latest The Need to Know cs.co/6014kkqs8

We had a great first day of #CiscoLiveEMEA We'll be back at the Talos Demo tomorrow in the World of Solutions bright and early, be sure to come say hi 👋

keyboard_arrow_left Previous keyboard_arrow_right Next

Did you know that new #cybersecurity standards are coming to the #EU? In our latest entry in "The Need to Know," we cover the basics of #NIS2 and how your company can start prepping now cs.co/6013utKMX

#NorthKorea's Lazarus Group is back again, this time with two new remote access trojans. The attacker continues to use the same infrastructure, but is changing up their eventual payloads. More here: cs.co/6018PoxLp

Since the #VPNFilter malware several years ago, our vulnerability research team has looked into several popular wireless routers used in homes and small businesses. Now, we have a rundown of all the vulnerabilities we discovered as part of this research cs.co/6018PwImO

As the internet starts to pivot away from passwords as a primary login method, what might future #phishing attacks look like? Are passkeys a one-size-fits-all solution? We address this future in our latest post cs.co/6012PVMvn

Our vulnerability research team discovered 12 memory corruption vulnerabilities in MSRPC on #Apple macOS and #VMWare vCenter. We have a deep dive into how an attacker could exploit these vulnerabilities and what it says about the use of forked codebases cs.co/6012P3wLq

This is one of the largest #PatchTuesdays we've had in a while, with #Microsoft disclosing more than 130 vulnerabilities. Here's a rundown of the vulns attackers are exploiting in the wild already and others that you need to know about cs.co/6016PzFXK

We recently saw threat actors exploiting a #Windows policy loophole that allows the signing and loading of cross-signed kernel-mode drivers with older signature timestamps. #Microsoft just released an advisory on this activity, but more on our blog here: cs.co/6011PzaVd

#Spyware — and the "mercenary" groups behind these tools — is still popping up and, in some cases, growing. We have a new blog post about why these groups are dangerous and what other steps the security community should be taking to combat these threats. cs.co/6016Py6uI