Publisher
Stories with reporting from Cisco Talos, ranked by what is gaining ground now. Each story links to the original articles.
Cisco TalosCisco Talos discloses vulnerabilities affecting products from Adobe, Apple, Foxit, and Microsoft. The affected vendors have patched the vulnerabilities, and the post mentions Snort coverage for detection.
Cisco TalosCisco Talos reports CLOSEDQUORUM, a malware binary discovered through its CAIRN project, that exhibits autonomous command and control. The implant can execute expanding portions of an attack chain without an operator’s involvement.
Cisco TalosCisco Talos is tracking active exploitation of two vulnerabilities in Cisco Secure Firewall Management Center Software.
Cisco TalosCisco Talos identifies UAT-11587, a cluster targeting government and policy organizations in Taiwan, India, the Philippines and Cambodia. The activity delivers a previously undocumented backdoor called Antino, named in developer artifacts.
Cisco TalosMicrosoft's September 2026 security update covers 973 vulnerabilities across its products, with 113 marked critical. The update is accompanied by Snort rules and coverage of prominent vulnerabilities.
Cisco TalosCisco Talos tracks a cryptocurrency-stealing campaign that uses the Google Visualization API for command and control. It retrieves obfuscated JavaScript from a publicly published Google Sheets document and injects the code into a victim’s browser session.
Cisco TalosRansomware incidents in Japan rise 4.7% year over year, and The Gentlemen is the most active group, with leak-site listings more than doubling from January to July. Qilin ranks second and appears to use AI, while companies with capital under JPY 1 billion account for 80% of victims.
Cisco TalosThe piece examines preparation for attacks by autonomous AI agents, noting examples of agents built inside AI labs targeting public infrastructure. It focuses on how organizations prepare for incidents involving agentic threats.
Cisco TalosTalos releases CAIRN, a research toolkit for hunting, classifying, and tracking emerging AI-integrated malware.
Cisco TalosA cryptocurrency- and credential-stealing operation uses a ClearFake WebDAV infection chain to deliver Amatera stealer, ZigCryptoStealer, and NetSupport Manager. The assessment finds the attacks are likely not aimed at a particular organization, with Amatera as the primary payload.
Cisco TalosA new Executive Threat Detection service offers dedicated, intelligence-led hunting focused on an organization's highest-value IT assets. It joins an existing suite of retainer offerings.
Cisco TalosEight Cisco Talos researchers describe tactics for making adversaries’ next actions slower and riskier. Their recommendations include deception, behavioral detection, breaking attack dependencies, and resisting manufactured urgency.
Cisco TalosThe piece recommends network segmentation, visibility, and NGFW/IPS combinations as compensating defenses for vulnerabilities that are difficult or effectively impossible to patch, including those identified by advancing AI technology.
Cisco TalosMartin reflects on a suspicious social-media approach and the role of trust in the cybersecurity community. The newsletter argues that hubris may be a vulnerability for the industry.
Cisco TalosA Threat Source discussion argues that maintaining security basics remains important amid rapid AI advances.
Cisco TalosA Threat Source newsletter discusses how the word “burnout” may not adequately describe the toll of working in cybersecurity and calls for better language to address it.
Cisco TalosAmy reflects on prioritizing family and personal well-being over pressure to remain constantly productive.