Cisco Talos defends Cisco customers with trusted global cybersecurity intelligence. Support requests: https://xitter.cf/t.co/LGrHyYbolX
Joined December 2008
- Tweets9.5K
- Following159
- Followers49.5K
- Likes1.2K
From discussing PHP2Shell to putting David Bianco, Pyramid of Pain creator, to work helping Hazel hack a fictional smart toilet company, this week’s Beers with Talos is a wild ride from start to finish: cs.co/6016BH9MKe
Want to keep attackers guessing? Nick suggests using deception and AI tarpits to slow down adversaries and turn your network into a maze they can’t navigate: cs.co/6014BH9Mnk
Cisco Talos Intelligence Group retweeted
Make an attacker to regret ever stepping foot in your environment. Craig Jackson joins the show to convince you to double down on segmentation, and discuss the newest industry buzz: AI kill switches. cs.co/6016BHJtfQ
Join us for the latest episode of Humans of Talos as security researcher and CAIRN creator Ryan Fetterman shares his journey into threat hunting and why a blue collar approach is important for today’s defenders: cs.co/6017BGUA4v
Cisco Talos Intelligence Group retweeted
Great work by the @TalosSecurity team getting this out quickly! If anything in your business runs on PHP, this is critical info and requires every company to move quickly. The old habit of baking patches into the next general purpose release isn't going to survive the AI era.
Two critical remote code execution vulnerabilities in PHP core could have implications across its wider ecosystem. Talos has published a blog to explain what we know so far, and details the Snort coverage available, including rules in the Community Ruleset blog.talosintelligence.com/t…
Adversaries are turning the tools businesses trust into delivery mechanisms for malicious activity. Talos observed abuse of more than 25 legitimate collaboration, file-sharing, payment, and other business platforms over the past year: cs.co/6013BH9JDF
Read the Talos advisory for the latest guidance and free Snort Community Rules blog.talosintelligence.com/t…
Talos engineer Brandon Stultz talks about how a SnortML model, deployed months earlier, detected a novel PHP2Shell payload, without needing a model update youtu.be/TULUMTy3A7s
The Earth is speeding up, leap seconds are being abolished, oh, and there's critical vulnerabilities in PHP. In this week’s Threat Source, Hazel Burton mourns what she could have done with that extra second: cs.co/6016BHZllK
Cisco Talos is aware of eight compromised intermediate certificates belonging to the intermediate certificate authority, eMudhra blog.talosintelligence.com/c…
Watch now: Two critical vulnerabilities in PHP core could affect a wide range of websites and applications. Talos’ Nick Biasini explains what the vulnerabilities allow adversaries to do, how to assess your exposure, and what defenders should prioritize. cs.co/9006BHX6OC
Two critical remote code execution vulnerabilities in PHP core could have implications across its wider ecosystem. Talos has published a blog to explain what we know so far, and details the Snort coverage available, including rules in the Community Ruleset blog.talosintelligence.com/t…
Make an attacker to regret ever stepping foot in your environment. Craig Jackson joins the show to convince you to double down on segmentation, and discuss the newest industry buzz: AI kill switches. cs.co/6016BHJtfQ
Cisco Talos will never ask you for bitcoin, payment for services, passwords, or any other personal information. If you receive a suspicious request, do not reply, click on any links or open attachments.
More vulnerabilities. More patches. Still only so many hours in the day.
With AI accelerating vulnerability discovery, our latest blog examines the pressure that puts on disclosure, patching cycles, and defense.
cs.co/6012BHpXZY
Why wait for an attack to hit your team when you can trip up adversaries early in the game? Learn how Martin uses creative deceptions, like fake employee profiles and honeypots, to gain the upper hand: cs.co/6011BGtvSd
Cisco Talos Intelligence Group retweeted
Attackers are using #AI to move faster than ever. Defenders are putting AI to work too.
Learn how the #cybersecurity landscape is changing from Yuri Kramarz ➡️ cs.co/6016BG7eAI
#CybersecurityAwarenessMonth
Is the cybersecurity world really facing a "Bugmageddon?" Thor breaks down the latest CVE and KEV trends in this week’s Threat Source newsletter: cs.co/6016BHGfsA
Azim and Nick join Hazel and Dave this week to discuss the fine art of frustrating adversaries, from ransomware-group paranoia to deception that wastes their time and gives defenders a chance to spot their activity: cs.co/6018BHJKm4