Talos

October 25, 2017

GOVERNMENT

Trick-Or-Treat? As Cybersecurity Month winds down, which will your agency pick?

As Cybersecurity Awareness Month draws to a close and All Hallows’ Eve nears, it’s time for one last thought. And it is, appropriately, a dark one – the “Dark Web”. It is the graveyard of the Internet, a maze of death-filled tombs and twisted conjurings that are giving average, everyday…

October 24, 2017

THREAT RESEARCH

Threat Spotlight: Follow the Bad Rabbit

Note: This blog post discusses active research by Talos into a new threat. This information should be considered preliminary and will be updated as research continues. On October 24, 2017, Cisco Talos was alerted to a widescale ransomware campaign affecting organizations across eastern Europe and Ru…

October 13, 2017

THREAT RESEARCH

Threat Round Up for Oct 6 – Oct 13

Today, Talos is publishing a glimpse into the most prevalent threats we’ve observed between October 6 and October 13. As with previous round-ups, this post isn’t meant to be an in-depth analysis. Instead, this post will summarize the threats we’ve observed by highlighting key behav…

October 10, 2017

THREAT RESEARCH

Microsoft Patch Tuesday – October 2017

Microsoft has released its monthly set of security advisories for vulnerabilities that have been identified and addressed in various products. This month’s advisory release addresses 63 new vulnerabilities with 28 of them rated critical and 35 rated important. These vulnerabilities impact Grap…

October 10, 2017

THREAT RESEARCH

Vulnerability Spotlight: Arbitrary Code Execution Bugs in Simple DirectMedia Layer Fixed

Today, Talos is disclosing two vulnerabilities that have been identified in the Simple DirectMedia Layer library. Simple DirectMedia Layer (SDL) is a cross-platform development library designed for use in video playback software, emulators, and games by providing low level access to audio, keyboard,…

September 29, 2017

THREAT RESEARCH

Threat Round Up for Sept 22 – Sept 29

Today, Talos is publishing a glimpse into the most prevalent threats we’ve observed between September 22 and September 29. As with previous round-ups, this post isn’t meant to be an in-depth analysis. Instead, this post will summarize the threats we’ve observed by highlighting key…

September 27, 2017

SP360: SERVICE PROVIDER

Combating evolving threats with a global intelligence network

Hackers are always finding new ways to target service providers. But Cisco’s global intelligence network Talos can help protect them against the latest threats In 2015, a group of hackers known as SSHPsychos were causing trouble. They were abusing service provider resources to try and guess people’s…

September 22, 2017

SP360: SERVICE PROVIDER

Why network security is like a beehive

Effective threat protection means thinking about security before, during and after an attack Network security involves cutting edge technology. But it also follows principles that have long existed in nature. In fact, we can learn a lot about effective security by looking at the way bees defend the…

September 20, 2017

THREAT RESEARCH

CCleaner Command and Control Causes Concern

This post was authored by Edmund Brumaghin, Earl Carter, Warren Mercer, Matthew Molyett, Matthew Olney, Paul Rascagneres and Craig Williams. Note: This blog post discusses active research by Talos into a new threat. This information should be considered preliminary and will be updated as research c…