πŸ”’
There are new articles available, click to refresh the page.
Today β€” 3 December 2021Cisco Talos

Talos Takes Ep. #79: Emotet's back with the worst type of holiday present

3 December 2021 at 15:46
By Jon Munshaw. The latest episode of Talos Takes is available now. Download this episode and subscribe to Talos Takes using the buttons below, or visit theΒ Talos Takes page. Emotet is back, and it brought the worst possible holiday present (just in time for peak spam season, too!). We...

[[ This is only the beginning! Please visit the blog for the complete entry ]]
Yesterday β€” 2 December 2021Cisco Talos

Threat Source Newsletter (Dec. 2, 2021)

2 December 2021 at 19:00
Newsletter compiled by Jon Munshaw.Good afternoon, Talos readers.Β Β  The Thanksgiving holiday in the U.S. didn't slow us down at all, even though we were all still trying to sleep off the food coma from the long weekend. But we came back this week with lots of fun content. Cisco received...

[[ This is only the beginning! Please visit the blog for the complete entry ]]
Before yesterdayCisco Talos

Vulnerability Spotlight: Use-after-free condition in Google Chrome could lead to code execution

1 December 2021 at 13:23
Marcin Towalski of Cisco Talos discovered this vulnerability. Blog by Jon Munshaw.Β  Cisco Talos recently discovered an exploitable use-after-free vulnerability in Google Chrome.Β Β  Google Chrome is a cross-platform web browser β€” and Chromium is the open-source version of the browser...

[[ This is only the beginning! Please visit the blog for the complete entry ]]

Cisco named leader in Incident Response Services

30 November 2021 at 16:58
By Brad Garnett. It has been more than two years already since Cisco Incident Response became a part of the Talos family. Since then, my team has continued a journey to simplify our offering for consumption and make incident response the ultimate team sport.Β  That is why I could not be more...

[[ This is only the beginning! Please visit the blog for the complete entry ]]

Case Study: Catching threats ahead of time with a penetration test from the Cisco Talos Incident Response Red Team

30 November 2021 at 15:26
By Brad Garnett, Miguel Alvarez Esmoris, Terryn Valikodath and Bob Doyle.Β  As we mentioned in a previous case study, relationships are tried and tested during incident response. So, when a customer came to Cisco Talos Incident Response with concerns about their public-facing website, CTIR knew...

[[ This is only the beginning! Please visit the blog for the complete entry ]]

An Azure Sphere kernel exploit β€” or how I learned to stop worrying and love the IoT

29 November 2021 at 15:00
By Claudio Bozzato and Lilith [^.^];. As part of our continued research into Microsoft Azure Sphere, there are two vulnerabilities we discovered that we feel are particularly dangerous. For a full rundown of the 31 vulnerabilities we’ve discovered over the past year, check out our full recap...

[[ This is only the beginning! Please visit the blog for the complete entry ]]

Talos Takes Ep. #78: Attackers would love to buy you a non-existent PS5 this holiday season

24 November 2021 at 14:01
By Jon Munshaw. The latest episode of Talos Takes is available now. Download this episode and subscribe to Talos Takes using the buttons below, or visit theΒ Talos Takes page. We know this episode comes around every year, but people keep falling for scams, so we have to remind people how to...

[[ This is only the beginning! Please visit the blog for the complete entry ]]

A review of Azure Sphere vulnerabilities: Unsigned code execs, kernel bugs, escalation chains and firmware downgrades

22 November 2021 at 19:05
Summary of all the vulnerabilities reported by Cisco Talos in Microsoft Azure Sphere By Claudio Bozzato and Lilith [>_>]. In May 2020, Microsoft kicked off the Azure Sphere Security Research Challenge, a three-month initiative aimed at finding bugs in Azure Sphere. In the first three months,...

[[ This is only the beginning! Please visit the blog for the complete entry ]]

Vulnerability Spotlight: PHP deserialize vulnerability in CloudLinux Imunity360 could lead to arbitrary code execution

22 November 2021 at 17:16
Marcin β€œIcewall” Noga of Cisco Talos. Blog by Jon Munshaw.Β  Cisco Talos recently discovered a vulnerability in the Ai-Bolit functionality of CloudLinux Inc Imunify360 that could lead to arbitrary code execution.Β  Imunify360 is a security platform for web-hosting servers that allows users...

[[ This is only the beginning! Please visit the blog for the complete entry ]]

Vulnerability Spotlight: Multiple vulnerabilities in Advantech R-SeeNet

23 November 2021 at 15:45
Yuri Kramarz discovered these vulnerabilities. Blog by Jon Munshaw.Β  Cisco Talos recently discovered multiple vulnerabilities in the Advantech R-SeeNet monitoring software.Β  R-SeeNet is the software system used for monitoring Advantech routers. It continuously collects information from...

[[ This is only the beginning! Please visit the blog for the complete entry ]]

Beers with Talos, Ep. #111: We say goodbye to Craig and his killer robots

19 November 2021 at 16:45
Beers with Talos (BWT) Podcast episode No. 111 is now available. Download this episode and subscribe to Beers with Talos: Apple PodcastsΒ Β Google PodcastsΒ Β SpotifyΒ Β StitcherIf iTunes and Google Play aren't your thing, clickΒ here. We apologize for holding onto this...

[[ This is only the beginning! Please visit the blog for the complete entry ]]

Talos Takes Ep. #77: How to connect to (and safely use) public WiFi

19 November 2021 at 16:18
Β  By Jon Munshaw. The latest episode of Talos Takes is available now. Download this episode and subscribe to Talos Takes using the buttons below, or visit theΒ Talos Takes page. Whenever we walk into a bar or restaurant, it's almost a given that we're going to ask the bartender or server:...

[[ This is only the beginning! Please visit the blog for the complete entry ]]

Threat Source Newsletter (Nov. 18, 2021)

18 November 2021 at 19:00
Newsletter compiled by Jon Munshaw.Good afternoon, Talos readers.Β Β  This is our last newsletter before Thanksgiving in the U.S. next week, so now's as good of a time as any to remind you: If a deal seems too good to be true, it probably is.Β  To prep online shoppers for the upcoming...

[[ This is only the beginning! Please visit the blog for the complete entry ]]

Vulnerability Spotlight: Multiple code execution vulnerabilities in LibreCAD

17 November 2021 at 20:03
Lilith >_> of Cisco Talos discovered this vulnerability. Blog by Jon Munshaw.Β  Cisco Talos recently discovered three vulnerabilities in LibreCAD’s libdfxfw open-source library.Β  This library reads and writes .dxf and .dwg files β€” the primary file format for vector graphics in CAD...

[[ This is only the beginning! Please visit the blog for the complete entry ]]

Vulnerability Spotlight: Use-after-free vulnerability in Google Chrome could lead to code execution

18 November 2021 at 17:30
Β  Marcin Towalski of Cisco Talos discovered this vulnerability. Blog by Jon Munshaw.Β  Cisco Talos recently discovered an exploitable use-after-free vulnerability in Google Chrome.Β Β  Google Chrome is a cross-platform web browser β€” and Chromium is the open-source version of the...

[[ This is only the beginning! Please visit the blog for the complete entry ]]

Talos’ tips for staying safe while shopping online this holiday season

17 November 2021 at 14:26
By Jon Munshaw.Β  Attackers will resort to all tactics to trick users into downloading malware, handing over credit card data or completing compromising their machine.Β  No topic is off-limits, and threat actors have resorted to using everything from PlayStation 5 sales, to COVID-19 cures...

[[ This is only the beginning! Please visit the blog for the complete entry ]]

Vulnerability Spotlight: Vulnerabilities in Lantronix PremierWave 2050 could lead to code execution, file deletion

16 November 2021 at 16:20
Matt Wiseman discovered these vulnerabilities. Blog by Jon Munshaw.Β  Cisco Talos recently discovered multiple vulnerabilities in Lantronix’s PremierWave 2050, an embedded Wi-Fi module.Β  There are several vulnerabilities in PremierWave 2050’s Web Manager, a web-accessible application that...

[[ This is only the beginning! Please visit the blog for the complete entry ]]

Talos Takes Ep. #76: What is Kimsuky phishing around for?

12 November 2021 at 16:37
By Jon Munshaw. The latest episode of Talos Takes is available now. Download this episode and subscribe to Talos Takes using the buttons below, or visit theΒ Talos Takes page. Blog posts aren't just for sharing your darkest secrets from high school anymore. They're also used by attackers to...

[[ This is only the beginning! Please visit the blog for the complete entry ]]

Threat Source newsletter (Nov. 11, 2021)

11 November 2021 at 19:00
Newsletter compiled by Jon Munshaw.Good afternoon, Talos readers.Β Β  It's important to be proactive, and not reactive, with your security. It's always better to see the worst coming and block it than have to scramble to deal with the worst-case scenario in the moment. That's why it's so...

[[ This is only the beginning! Please visit the blog for the complete entry ]]
❌