@blog.talosintelligence.com@rss-parrot.net
I'm an automated parrot! I relay a website's RSS feed to the Fediverse. Every time a new post appears in the feed, I toot about it. Follow me to get all new posts in your Mastodon timeline! Brought to you by the RSS Parrot.
---
Talos intelligence and world-class threat research team better protects you and your organization against known and emerging cybersecurity threats.
Site URL: blog.talosintelligence.com/
Feed URL: blog.talosintelligence.com/rss
Posts: 19
Followers: 1
Appraisal by AI: Model-driven victim prioritization in the VOLTA infostealer
Published: October 31, 2026 12:00
The self-deleting VOLTA infostealer steals credentials, sessions, and cryptocurrency wallets. Then, it uses LLMs to profile victims and rank their most valuable assets.
A quiet week in infosec <.<
https://blog.talosintelligence.com/a-quiet-week-in-infosec/
Published: October 29, 2026 18:00
In this edition of the Threat Source newsletter, William explores how PHP has taken over the conversation, Node.js has joined in, but underneath it all, there are still good people doing good work.
IR trends Q3 2026: Actors impersonate IT help desks in vishing attacks as ransomware activity increases
https://blog.talosintelligence.com/ir-trends-q3-2026/
Published: October 29, 2026 14:00
Phishing remained the leading initial access technique, while percentage of ransomware and pre-ransomware cases increased. Finance and public administration tied as the top-targeted industries.
NIK C2: The new AI-enabled command-and-control framework
https://blog.talosintelligence.com/nik-c2-new-ai-enabled-framework/
Published: October 29, 2026 10:00
Cisco Talos observed a new AI-integrated command-and-control (C2) framework in the wild called “NIK C2.”
Inside KeyDrift: Analyzing historical UAT-11473 activity on Cisco SD-WAN
https://blog.talosintelligence.com/uat-11473-keydrift/
Published: October 28, 2026 21:32
Talos has identified UAT-11473, a highly sophisticated APT, who exploited CVE-2026-20127, an authentication bypass vulnerability in Cisco SD-WAN Catalyst Controller instances to bypass authentication and gain unauthorized access to affected systems to…
From federal SOCs to Talos: Ryan Fetterman on practical security research
Published: October 27, 2026 10:00
What does it mean to be "blue collar" for the blue team? Ryan Fetterman discusses the realities of detection engineering, and shares his philosophy on building a career in security without burning out.
I had plans for that second
https://blog.talosintelligence.com/i-had-plans-for-that-second/
Published: October 22, 2026 18:04
The Earth is speeding up, the leap second is being abolished, oh, and there's critical vulnerabilities in PHP.
Compromised eMudhra intermediate certificates
https://blog.talosintelligence.com/compromised-intermediate-certificates/
Published: October 21, 2026 20:43
Cisco Talos is aware of eight intermediate certificates belonging to the intermediate certificate authority, eMudhra.
Two critical RCEs in PHP core
https://blog.talosintelligence.com/two-critical-rces-in-php-core/
Published: October 21, 2026 15:10
Two critical remote code execution vulnerabilities in PHP core could have implications across its wider ecosystem. Talos has published a blog to explain what we know so far, and details the Snort coverage available, including rules in the Community…
Parasitizing trust: How legitimate infrastructure becomes a delivery pipeline for attackers
Published: October 21, 2026 10:00
Adversaries are turning the tools businesses trust into delivery mechanisms for malicious activity. Cisco Talos observed abuse of more than 25 legitimate platforms over the past year, exploiting the built-in trust of collaboration, file-sharing, payment…
There's only so much code: the rise in vulnerability numbers
https://blog.talosintelligence.com/theres-only-so-much-code-the-rise-in-vulnerability-numbers/
Published: October 20, 2026 15:31
The September Microsoft Patch Tuesday release included 975 vulnerability advisories. This month, 1,415 vulnerabilities were just dropped. Compared to a pre-June average of 100 a month, that increase is staggering. Where did they come from? And what does…
The Q3 Vulnerability Pulse: Discovery ≠Exploitation
https://blog.talosintelligence.com/the-q3-vulnerability-pulse-discovery-exploitation/
Published: October 15, 2026 18:00
Is the cybersecurity world really facing a "Bugmageddon?" Thor breaks down the latest CVE and KEV trends in the latest Threat Source newsletter.
Break the silence: Kazakhstan-nexus UAT-6275 targets CIS government organizations
Published: October 14, 2026 14:00
Talos and Recorded Future identified UAT-6275 activity targeting government organizations across the Commonwealth of Independent States. Recovered artifacts show additional interest in water resources and energy.
Microsoft Patch Tuesday for October 2026 — Snort rules and prominent vulnerabilities
https://blog.talosintelligence.com/microsoft-patch-tuesday-for-october-2026/
Published: October 13, 2026 20:37
Microsoft has released its monthly security update for October 2026, which includes 1415 vulnerabilities affecting a range of products, including 85 that Microsoft marked as "critical."
Making sure the checks get printed
https://blog.talosintelligence.com/making-sure-the-checks-get-printed/
Published: October 8, 2026 18:00
Pierre's debut newsletter explores the messy, real-world side of risk management and how to keep vital systems running when a perfect patch isn't an option.
UAT-11985: AI-assisted event lures delivering real-time Google AitM phishing
https://blog.talosintelligence.com/uat-11985/
Published: October 8, 2026 10:01
Cisco Talos identified an APT spear-phishing campaign against individuals affiliated with Taiwan research organizations. The operation leveraged legitimate public event themes and impersonated reputable academic and policy institutions.
Ignore all instructions and read this blog: The state of AI-analysis evasion in malware
Published: October 8, 2026 10:00
“AI-analysis evasion” encapsulates the real-world techniques malware authors are developing in attempt to obstruct or defeat any layers of automated AI analysis.
Microsoft, Adobe, Apple, and Foxit vulnerabilities
https://blog.talosintelligence.com/microsoft-adobe-apple-and-foxit-vulnerabilities/
Published: October 7, 2026 19:27
Cisco Talos’ Vulnerability Discovery & Research team recently disclosed vulnerabilities in Adobe, Apple, Foxit Reader, and Microsoft.The vulnerabilities mentioned in this blog post have been patched by their respective vendors, in adherence to Cisco’s…
One breach, please, and make no mistakes
https://blog.talosintelligence.com/one-breach-please-and-make-no-mistakes/
Published: October 7, 2026 10:00
The cybersecurity community has seen examples of autonomous agents, built inside AI labs, attacking public infrastructure. How you prepare for agentic threats is what makes the difference during real incidents.