The Earth is speeding up, leap seconds are being abolished, oh, and there's critical vulnerabilities in PHP. In this week’s Threat Source, Hazel Burton mourns what she could have done with that extra second: cs.co/6016BHZllK

Cisco Talos is aware of eight compromised intermediate certificates belonging to the intermediate certificate authority, eMudhra blog.talosintelligence.com/c…

Watch now: Two critical vulnerabilities in PHP core could affect a wide range of websites and applications. Talos’ Nick Biasini explains what the vulnerabilities allow adversaries to do, how to assess your exposure, and what defenders should prioritize. cs.co/9006BHX6OC

Two critical remote code execution vulnerabilities in PHP core could have implications across its wider ecosystem. Talos has published a blog to explain what we know so far, and details the Snort coverage available, including rules in the Community Ruleset blog.talosintelligence.com/t…

Make an attacker to regret ever stepping foot in your environment. Craig Jackson joins the show to convince you to double down on segmentation, and discuss the newest industry buzz: AI kill switches. cs.co/6016BHJtfQ

Cisco Talos will never ask you for bitcoin, payment for services, passwords, or any other personal information. If you receive a suspicious request, do not reply, click on any links or open attachments.

More vulnerabilities. More patches. Still only so many hours in the day. With AI accelerating vulnerability discovery, our latest blog examines the pressure that puts on disclosure, patching cycles, and defense. cs.co/6012BHpXZY

Why wait for an attack to hit your team when you can trip up adversaries early in the game? Learn how Martin uses creative deceptions, like fake employee profiles and honeypots, to gain the upper hand: cs.co/6011BGtvSd

Is the cybersecurity world really facing a "Bugmageddon?" Thor breaks down the latest CVE and KEV trends in this week’s Threat Source newsletter: cs.co/6016BHGfsA

Azim and Nick join Hazel and Dave this week to discuss the fine art of frustrating adversaries, from ransomware-group paranoia to deception that wastes their time and gives defenders a chance to spot their activity: cs.co/6018BHJKm4

How can you force an attacker into a no-win situation? According to Ryan, by focusing your detections on their unavoidable objectives instead of their constantly changing tools: cs.co/6010BGtvjj

When threat actors leave the door open, we gain a front-row seat to their operations. Talos and Recorded Future tracked the UAT-6275 group’s evolving tactics across the CIS by analyzing their own exposed infrastructure: cs.co/6018BHGtXC

It’s time for a Talos TL;DR: What do you do with systems that just can't be patched? cs.co/6016BG71uE

Cisco Talos’ Vulnerability Discovery & Research team recently disclosed vulnerabilities in Adobe, Apple, Foxit Reader, and Microsoft. For details, check out our blog: cs.co/6011BGNPeD

How can you create more friction and risk for an AI-powered adversary? David has some great advice in our Cybersecurity Awareness Month blog, "The Art of Frustrating the Adversary": cs.co/6012BGtvJm

Join us in welcoming Pierre Cadieux to the Threat Source newsletter team! In his debut, Pierre shares a lesson from his 20 years in the trenches on how to keep the checks printing while managing security risks: cs.co/6013BG2NQV

Swipe through to learn Martin's Top Tips on turning your network into an adversary's nightmare from the latest Talos Takes: buzzsprout.com/2018149/episo…

How do defender LLMs react when malware tries to talk its way out of an analysis? Our latest CAIRN deep dive examines the progression of A3 anti-analysis techniques: cs.co/6016BG2s6I