Cisco Talos defends Cisco customers with trusted global cybersecurity intelligence. Support requests: https://xitter.cf/t.co/LGrHyYbolX
Joined December 2008
- Tweets9.4K
- Following159
- Followers49.5K
- Likes1.2K
Cisco Talos Intelligence Group retweeted
Great work by the @TalosSecurity team getting this out quickly! If anything in your business runs on PHP, this is critical info and requires every company to move quickly. The old habit of baking patches into the next general purpose release isn't going to survive the AI era.
Two critical remote code execution vulnerabilities in PHP core could have implications across its wider ecosystem. Talos has published a blog to explain what we know so far, and details the Snort coverage available, including rules in the Community Ruleset blog.talosintelligence.com/t…
Adversaries are turning the tools businesses trust into delivery mechanisms for malicious activity. Talos observed abuse of more than 25 legitimate collaboration, file-sharing, payment, and other business platforms over the past year: cs.co/6013BH9JDF
Read the Talos advisory for the latest guidance and free Snort Community Rules blog.talosintelligence.com/t…
Talos engineer Brandon Stultz talks about how a SnortML model, deployed months earlier, detected a novel PHP2Shell payload, without needing a model update youtu.be/TULUMTy3A7s
The Earth is speeding up, leap seconds are being abolished, oh, and there's critical vulnerabilities in PHP. In this week’s Threat Source, Hazel Burton mourns what she could have done with that extra second: cs.co/6016BHZllK
Cisco Talos is aware of eight compromised intermediate certificates belonging to the intermediate certificate authority, eMudhra blog.talosintelligence.com/c…
Watch now: Two critical vulnerabilities in PHP core could affect a wide range of websites and applications. Talos’ Nick Biasini explains what the vulnerabilities allow adversaries to do, how to assess your exposure, and what defenders should prioritize. cs.co/9006BHX6OC
Two critical remote code execution vulnerabilities in PHP core could have implications across its wider ecosystem. Talos has published a blog to explain what we know so far, and details the Snort coverage available, including rules in the Community Ruleset blog.talosintelligence.com/t…
Make an attacker to regret ever stepping foot in your environment. Craig Jackson joins the show to convince you to double down on segmentation, and discuss the newest industry buzz: AI kill switches. cs.co/6016BHJtfQ
Cisco Talos will never ask you for bitcoin, payment for services, passwords, or any other personal information. If you receive a suspicious request, do not reply, click on any links or open attachments.
More vulnerabilities. More patches. Still only so many hours in the day.
With AI accelerating vulnerability discovery, our latest blog examines the pressure that puts on disclosure, patching cycles, and defense.
cs.co/6012BHpXZY
Why wait for an attack to hit your team when you can trip up adversaries early in the game? Learn how Martin uses creative deceptions, like fake employee profiles and honeypots, to gain the upper hand: cs.co/6011BGtvSd
Cisco Talos Intelligence Group retweeted
Attackers are using #AI to move faster than ever. Defenders are putting AI to work too.
Learn how the #cybersecurity landscape is changing from Yuri Kramarz ➡️ cs.co/6016BG7eAI
#CybersecurityAwarenessMonth
Is the cybersecurity world really facing a "Bugmageddon?" Thor breaks down the latest CVE and KEV trends in this week’s Threat Source newsletter: cs.co/6016BHGfsA
Azim and Nick join Hazel and Dave this week to discuss the fine art of frustrating adversaries, from ransomware-group paranoia to deception that wastes their time and gives defenders a chance to spot their activity: cs.co/6018BHJKm4
How can you force an attacker into a no-win situation? According to Ryan, by focusing your detections on their unavoidable objectives instead of their constantly changing tools: cs.co/6010BGtvjj
When threat actors leave the door open, we gain a front-row seat to their operations. Talos and Recorded Future tracked the UAT-6275 group’s evolving tactics across the CIS by analyzing their own exposed infrastructure: cs.co/6018BHGtXC
Cisco Talos Intelligence Group retweeted
How do you turn your network into a massive headache for attackers? Martin Lee is back on Talos Takes to explain the benefits of wasting an attacker’s time and using decoys that turn their moves into threat intel you can use: cs.co/6015BGLdjb
It’s time for a Talos TL;DR: What do you do with systems that just can't be patched? cs.co/6016BG71uE