Cisco Talos defends Cisco customers with trusted global cybersecurity intelligence. Support requests: https://nitter.cf/t.co/LGrHyYbolX
Joined December 2008
- Tweets9.5K
- Following159
- Followers49.6K
- Likes1.2K
Cisco Talos Intelligence Group retweeted
Named “Volta-Autodoxer,” the recently uncovered malware uses AI tools to collect troves of data about victims, from login credentials and credit card numbers to Discord sessions and UberEats receipts. buff.ly/9yzo17l
Time for another TL;DR. Talos uncovered "NIK C2," a sophisticated new AI-integrated C2 framework that streamlines cyber attacks, from data theft to ransomware: cs.co/6017BHUYud
Sorting through mountains of stolen credentials is a major headache for attackers, so why not outsource the grunt work to AI? Talos' latest research on the VOLTA infostealer shows how it uses LLMs to profile victims and rank their most valuable assets: cs.co/6018BHo7dK
With PHP and Node.js dominating the headlines, it’s easy to get lost in the noise. William explores why, underneath the chaos, empowering your team and mastering your environment remain the most critical parts of security: cs.co/6010BHlYae
Our latest Talos IR report for Q3 2026 highlights a rise in ransomware activity and the use of vishing to impersonate IT help desks. Review the full analysis and our recommendations: cs.co/6017BHlOxS
Cisco Talos has uncovered "NIK C2," an AI-integrated command-and-control (C2) framework that facilitates data exfiltration and ransomware deployment. Read the full analysis: cs.co/6019BHls2Z
From discussing PHP2Shell to putting David Bianco, Pyramid of Pain creator, to work helping Hazel hack a fictional smart toilet company, this week’s Beers with Talos is a wild ride from start to finish: cs.co/6016BH9MKe
Want to keep attackers guessing? Nick suggests using deception and AI tarpits to slow down adversaries and turn your network into a maze they can’t navigate: cs.co/6014BH9Mnk
Cisco Talos Intelligence Group retweeted
Make an attacker to regret ever stepping foot in your environment. Craig Jackson joins the show to convince you to double down on segmentation, and discuss the newest industry buzz: AI kill switches. cs.co/6016BHJtfQ
Join us for the latest episode of Humans of Talos as security researcher and CAIRN creator Ryan Fetterman shares his journey into threat hunting and why a blue collar approach is important for today’s defenders: cs.co/6017BGUA4v
Cisco Talos Intelligence Group retweeted
Great work by the @TalosSecurity team getting this out quickly! If anything in your business runs on PHP, this is critical info and requires every company to move quickly. The old habit of baking patches into the next general purpose release isn't going to survive the AI era.
Two critical remote code execution vulnerabilities in PHP core could have implications across its wider ecosystem. Talos has published a blog to explain what we know so far, and details the Snort coverage available, including rules in the Community Ruleset blog.talosintelligence.com/t…
Adversaries are turning the tools businesses trust into delivery mechanisms for malicious activity. Talos observed abuse of more than 25 legitimate collaboration, file-sharing, payment, and other business platforms over the past year: cs.co/6013BH9JDF
Read the Talos advisory for the latest guidance and free Snort Community Rules blog.talosintelligence.com/t…
Talos engineer Brandon Stultz talks about how a SnortML model, deployed months earlier, detected a novel PHP2Shell payload, without needing a model update youtu.be/TULUMTy3A7s
The Earth is speeding up, leap seconds are being abolished, oh, and there's critical vulnerabilities in PHP. In this week’s Threat Source, Hazel Burton mourns what she could have done with that extra second: cs.co/6016BHZllK
Cisco Talos is aware of eight compromised intermediate certificates belonging to the intermediate certificate authority, eMudhra blog.talosintelligence.com/c…
Watch now: Two critical vulnerabilities in PHP core could affect a wide range of websites and applications. Talos’ Nick Biasini explains what the vulnerabilities allow adversaries to do, how to assess your exposure, and what defenders should prioritize. cs.co/9006BHX6OC
Two critical remote code execution vulnerabilities in PHP core could have implications across its wider ecosystem. Talos has published a blog to explain what we know so far, and details the Snort coverage available, including rules in the Community Ruleset blog.talosintelligence.com/t…
Make an attacker to regret ever stepping foot in your environment. Craig Jackson joins the show to convince you to double down on segmentation, and discuss the newest industry buzz: AI kill switches. cs.co/6016BHJtfQ