Beers with Talos EP 18: Kitties in My Blockchain, Obfuscating Pronunciations,...
Beers with Talos (BWT) Podcast Episode 18 is now available. Download this episode and subscribe to Beers with Talos:If iTunes and Google Play aren't your thing: www.talosintelligence.com/podcastEP18...
View ArticleVirus Bulletin Publication And Presentation
Virus Bulletin conference is a well regarded intimate technical conference focused on malware research. It provides a good balance between listening to technical talks and spending time exchanging...
View ArticleVulnerability Spotlight: VMWare VNC Vulnerabilities
Today, Talos is disclosing a pair of vulnerabilities in the VNC implementation used in VMWare's products that could result in code execution. VMWare implements VNC for its remote management, remote...
View ArticleBeers with Talos EP 19: The "Best" of BWT
Beers with Talos (BWT) Podcast Episode 19 is now available. Download this episode and subscribe to Beers with Talos:If iTunes and Google Play aren't your thing: www.talosintelligence.com/podcastEP19...
View ArticleTutorial: Mutiny Fuzzing Framework and Decept Proxy
Here's a basic demo video for our new opensource tools, Decept and Mutiny. Happy New Year <(^_^)> ~ LilithRecently, Talos released new tools to assist in the monumental task of finding...
View ArticleNot So Crystal Clear - Zeus Variant Spoils Ukrainian Holiday
This post was authored by Edmund Brumaghin with contributions from Ben Baker, Dave Maynor and Matthew Molyett.Introduction Talos has observed a cyber attack which was launched using the official...
View ArticleThreat Round Up for December 29 - January 5
Today, Talos is publishing a glimpse into the most prevalent threats we've observed between December 29 and January 05. As with previous round-ups, this post isn't meant to be an in-depth analysis....
View ArticleMeltdown and Spectre
Cisco Talos is aware of three new vulnerabilities impacting Intel, AMD, Qualcomm and ARM processors used by almost all computers. We are investigating these issues and although we have not observed...
View ArticleVulnerability Spotlight: Multiple Vulnerabilities in the CPP and Parity...
Vulnerabilities discovered by Marcin Noga of Cisco Talos.OverviewTalos is disclosing the presence of multiple vulnerabilities in the CPP and the Parity Ethereum clients.TALOS-2017-0503 / CVE-2017-14457...
View ArticleMicrosoft Patch Tuesday - January 2018
Today Microsoft has released its monthly set of security advisories for vulnerabilities that have been identified and addressed in various products. This month's advisory release addresses 56 new...
View ArticleVulnerability Spotlight: Ruby Rails Gem XSS Vulnerabilities
Vulnerabilities discovered by Zachary Sanchez of Cisco ASIGOverviewTalos has discovered two XSS vulnerabilities in Ruby Rails Gems. Rails is a Ruby framework designed to create web services or web...
View ArticleVulnerability Spotlight: Multiple Unpatched Vulnerabilities in Blender...
Technology has evolved in incredible ways that has helped people to create and visualize media like never before. Today, people can use tools such as Blender to visualize, model, and animate 3D...
View ArticleThreat Round Up for January 5 - 12
Today, Talos is publishing a glimpse into the most prevalent threats we've observed between January 05 and January 12. As with previous round-ups, this post isn't meant to be an in-depth analysis....
View ArticleKorea In The Crosshairs
This blog post is authored by Warren Mercer and Paul Rascagneres and with contributions from Jungsoo An.A one year review of campaigns performed by an actor with multiple campaigns mainly linked to...
View ArticleVulnerability Spotlight: Tinysvcmdns Multi-label DNS DoS Vulnerability
OverviewTalos is disclosing a single NULL pointer dereference vulnerability in the tinysvcmdns library. Tinysvcmdns is a tiny MDNS responder implementation for publishing services. This is essentially...
View ArticleBeers with Talos EP20: Crypto, Vuln Disco, and the Spectre Meltdown
Beers with Talos (BWT) Podcast Episode 20 is now available. Download this episode and subscribe to Beers with Talos:If iTunes and Google Play aren't your thing: www.talosintelligence.com/podcastEP20...
View ArticleThe Many Tentacles of the Necurs Botnet
This post was written by Jaeson Schultz.IntroductionOver the past five years the Necurs botnet has established itself as the largest purveyor of spam worldwide. Necurs is responsible for emailing...
View ArticleSamSam - The Evolution Continues Netting Over $325,000 in 4 Weeks
This post was written by Vitor VenturaIntroductionTalos has been working in conjunction with Cisco IR Services on what we believe to be a new variant of the SamSam ransomware. This ransomware has been...
View ArticleVulnerability Spotlight: Walt Disney Per-Face Texture Mapping faceInfoSize...
This vulnerability was discovered by Tyler Bohan of Cisco Talos.Executive SummaryWalt Disney PTEX is an open source software application maintained by Walt Disney Animation Studios. It is designed for...
View ArticleBeers with Talos EP 21: How to Hire the Best, Attribution Without Apaches is...
Beers with Talos (BWT) Podcast Episode 21 is now available. Download this episode and subscribe to Beers with Talos:If iTunes and Google Play aren't your thing: www.talosintelligence.com/podcastEP21...
View Article