Cisco Talos Honeypot Analysis Reveals Rise in Attacks on Elasticsearch Clusters
Christopher Evans of Cisco Talos conducted the research for this post.Executive SummaryCisco Talos warns users that they need to keep a close eye on unsecured Elasticsearch clusters. We have recently...
View ArticleVulnerability Spotlight: Remote code execution vulnerability in Antenna House...
Emmanuel Tacheau of Cisco Talos discovered this vulnerability.Executive summaryAntenna House Rainbow PDF Office Server Document Converter contains a heap overflow vulnerability that could allow an...
View ArticleCyber Security Week in Review (March 1)
Welcome to this week's Cyber Security Week in Review, where Cisco Talos runs down all of the news we think you need to know in the security world. For more news delivered to your inbox every week, sign...
View ArticleThreat Roundup for Feb. 22 to March 1
Today, Talos is publishing a glimpse into the most prevalent threats we've observed between Feb. 22 and March 01. As with previous roundups, this post isn't meant to be an in-depth analysis. Instead,...
View ArticleBeers with Talos Ep. #48: Loaders or trojans, plus an RSA preview
Beers with Talos (BWT) Podcast Ep. #48 is now available. Download this episode and subscribe to Beers with Talos:If iTunes and Google Play aren't your thing, click here.March 1, 2019 - This is a super...
View ArticleCisco, Talos tout importance of IoT security at RSA keynote
Matt Watchinski, the vice president of Cisco Talos, delivers a keynote address at the RSA Conference in San Francisco on Tuesday.By Jonathan Munshaw of Cisco Talos and Liza Meak of The Network, Cisco’s...
View ArticleVulnerability Spotlight: Multiple local vulnerabilities in Pixar Renderman
Tyler Bohan of Cisco Talos discovered these vulnerabilities.Executive summaryThe MacOS version of Pixar Renderman contains three local vulnerabilities in its install helper tool. An attacker could...
View ArticleCyber Security Week in Review (March 8)
Welcome to this week's Cyber Security Week in Review, where Cisco Talos runs down all of the news we think you need to know in the security world. For more news delivered to your inbox every week, sign...
View ArticleThreat Roundup for Mar. 1 to Mar. 8
Today, Talos is publishing a glimpse into the most prevalent threats we've observed between March 1 8. As with previous roundups, this post isn't meant to be an in-depth analysis. Instead, this post...
View ArticleThe sights and sounds of Cisco Talos at RSA 2019
An estimated 45,000 people attended this year’s RSA Conference in San Francisco to hear talks from some of the greatest minds in security.As always, Cisco and Talos had a massive presence at the...
View ArticleVulnerability Spotlight: Privilege escalation bug in CleanMyMac X's helper...
Tyler Bohan of Cisco Talos discovered this vulnerability.Executive summaryCleanMyMac X contains a privilege escalation vulnerability in its helper service due to improper updating. The application...
View ArticleMicrosoft Patch Tuesday — March 2019: Vulnerability disclosures and Snort...
Microsoft released its monthly security update today, disclosing a variety of vulnerabilities in several of its products. The latest Patch Tuesday covers 64 vulnerabilities, 17 of which are rated...
View ArticleGlitchPOS: New PoS malware for sale
Warren Mercer and Paul Rascagneres authored this post with contributions from Ben Baker.Executive summaryPoint-of-sale malware is popular among attackers, as it usually leads to them obtaining credit...
View ArticleCyber Security Week in Review (March 15)
Welcome to this week's Cyber Security Week in Review, where Cisco Talos runs down all of the news we think you need to know in the security world. For more news delivered to your inbox every week, sign...
View ArticleThreat Roundup for March 8 to March 15
Today, Talos is publishing a glimpse into the most prevalent threats we've observed between March 08 and March 15. As with previous roundups, this post isn't meant to be an in-depth analysis. Instead,...
View ArticleIPv6 unmasking via UPnP
Martin Zeiser and Aleksandar Nikolich authored this post.Executive summaryWith tools such as ZMap and Masscan and general higher bandwidth availability, exhaustive internet-wide scans of full IPv4...
View ArticleVulnerability Spotlight: Multiple Vulnerabilities in CUJO Smart Firewall, Das...
Claudio Bozzato of Cisco Talos discovered these vulnerabilities. Executive summaryCUJO AI produces the CUJO Smart Firewall, a device that provides protection to home networks against a myriad of...
View ArticleBeers with Talos Ep. #49: POS Malware, RSA Highlights, and SOL OpSec Fails
Beers with Talos (BWT) Podcast Ep. #49 is now available. Download this episode and subscribe to Beers with Talos:If iTunes and Google Play aren't your thing, click here.Recorded March 15, 2019. We...
View ArticleRansomware or Wiper? LockerGoga Straddles the Line
Executive SummaryRansomware attacks have been in the news with increased frequency over the past few years. This type of malware can be extremely disruptive and even cause operational impacts in...
View ArticleCyber Security Week in Review (March 22)
Welcome to this week's Cyber Security Week in Review, where Cisco Talos runs down all of the news we think you need to know in the security world. For more news delivered to your inbox every week, sign...
View Article