Blog

Blog Series Categories

Headlines

Breaking security news all uses should be up-to-date on, along with any other cybersecurity topics in the news.

Patch Tuesday

Talos’ recap of Microsoft’s monthly security update, including the vulnerabilities users need to patch for as soon as possible.

The Need to Know

Unsure of what certain cybersecurity topics or terms actually mean? That's what The Need to Know is for. We break down complex themes, and talk about how they sit within the threat landscape.

Talos IR trends

Each quarter, Cisco Talos Incident Response recaps the malware families and attacker tactics they observed most in the wild. Find out what your organizations can learn so you don’t end up in the same position.

Threat Advisory

Any urgent malware campaigns or security vulnerabilities that Talos is actively researching. These posts include the latest threat detection our researchers develop to address these issues.

Threat Roundup

The malware families Talos saw most in the wild over the past week, including up-to-date IOCs and Cisco Secure product coverage.

Threat Source newsletter

Talos’ weekly recap of the top cybersecurity news and our latest research. Weekly editions appear on the blog, or readers can subscribe to have the email delivered to their inbox every Thursday.

Threat Spotlight

The most notable recent cyber attacks and malware campaigns Talos is following, along with the Cisco Secure protection to keep users safe.

Vulnerability Deep Dive

A very technical breakdown about a vulnerability or set of vulnerabilities and how an attacker could string them together for a cyber attack.

Vulnerability Roundup

A recap of the security vulnerabilities Talos' research team has helped to uncover and fix, released every other week.

On The Radar

Forward-looking features on the issues and trends that Talos feels is affecting the current cybersecurity landscape.

The Deep Dive with NTDR

A closer look at how Talos' Network Threat Detection and Response team creates coverage and keeps Cisco Security customers safe.

Humans of Talos

A video interview series that shines a spotlight on team members across Talos, featuring their personal stories, career journeys and unique perspectives.

Tool Talk

In this series, Talos releases open-source tools, along with insights, tips, and enhancements to help cybersecurity researchers work smarter and more effectively.

All Categories

  • 2022YiR

  • 2023YiR

  • 2024YiR

  • 2025YiR

  • AI

  • Announcements

  • APT

  • Asylum Ambuscade

  • Beers with Talos

    Beers, threats and no silver bullets on this podcast.

  • Cisco Talos Antivirus

    Cisco Talos Antivirus, also known as ClamAV, delivers foundational malware protection through deep file analysis and industry-leading signature detection. As an open-source solution embedded across Cisco’s security, networking, and collaboration products, Talos Antivirus provides robust protection against known malware threats, making it a trusted choice for enterprises, service providers, and individuals worldwide.

  • Cisco Talos DNS Security

    Cisco Talos DNS Security protects organizations from DNS-based threats, including malware delivery, data exfiltration, DNS tunneling, command-and-control (C2) communications, and access to phishing domains, by detecting obfuscated data hidden in DNS packets. Advanced AI-driven detection, including Domain Generation Algorithm (DGA) analysis, proactively identifies and predicts malicious domains, stopping threats before they impact your organization.

  • Cisco Talos Email Filtering

    Cisco Talos Email Filtering provides reputation-verdict and categorization services in support of Cisco email security products. Multi-layered defenses protect customers from email threats, spam, and graymail. Talos Email Filtering examines URLs and file attachments contained in emails, as well as IP and Domain reputations of senders, to block malicious, unwanted, and inappropriate emails. The Talos research team has the experience of experts in over 40 languages to review and classify messages.

  • Cisco Talos Email Threat Prevention

    Cisco Talos Email Threat Prevention provides industry-leading brand impersonation, business email compromise, and phishing attack detection. Talos-built AI tools analyze anomalies and traffic trends in Cisco’s vast telemetry database to detect and prevent attackers pretending to be trusted brands (Brand Impersonation) or targeting high value employees with carefully crafted phishing attempts (Business Email Compromise). Talos blocks these customized attacks and provides detailed logs.

  • Cisco Talos Incident Response

    Cisco Talos Incident Response (Talos IR) provides proactive and emergency support, powered by Cisco Talos’ global threat intelligence. Organizations can use our flexible retainer for incident response, compromise assessments, tabletop exercises, training, and more. Whether preparing for threats or managing a crisis, Talos IR helps organizations to minimize risk, reduce downtime, and strengthen cybersecurity resilience.

  • Cisco Talos Malware Protection

    Cisco Talos Malware Protection delivers advanced protection for endpoints and systems against a wide range of malicious software. The service goes beyond traditional reputation-based blocking by leveraging behavioral analysis of the advanced telemetry and threat intelligence of Talos. This approach enables detection and prevention of both known and emerging threats, including fileless malware, memory exploits, and sophisticated attacks that evade standard defenses.

  • Cisco Talos Network Intrusion Prevention

    Cisco Talos Network Intrusion Prevention Service (Talos IPS, also known as Snort), delivers advanced, real-time network protection by monitoring and analyzing traffic at the packet level. By combining comprehensive rule-based detection with behavior-based analysis, Talos IPS identifies and blocks malicious traffic—vulnerability exploitation attempts, malware traffic, SQL injections, and reconnaissance and exfiltration traffic—all before new or emerging threats can compromise systems.

  • Cisco Talos Web Filtering

    Cisco Talos Web Filtering safeguards organizations by blocking access to malicious, risky, or inappropriate web content. Leveraging a vast database of domain, IP, and URL reputations and categories, this service enables Cisco products to proactively prevent users from visiting harmful sites and enforces acceptable use and geolocation policies. Talos leverages the power of Cisco telemetry to help organizations to protect users anywhere they access the internet.

  • Cobalt Strike

  • COVID-19

  • Cryptocurrency

  • CTIR trends

  • DPRK

  • drivers

  • Features

  • Headlines

    Breaking security news all uses should be up-to-date on, along with any other cybersecurity topics in the news.

  • Humans of Talos

    A video interview series that shines a spotlight on team members across Talos, featuring their personal stories, career journeys and unique perspectives.

  • initial access broker

  • malware

  • MFA

  • North Korea

  • On The Radar

    Forward-looking features on the issues and trends that Talos feels is affecting the current cybersecurity landscape.

  • Patch Tuesday

    Talos’ recap of Microsoft’s monthly security update, including the vulnerabilities users need to patch for as soon as possible.

  • phishing

  • ransomware

  • RAT

  • Researcher Spotlight

    A monthly recurring feature highlighting the people who truly make the Talos difference.

  • Reverse Engineering

  • Russia

  • SecureX

  • Snort

    To learn more about Snort, visit snort.org and download Snort 3 today!

  • Stealer

  • TA866

  • Talos 10

    Celebrating Talos' 10th anniversary with some of our favorite stories and memories.

  • Talos IR trends

    Each quarter, Cisco Talos Incident Response recaps the malware families and attacker tactics they observed most in the wild. Find out what your organizations can learn so you don’t end up in the same position.

  • Talos Takes

    Every week, join Talos researchers as they break down a complicated security topic for everyone from the C-suite to the frontlines in 10(ish) minutes or less.

  • The Deep Dive with NTDR

    A closer look at how Talos' Network Threat Detection and Response team creates coverage and keeps Cisco Security customers safe.

  • The Need to Know

    Unsure of what certain cybersecurity topics or terms actually mean? That's what The Need to Know is for. We break down complex themes, and talk about how they sit within the threat landscape.

  • Threat Advisory

    Any urgent malware campaigns or security vulnerabilities that Talos is actively researching. These posts include the latest threat detection our researchers develop to address these issues.

  • Threat Roundup

    The malware families Talos saw most in the wild over the past week, including up-to-date IOCs and Cisco Secure product coverage.

  • Threat Source newsletter

    Talos’ weekly recap of the top cybersecurity news and our latest research. Weekly editions appear on the blog, or readers can subscribe to have the email delivered to their inbox every Thursday.

  • Threat Spotlight

    The most notable recent cyber attacks and malware campaigns Talos is following, along with the Cisco Secure protection to keep users safe.

  • Threats

  • Tool Talk

    In this series, Talos releases open-source tools, along with insights, tips, and enhancements to help cybersecurity researchers work smarter and more effectively.

  • Turla

  • Ukraine

  • Videos

  • VPNFilter

  • vulnerability

  • Vulnerability Deep Dive

    A very technical breakdown about a vulnerability or set of vulnerabilities and how an attacker could string them together for a cyber attack.

  • Vulnerability Roundup

    A recap of the security vulnerabilities Talos' research team has helped to uncover and fix, released every other week.

  • Vulnerability Spotlight

    Coverage of the most important security issues Talos’ world-class vulnerability research team discovers and helps fix before the bad guys find it first.

  • wiper

  • Year In Review