Cisco Talos Blog

July 7, 2022 14:00

Threat Source newsletter (July 7, 2022) — Teamwork makes the dream work

Welcome to this week’s edition of the Threat Source newsletter. I’ve been thinking a lot recently about the pros and cons of the way we publicize our threat research. I had a few conversations at Cisco Live with people — who are more generally IT-focused than hyper-focused on cy

June 30, 2022 14:00

Threat Source newsletter (June 30, 2022) — AI voice cloning is somehow more scary than deepfake videos

Welcome to this week’s edition of the Threat Source newsletter. We took a week off for summer vacation but are back in the thick of security things now. My first exposure to deepfake videos was when Jordan Peele worked with BuzzFeed News to produce this video of former Presiden

June 16, 2022 14:00

Threat Source newsletter (June 16, 2022) — Three top takeaways from Cisco Live

Welcome to this week’s edition of the Threat Source newsletter. I’m still decompressing from Cisco Live and the most human interaction I’ve had in a year and a half. But after spending a few days on the show floor and interacting with everyone, there are a few things that stand

June 9, 2022 14:00

Threat Source newsletter (June 9, 2022) — Get ready for Cisco Live

Welcome to this week’s edition of the Threat Source newsletter. Another week, another conference. We’re heading a few miles southeast from San Francisco to Las Vegas for Cisco Live. I hope everyone had a safe, healthy and enjoyable RSA, but the fun isn’t over just yet. We’ve go

June 2, 2022 14:00

Threat Source newsletter (June 2, 2022) — An RSA Conference primer

Welcome to this week’s edition of the Threat Source newsletter. Many of you readers may be gearing up for a West Coast swing over the next few weeks through San Francisco and Las Vegas for RSA and Cisco Live, respectively. And we’re right behind you! Talos will have plenty of r

May 26, 2022 14:00

Threat Source newsletter (May 26, 2022) — BlackByte adds itself to the grocery list of big game hunters

Welcome to this week’s edition of the Threat Source newsletter. Given the recent tragedies in the U.S., I don’t feel it’s appropriate to open by being nostalgic or trying to be witty — let’s just stick to some security news this week. The one big thing The BlackByte ransomwar

May 19, 2022 14:00

Threat Source newsletter (May 19, 2022) — Why I'm missing the days of iPods and LimeWire

Welcome to this week’s edition of the Threat Source newsletter. I will openly admit that I still own a “classic” iPod — the giant brick that weighed down my skinny jeans in high school and did nothing except play music. There are dozens of hours of music on there that I always t

May 12, 2022 14:00

Threat Source newsletter (May 12, 2022) — Mandatory MFA adoption is great, but is it too late?

Welcome to this week’s edition of the Threat Source newsletter. Mandatory multi-factor authentication is all the rage nowadays. GitHub just announced that all contributors would have to enroll in MFA by 2023 to log into their accounts. And Google announced as part of World Passw

May 5, 2022 14:00

Threat Source newsletter (May 5, 2022) — Emotet is using up all of its nine lives

Welcome to this week’s edition of the Threat Source newsletter. Emotet made headlines last week for being “back” after a major international law enforcement takedown last year. But I’m here to argue that Emotet never left, and honestly, I’m not sure it ever will. As Nick Biasin