Blog
Recent
October 12, 2022 15:33

Vulnerability Spotlight: Multiple issues in Robustel R1510 cellular router could lead to code execution, denial of service

Cisco Talos recently discovered nine vulnerabilities in the Robustel R1510 industrial cellular router, several of which could allow an adversary to inject operating system code remotely.

October 11, 2022 14:01

Microsoft Patch Tuesday for October 2022 — Snort rules and prominent vulnerabilities

Microsoft released its monthly security update Tuesday, disclosing 83 vulnerabilities across the company’s hardware and software line.

October 11, 2022 10:21

Vulnerability Spotlight: Data deserialization in VMware vCenter could lead to remote code execution

Marcin “Icewall” Noga of Cisco Talos discovered this vulnerability. Cisco Talos recently discovered an exploitable data deserialization vulnerability in the VMware vCenter server platform. VMware is one of the most popular virtual machine solutions currently available, and its

October 7, 2022 17:05

Threat Roundup for September 30 to October 7

Talos is publishing a glimpse into the most prevalent threats we've observed between Sept. 30 and Oct. 7.

October 6, 2022 14:00

Threat Source newsletter (Oct. 6, 2022) — Continuing down the Privacy Policy rabbit hole

Any time we welcome this software and hardware into our homes and on our devices, it’s worth considering what sacrifices we might be making elsewhere.

October 4, 2022 08:51

Developer account body snatchers pose risks to the software supply chain

Cisco Talos examined several frequently used code repositories. We looked specifically at the security afforded to developer accounts, and how difficult it would be for an attacker to take over a developer account.

October 3, 2022 10:00

Researcher Spotlight: Globetrotting with Yuri Kramarz

“You have completely different angles in preparing different customers for defense during major global events depending on their role, technology and function,” Kramarz said.

September 30, 2022 17:16

Threat Advisory: Microsoft warns of actively exploited vulnerabilities in Exchange Server

Even organizations that use Exchange Online may still be affected if they run a hybrid server.

September 30, 2022 16:46

Threat Roundup for September 23 to September 30

Talos is publishing a glimpse into the most prevalent threats we've observed between Sept. 23 and Sept. 30.