The Earth is speeding up, leap seconds are being abolished, oh, and there's critical vulnerabilities in PHP. In this week’s Threat Source, Hazel Burton mourns what she could have done with that extra second: https://t.co/O8QIzm8cgT
Cisco Talos is aware of eight compromised intermediate certificates belonging to the intermediate certificate authority, eMudhra https://t.co/VrvjLbs1Se
Watch now: Two critical vulnerabilities in PHP core could affect a wide range of websites and applications. Talos’ Nick Biasini explains what the vulnerabilities allow adversaries to do, how to assess your exposure, and what defenders should prioritize. https://t.co/s15srsi7HO
Two critical remote code execution vulnerabilities in PHP core could have implications across its wider ecosystem. Talos has published a blog to explain what we know so far, and details the Snort coverage available, including rules in the Community Ruleset https://t.co/L77ckwnL5M
Make an attacker to regret ever stepping foot in your environment. Craig Jackson joins the show to convince you to double down on segmentation, and discuss the newest industry buzz: AI kill switches. https://t.co/vSCkIFrHDX
Cisco Talos will never ask you for bitcoin, payment for services, passwords, or any other personal information. If you receive a suspicious request, do not reply, click on any links or open attachments.
More vulnerabilities. More patches. Still only so many hours in the day.
With AI accelerating vulnerability discovery, our latest blog examines the pressure that puts on disclosure, patching cycles, and defense.
https://t.co/TXTCv6uw1E
Why wait for an attack to hit your team when you can trip up adversaries early in the game? Learn how Martin uses creative deceptions, like fake employee profiles and honeypots, to gain the upper hand: https://t.co/Yx9I1VbFqK
Attackers are using #AI to move faster than ever. Defenders are putting AI to work too.
Learn how the #cybersecurity landscape is changing from Yuri Kramarz ➡️ https://t.co/W0sAzEg5D7
#CybersecurityAwarenessMonth
Is the cybersecurity world really facing a "Bugmageddon?" Thor breaks down the latest CVE and KEV trends in this week’s Threat Source newsletter: https://t.co/23rtAsV6oT
Azim and Nick join Hazel and Dave this week to discuss the fine art of frustrating adversaries, from ransomware-group paranoia to deception that wastes their time and gives defenders a chance to spot their activity: https://t.co/c4qcY9ZfKY
How can you force an attacker into a no-win situation? According to Ryan, by focusing your detections on their unavoidable objectives instead of their constantly changing tools: https://t.co/gXXQLaqUxP
When threat actors leave the door open, we gain a front-row seat to their operations. Talos and Recorded Future tracked the UAT-6275 group’s evolving tactics across the CIS by analyzing their own exposed infrastructure: https://t.co/y3cBwqVpQ1
How do you turn your network into a massive headache for attackers? Martin Lee is back on Talos Takes to explain the benefits of wasting an attacker’s time and using decoys that turn their moves into threat intel you can use: https://t.co/ytINKEaPSu
Cisco Talos’ Vulnerability Discovery & Research team recently disclosed vulnerabilities in Adobe, Apple, Foxit Reader, and Microsoft. For details, check out our blog: https://t.co/UIW118fsEr
How can you create more friction and risk for an AI-powered adversary? David has some great advice in our Cybersecurity Awareness Month blog, "The Art of Frustrating the Adversary": https://t.co/wNSYZrHsvf
Join us in welcoming Pierre Cadieux to the Threat Source newsletter team! In his debut, Pierre shares a lesson from his 20 years in the trenches on how to keep the checks printing while managing security risks: https://t.co/XTu5ndJI1p
How do defender LLMs react when malware tries to talk its way out of an analysis? Our latest CAIRN deep dive examines the progression of A3 anti-analysis techniques: https://t.co/SlXUcjMUTk