Attackers are recycling phone numbers used in scam emails like they’re going out of style. Learn how Talos is turning those digits into a roadmap to expose the hidden infrastructure: https://t.co/KYEEnY7H9H
It's an n8n n8tmare! In our latest blog, Talos researchers share how threat actors are exploiting AI workflow platforms like n8n to launch sophisticated phishing and malware campaigns: https://t.co/Jn9SLIZymH
📣 Today at 4PM CT - @malearnity dives into CSS abuses to deliver malware via email and shows you how to fortify your cyber defenses to protect yourself and your team.
Join on YouTube: https://t.co/ILC7CyLOun
Join on Twitch: https://t.co/c9ynJDrkGr
The first Blue Team Con Online events of 2026 have been listed! Get a chance to see talks you missed, or just refresh your memory from last summer.
See them here: https://t.co/fsRYVs4mRp
(...and don't forget to subscribe to our YouTube channel and follow us on Twitch!)
Thanks to the many speakers who have shared their presentation decks from Blue Team Con 2025. They've been added to the individual talk pages on our site - check it out!
https://t.co/h68U6Lssmv
Promise made, promise kept: This blog shares highlights from my recent talk at @BlueTeamCon. It’s the result of over a year of monitoring how threat actors use hidden text in emails.
#email#security#phish
Attackers are slipping spam past email defenses by manipulating CSS properties. Read the latest Cisco Talos blog to uncover how hidden text salting works, why it’s so widespread in spam and what it means for email security: https://t.co/6mOxDKtfcN
This year's schedule just dropped and it's jam-packed with amazing talks and fun events. Check it out now and get started on your itinerary - you won't want to miss a thing.
https://t.co/lMC6qEct4U
4) Related blog posts:
- https://t.co/Z10a9twtUz
- https://t.co/KFfoQw8DhF
Related podcasts:
- https://t.co/DCd1388CsL
Related papers:
- https://t.co/FhKiCNkhtG
1) Here’s a sneak peek at my upcoming presentation for Blue Team Con:
Introduction: How benign technologies like CSS are exploited by threat actors; where and how content can be concealed in emails. @TalosSecurity
🚨Blue Team Con 2025 Talk Alert🚨
Talk Title: Unseen but Not Unheard: Exposing the Cases of CSS Abuse in Email Threats and Fortifying Defenses
Presented by: Omid Mirzaei
See abstract: https://t.co/l0Vdb0y1hD
3) Findings: Performance review, case studies, and common concealment techniques seen in the wild.
Future Work: Planned improvements and expanded use cases.
Conclusion: Exploring both offensive and defensive uses of LLMs for content concealment.
🚨 Hackers now talk you into getting hacked.
PDF phishing emails impersonate Microsoft, PayPal, DocuSign—urging you to call fake support lines.
On the call, they steal your info or install malware.
FBI, Cisco, and Varonis warn: it’s rising fast.
Read how it works → https://t.co/pt5hx94yI8
Did you know PDFs may be the perfect disguise for phishing attacks? Cisco Talos is enhancing email threat detection and uncovering new tactics like callback phishing (aka TOAD) and Adobe abuse: https://t.co/sFTaeZHWWr
BTC 2025 talks, speakers, trainings, and trainers have been selected and are now live on the BTC site! Check them out:
Talks: https://t.co/h68U6Lssmv
Speakers: https://t.co/EmXzsG7rbF
Trainings: https://t.co/qXyEmvNu6I
Trainers: https://t.co/UNZqHi2026
Tickets on sale June 3rd!
I'm very excited to share that my talk, "Unseen but Not Unheard: Exposing the Cases of CSS Abuse in Email Threats and Fortifying Defenses," has been accepted to the @BlueTeamCon.
Thank you from the program committee and looking forward to meet a lot of great researchers there.
Cisco Talos’ 2024 Year in Review is available for download now! With visibility into more than 886 billion security events per day, the report features our key insights. Read the full report here: https://t.co/4IibOqH46Y
👀 Your email client might be leaking more than you think...
Hackers are exploiting CSS to bypass spam filters and track users without JavaScript.
🚨 Cisco Talos warns that attackers use CSS properties like media, text-indent, and opacity to hide phishing content and fingerprint victims.
Stay ahead—learn how at https://t.co/DOkhT0RALu.
This follow-up blog (previous blog: https://t.co/Z10a9twtUz) explores the security and privacy risks of CSS abuse in emails. Read more about how attackers leverage CSS for evasion and tracking:
#email_security#ThreatIntelligence#email
Cascading Style Sheets (CSS) are ever present in modern day web browsing, however it's far from their own use. Read our latest blog Abusing with style: Leveraging cascading style sheets for evasion and tracking to learn more: https://t.co/adCuEWfZyC