{"total":17,"items":[{"id":577,"title":"Give yourself room to be human","original_title":"Give yourself room to be human","source_rating":null,"summary":"In this week’s edition, Amy reflects on the importance of prioritizing family and personal well-being over the pressure to remain constantly productive.","ai":false,"actions":[],"url":"https://blog.talosintelligence.com/give-yourself-room-to-be-human/","type":"research","language":"en","published_at":"2026-10-01T18:00:52+00:00","severity":"laag","priority":0,"vendors":[],"cves":[],"cve_count":0,"in_kev":false,"exploited_by":[],"kev_ransomware":false,"cvss_max":null,"epss_max":null,"source_count":1,"ncsc":null,"source":{"slug":"talos","name":"Cisco Talos Intelligence","category":"onderzoek","country":null,"license":"© Cisco Talos","reuse":"excerpt"},"bundle":null},{"id":374,"title":"The Fine Art of Frustrating the Adversary","original_title":"The Fine Art of Frustrating the Adversary","source_rating":null,"summary":"What really frustrates an adversary? Eight Cisco Talos researchers share practical ways to make their next move slower and riskier. From deception and behavioral detection to breaking attack…","ai":false,"actions":[],"url":"https://blog.talosintelligence.com/the-fine-art-of-frustrating-the-adversary/","type":"research","language":"en","published_at":"2026-10-01T10:00:05+00:00","severity":"laag","priority":0,"vendors":["Cisco"],"cves":[],"cve_count":0,"in_kev":false,"exploited_by":[],"kev_ransomware":false,"cvss_max":null,"epss_max":null,"source_count":1,"ncsc":null,"source":{"slug":"talos","name":"Cisco Talos Intelligence","category":"onderzoek","country":null,"license":"© Cisco Talos","reuse":"excerpt"},"bundle":null},{"id":344,"title":"China-nexus UAT-11587 targets government and policy organizations across Asia with Antino backdoor","original_title":"China-nexus UAT-11587 targets government and policy organizations across Asia with Antino backdoor","source_rating":null,"summary":"Cisco Talos uncovered a cluster of activity we track as UAT-11587 targeting government and policy organizations across Asia, including in Taiwan, India, the Philippines, and Cambodia, to deliver a…","ai":false,"actions":[],"url":"https://blog.talosintelligence.com/china-nexus-uat-11587-targets-government-and-policy-organizations-across-asia-with-antino-backdoor/","type":"research","language":"en","published_at":"2026-09-30T10:00:01+00:00","severity":"laag","priority":0,"vendors":["Cisco"],"cves":[],"cve_count":0,"in_kev":false,"exploited_by":[],"kev_ransomware":false,"cvss_max":null,"epss_max":null,"source_count":1,"ncsc":null,"source":{"slug":"talos","name":"Cisco Talos Intelligence","category":"onderzoek","country":null,"license":"© Cisco Talos","reuse":"excerpt"},"bundle":null},{"id":345,"title":"Securing the keys to the kingdom: Announcing Executive Threat Detection","original_title":"Securing the keys to the kingdom: Announcing Executive Threat Detection","source_rating":null,"summary":"This new proactive service joins the suite of retainer offerings to provide dedicated, intelligence-led hunting specifically for your organization’s most high-value IT assets.","ai":false,"actions":[],"url":"https://blog.talosintelligence.com/securing-the-keys-to-the-kingdom-announcing-executive-threat-detection/","type":"research","language":"en","published_at":"2026-09-29T10:00:36+00:00","severity":"laag","priority":0,"vendors":["Cisco"],"cves":[],"cve_count":0,"in_kev":false,"exploited_by":[],"kev_ransomware":false,"cvss_max":null,"epss_max":null,"source_count":1,"ncsc":null,"source":{"slug":"talos","name":"Cisco Talos Intelligence","category":"onderzoek","country":null,"license":"© Cisco Talos","reuse":"excerpt"},"bundle":null},{"id":346,"title":"Trust and the enticing consultancy offer","original_title":"Trust and the enticing consultancy offer","source_rating":null,"summary":"In this week’s newsletter Martin muses over a very suspicious elicitation over social media and the true value of trust within the cyber ecosystem. Hubris might be the real vulnerability that the…","ai":false,"actions":[],"url":"https://blog.talosintelligence.com/trust-and-the-enticing-consultancy-offer/","type":"research","language":"en","published_at":"2026-09-24T18:00:37+00:00","severity":"laag","priority":0,"vendors":[],"cves":[],"cve_count":0,"in_kev":false,"exploited_by":[],"kev_ransomware":false,"cvss_max":null,"epss_max":null,"source_count":1,"ncsc":null,"source":{"slug":"talos","name":"Cisco Talos Intelligence","category":"onderzoek","country":null,"license":"© Cisco Talos","reuse":"excerpt"},"bundle":null},{"id":347,"title":"The Closed Quorum: Inside the first reported autonomous AI C2 implant","original_title":"The Closed Quorum: Inside the first reported autonomous AI C2 implant","source_rating":null,"summary":"CLOSEDQUORUM, a malware binary discovered through Cisco Talos’ CAIRN project, exhibits fully autonomous command and control (C2). It represents a shift in effort displacement for attackers, in which…","ai":false,"actions":[],"url":"https://blog.talosintelligence.com/the-closed-quorum-inside-the-first-reported-autonomous-ai-c2-implant/","type":"research","language":"en","published_at":"2026-09-22T10:00:58+00:00","severity":"laag","priority":0,"vendors":["Cisco"],"cves":[],"cve_count":0,"in_kev":false,"exploited_by":[],"kev_ransomware":false,"cvss_max":null,"epss_max":null,"source_count":1,"ncsc":null,"source":{"slug":"talos","name":"Cisco Talos Intelligence","category":"onderzoek","country":null,"license":"© Cisco Talos","reuse":"excerpt"},"bundle":null},{"id":348,"title":"Introducing CAIRN: Frontier tracking for AI-integrated malware","original_title":"Introducing CAIRN: Frontier tracking for AI-integrated malware","source_rating":null,"summary":"Talos is releasing CAIRN, a research toolkit for hunting, classifying, and tracking emerging AI-integrated malware.","ai":false,"actions":[],"url":"https://blog.talosintelligence.com/introducing-cairn-frontier-tracking-for-ai-integrated-malware/","type":"research","language":"en","published_at":"2026-09-22T10:00:25+00:00","severity":"laag","priority":0,"vendors":[],"cves":[],"cve_count":0,"in_kev":false,"exploited_by":[],"kev_ransomware":false,"cvss_max":null,"epss_max":null,"source_count":1,"ncsc":null,"source":{"slug":"talos","name":"Cisco Talos Intelligence","category":"onderzoek","country":null,"license":"© Cisco Talos","reuse":"excerpt"},"bundle":null},{"id":349,"title":"Should you care about an “AI slowdown?”","original_title":"Should you care about an “AI slowdown?”","source_rating":null,"summary":"In this week's Threat Source, David talks about why focusing on your security basics is still your best bet, even in a world with rapid AI advancements.","ai":false,"actions":[],"url":"https://blog.talosintelligence.com/should-you-care-about-an-ai-slowdown/","type":"research","language":"en","published_at":"2026-09-17T18:00:23+00:00","severity":"laag","priority":0,"vendors":[],"cves":[],"cve_count":0,"in_kev":false,"exploited_by":[],"kev_ransomware":false,"cvss_max":null,"epss_max":null,"source_count":1,"ncsc":null,"source":{"slug":"talos","name":"Cisco Talos Intelligence","category":"onderzoek","country":null,"license":"© Cisco Talos","reuse":"excerpt"},"bundle":null},{"id":350,"title":"Ransomware incidents in Japan in the first half of 2026: Investigation of The Gentlemen’s infrastructure and evidence of Qilin's AI use","original_title":"Ransomware incidents in Japan in the first half of 2026: Investigation of The Gentlemen’s infrastructure and evidence of Qilin's AI use","source_rating":null,"summary":"Ransomware incidents in Japan rose 4.7% year over year. The Gentlemen was the most active group, with leak-site listings more than doubling from January to July. Qilin ranked second and appeared to…","ai":false,"actions":[],"url":"https://blog.talosintelligence.com/ransomware-incidents-in-japan-in-the-first-half-of-2026/","type":"research","language":"en","published_at":"2026-09-17T10:00:43+00:00","severity":"middel","priority":42,"vendors":["Cisco"],"cves":[{"id":"CVE-2020-1472","cvss":5.5,"epss":0.99389,"epss_percentile":0.9994,"in_kev":true,"kev_ransomware":true},{"id":"CVE-2025-24799","cvss":9.8,"epss":0.86692,"epss_percentile":0.99738,"in_kev":false,"kev_ransomware":false},{"id":"CVE-2025-2479","cvss":6.1,"epss":0.00335,"epss_percentile":0.24583,"in_kev":false,"kev_ransomware":false}],"cve_count":3,"in_kev":true,"exploited_by":["CISA KEV"],"kev_ransomware":true,"cvss_max":9.8,"epss_max":0.99389,"source_count":1,"ncsc":null,"source":{"slug":"talos","name":"Cisco Talos Intelligence","category":"onderzoek","country":null,"license":"© Cisco Talos","reuse":"excerpt"},"bundle":null},{"id":351,"title":"Securing the unpatchable in an age of AI-driven vulnerabilities","original_title":"Securing the unpatchable in an age of AI-driven vulnerabilities","source_rating":null,"summary":"Advances in AI technology will continue to identify vulnerabilities that in some circumstances are difficult, or effectively impossible, to patch. Appropriate network segmentation, rigorous…","ai":false,"actions":[],"url":"https://blog.talosintelligence.com/securing-the-unpatchable-in-an-age-of-ai-driven-vulnerabilities/","type":"research","language":"en","published_at":"2026-09-16T10:00:36+00:00","severity":"laag","priority":0,"vendors":[],"cves":[],"cve_count":0,"in_kev":false,"exploited_by":[],"kev_ransomware":false,"cvss_max":null,"epss_max":null,"source_count":1,"ncsc":null,"source":{"slug":"talos","name":"Cisco Talos Intelligence","category":"onderzoek","country":null,"license":"© Cisco Talos","reuse":"excerpt"},"bundle":null},{"id":352,"title":"We've got one word for it, and it's usually the wrong one","original_title":"We've got one word for it, and it's usually the wrong one","source_rating":null,"summary":"In this week's Threat Source newsletter, Joe explores why the word \"burnout\" often fails to capture the true toll of working in the cybersecurity industry and why we need better language to address…","ai":false,"actions":[],"url":"https://blog.talosintelligence.com/weve-got-one-word-for-it-and-its-usually-the-wrong-one/","type":"research","language":"en","published_at":"2026-09-10T18:00:15+00:00","severity":"hoog","priority":52,"vendors":[],"cves":[{"id":"CVE-2026-20079","cvss":10.0,"epss":0.8818,"epss_percentile":0.99765,"in_kev":true,"kev_ransomware":false},{"id":"CVE-2026-20316","cvss":5.3,"epss":0.35096,"epss_percentile":0.98397,"in_kev":true,"kev_ransomware":true}],"cve_count":2,"in_kev":true,"exploited_by":["CISA KEV","ENISA EUVD"],"kev_ransomware":true,"cvss_max":10.0,"epss_max":0.8818,"source_count":3,"ncsc":null,"source":{"slug":"talos","name":"Cisco Talos Intelligence","category":"onderzoek","country":null,"license":"© Cisco Talos","reuse":"excerpt"},"bundle":null},{"id":353,"title":"Active exploitation of Cisco Secure Firewall Management Center vulnerabilities","original_title":"Active exploitation of Cisco Secure Firewall Management Center vulnerabilities","source_rating":null,"summary":"Cisco Talos is actively tracking the exploitation of two vulnerabilities in Cisco’s Secure Firewall Management Center (FMC) Software.","ai":false,"actions":[],"url":"https://blog.talosintelligence.com/fmc-ongoing-exploitation/","type":"research","language":"en","published_at":"2026-09-09T16:08:59+00:00","severity":"hoog","priority":52,"vendors":["Cisco"],"cves":[{"id":"CVE-2026-20079","cvss":10.0,"epss":0.8818,"epss_percentile":0.99765,"in_kev":true,"kev_ransomware":false},{"id":"CVE-2026-20316","cvss":5.3,"epss":0.35096,"epss_percentile":0.98397,"in_kev":true,"kev_ransomware":true}],"cve_count":2,"in_kev":true,"exploited_by":["CISA KEV","ENISA EUVD"],"kev_ransomware":true,"cvss_max":10.0,"epss_max":0.8818,"source_count":3,"ncsc":null,"source":{"slug":"talos","name":"Cisco Talos Intelligence","category":"onderzoek","country":null,"license":"© Cisco Talos","reuse":"excerpt"},"bundle":null},{"id":354,"title":"Microsoft Patch Tuesday for September 2026 — Snort rules and prominent vulnerabilities","original_title":"Microsoft Patch Tuesday for September 2026 — Snort rules and prominent vulnerabilities","source_rating":null,"summary":"Microsoft has released its monthly security update for September 2026, which includes 973 vulnerabilities affecting a range of products, including 113 that Microsoft marked as \"critical.\"","ai":false,"actions":[],"url":"https://blog.talosintelligence.com/microsoft-patch-tuesday-for-september-2026/","type":"research","language":"en","published_at":"2026-09-08T22:16:35+00:00","severity":"middel","priority":27,"vendors":["Microsoft"],"cves":[{"id":"CVE-2026-85880","cvss":7.8,"epss":0.03616,"epss_percentile":0.89147,"in_kev":true,"kev_ransomware":false},{"id":"CVE-2026-65772","cvss":8.8,"epss":0.01693,"epss_percentile":0.76299,"in_kev":false,"kev_ransomware":false},{"id":"CVE-2026-69845","cvss":9.8,"epss":0.01022,"epss_percentile":0.62209,"in_kev":false,"kev_ransomware":false},{"id":"CVE-2026-72982","cvss":9.8,"epss":0.00974,"epss_percentile":0.60735,"in_kev":false,"kev_ransomware":false},{"id":"CVE-2026-69525","cvss":9.8,"epss":0.00974,"epss_percentile":0.60738,"in_kev":false,"kev_ransomware":false},{"id":"CVE-2026-70296","cvss":9.8,"epss":0.00974,"epss_percentile":0.60732,"in_kev":false,"kev_ransomware":false}],"cve_count":165,"in_kev":true,"exploited_by":["CISA KEV","ENISA EUVD"],"kev_ransomware":false,"cvss_max":10.0,"epss_max":0.03616,"source_count":2,"ncsc":null,"source":{"slug":"talos","name":"Cisco Talos Intelligence","category":"onderzoek","country":null,"license":"© Cisco Talos","reuse":"excerpt"},"bundle":null},{"id":355,"title":"ClearFake WebDAV infection chain delivers Amatera stealer, ZigCryptoStealer, and NetSupport Manager","original_title":"ClearFake WebDAV infection chain delivers Amatera stealer, ZigCryptoStealer, and NetSupport Manager","source_rating":null,"summary":"We assess with moderate confidence that the attacks are not targeted at a particular organization, but are a part of a cryptocurrency and credentials-stealing operation using the Amatera stealer as…","ai":false,"actions":[],"url":"https://blog.talosintelligence.com/clearfake-webdav-infection-chain/","type":"research","language":"en","published_at":"2026-09-08T10:01:07+00:00","severity":"laag","priority":0,"vendors":["Cisco"],"cves":[],"cve_count":0,"in_kev":false,"exploited_by":[],"kev_ransomware":false,"cvss_max":null,"epss_max":null,"source_count":1,"ncsc":null,"source":{"slug":"talos","name":"Cisco Talos Intelligence","category":"onderzoek","country":null,"license":"© Cisco Talos","reuse":"excerpt"},"bundle":null},{"id":356,"title":"ClickFix moves into the browser: Cryptocurrency theft with Google-hosted C2","original_title":"ClickFix moves into the browser: Cryptocurrency theft with Google-hosted C2","source_rating":null,"summary":"Cisco Talos is tracking a cryptocurrency-stealing campaign that abuses the Google Visualization API for command and control (C2), retrieving obfuscated JavaScript from a publicly published Google…","ai":false,"actions":[],"url":"https://blog.talosintelligence.com/clickfix-moves-into-the-browser/","type":"research","language":"en","published_at":"2026-09-08T10:00:38+00:00","severity":"laag","priority":0,"vendors":["Cisco"],"cves":[],"cve_count":0,"in_kev":false,"exploited_by":[],"kev_ransomware":false,"cvss_max":null,"epss_max":null,"source_count":1,"ncsc":null,"source":{"slug":"talos","name":"Cisco Talos Intelligence","category":"onderzoek","country":null,"license":"© Cisco Talos","reuse":"excerpt"},"bundle":null},{"id":357,"title":"The story behind the intelligence","original_title":"The story behind the intelligence","source_rating":null,"summary":"From engaging with cybercriminals to surviving a live Flamin’ Hot Cheetos taste test, Hazel reflects on the latest Beers with Talos with Azim, where they cover the full spectrum of what it takes to…","ai":false,"actions":[],"url":"https://blog.talosintelligence.com/the-story-behind-the-intelligence/","type":"research","language":"en","published_at":"2026-09-03T18:00:13+00:00","severity":"laag","priority":0,"vendors":[],"cves":[],"cve_count":0,"in_kev":false,"exploited_by":[],"kev_ransomware":false,"cvss_max":null,"epss_max":null,"source_count":1,"ncsc":null,"source":{"slug":"talos","name":"Cisco Talos Intelligence","category":"onderzoek","country":null,"license":"© Cisco Talos","reuse":"excerpt"},"bundle":null},{"id":358,"title":"“Sorry, I can’t help with that”: How your guardrails might become the attacker’s best friend","original_title":"“Sorry, I can’t help with that”: How your guardrails might become the attacker’s best friend","source_rating":null,"summary":"In his first Threat Source newsletter, David Bianco explores the critical need for operational sovereignty in customizing AI guardrails to maintain the defender’s advantage.","ai":false,"actions":[],"url":"https://blog.talosintelligence.com/sorry-i-cant-help-with-that-how-your-guardrails-might-become-the-attackers-best-friend/","type":"research","language":"en","published_at":"2026-08-27T18:00:24+00:00","severity":"laag","priority":0,"vendors":[],"cves":[],"cve_count":0,"in_kev":false,"exploited_by":[],"kev_ransomware":false,"cvss_max":null,"epss_max":null,"source_count":1,"ncsc":null,"source":{"slug":"talos","name":"Cisco Talos Intelligence","category":"onderzoek","country":null,"license":"© Cisco Talos","reuse":"excerpt"},"bundle":null}]}