Arnaud comes to the show and elevates the discourse - while making fun of the bad guys. win/win.
Cisco Talos Intelligence Group@talosintelligence.com · 13h agoWhen threat actors start arguing with AI, the results are as revealing as they are ridiculous. Catch the full breakdown of how adversaries are weaponizing (and struggling with) AI in the latest Beers with Talos: cs.co/63328B16eIY
Protect your development environment from rising Python supply-chain threats by understanding the package installation lifecycle and implementing these essential defensive strategies: cs.co/63323BEnJc1
Some recent(ish) updates to CFPlease.io: - Shareable links to CFPs and events - Submit your own events to the queue (moderation req'd) - A public API for searching and filtering Looking for a place to present your cybersecurity research, or just a cool conference to attend? Give it a try!
Windows COM is a playground for threat actors, but it doesn't have to be a mystery. Join us on the latest Talos Takes to learn how to spot malicious activity and sharpen your analysis skills: cs.co/63320BDm4is
👀
David J. Bianco@davidjbianco.bsky.social · last mo.Finding security CFPs and events scattered across the web is a pain, so I built something to fix it. CFPlease.io crawls the web for upcoming CFPs and events, so you can search and filter by topic, format, or geography. A free service for the security community. cfplease.io #infosec #cybersecurity
Jun 8th 1998 - Peter Gibbons had a bad case of the Mondays and gets reminded about the new cover sheets on the TPS reports. Michael Bolton (not that one) tells the guys he could write a virus to rip off the company. 📽️📅 Office Space (1999)
I did a podcast talking about my newest open source project, EvidenceForge. Realistic synthetic log data turned out to be a lot more interesting of a project than I expected.
Cisco Talos Intelligence Group@talosintelligence.com · 2mo agoStop testing against hollow and anonymized logs. In the latest Talos Takes, David Bianco explains how EvidenceForge, a new open-source tool, generates the realistic, causal telemetry your team has been missing: cs.co/63323B8mmwz
I can teach you languages and tools - I can't teach you innate curiosity ¯\_(ツ)_/¯
Cisco Talos Intelligence Group@talosintelligence.com · 4mo agoTurns out, your obsession with strategy games is actually a secret weapon you can use to outsmart threat actors. Read this week’s Threat Source to see why: cs.co/63320B6IHlu
In today's episode of "lol wtf the internet is silly" - Iran malwares Iraq - Ukraine malwares Russia - North Korea attacking cryptocurrency exchanges - China malwares a bunch of countries - Chinese nerds infect iOS apps (lol) - North Korea oopsies, infects PC from GTA V mods
4chan for AI is absolutely how we end up with some kind of IncelSkyNet that is a far worse future for us and our new impotent overlords.
Brandon@that2000sguy.bsky.social · 6mo agoA social media for bots? We’re giving AI the worst of the internet
Fun fact you can do everything you want with just HTML tables and people liked that version of the Internet a lot better
some of you are looksmaxxing when you need to be booksmaxxing
"Qiling will be my go-to for from the start of an emulation project... ... if all you need is the ability to debug your scripts, udbserver is an easy solution that you can use with your Unicorn scripts as-is."
Cisco Talos Intelligence Group@talosintelligence.com · 6mo agoWhat does it take to bypass hardware protections and find hidden flaws in industrial IoT devices? Discover how targeted emulation led to six new CVEs in our latest blog: cs.co/63325hjH4c
yo dawg, I heard you like malware xzibit meme like it's 2007
vx-underground (automated mirror)@vxundergroundre.bsky.social · 6mo ago> Vidar > Malware as a Service > Used by cybercriminals > Leaked crack appears > Look inside > AveMaria malware tldr cybercriminal cracks malware used by cybercriminals, puts malware inside crack, cybercriminals a victim of cybercriminals
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) ordered government agencies to patch their systems against a five-year-old GitLab vulnerability that is actively being exploited in attacks.
CISA warns of five-year-old GitLab flaw exploited in attacks
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) ordered government agencies to patch their systems against a five-year-old GitLab vulnerability that is actively being exploited in attacks.
bleepingcomputer.com
Kali Linux has released version 2025.4, its final update of the year, introducing three new tools, desktop environment improvements, and enhanced Wayland support.
Kali Linux 2025.4 released with 3 new tools, desktop updates
Kali Linux has released version 2025.4, its final update of the year, introducing three new tools, desktop environment improvements, and enhanced Wayland support.
bleepingcomputer.com
Put your cyber skills to the test with Talos’ 12 Days of Malware, featuring insights from Talos-driven research published throughout the year. Try to guess the threat actor or tool in as few clues as possible, and share how you did in the comments below: blog.talosintelligence.com/salt-typhoon...
sitting next to a sweaty guy on a plane who just finished a workout at terminal 8 while wearing a shirt, tie, and suit
Aaron Rupar@atrupar.com · 8mo agoDuffy on what he's doing to improve the airport experience for travelers: "Maybe I want a workout area where people might get some blood flowing doing some pull ups or step ups in the airport."
watchTowr Labs has found thousands of secret tokens and credentials shared publicly on code formatting and beautification sites, such as JSONFormatter and CodeBeautify labs.watchtowr.com/stop-putting...
Stop Putting Your Passwords Into Random Websites (Yes, Seriously, You Are The Problem)
Welcome to watchTowr vs the Internet, part 68. That feeling you’re experiencing? Dread. You should be used to it by now. As is fast becoming an unofficial and, apparently, frowned upon tradition - w...
labs.watchtowr.com
***record scratch*** "Yep, that's me. You're probably wondering how I ended up in this situation..."
Cisco Talos Intelligence Group@talosintelligence.com · 9mo agoHigh fantasy, squirrel brains, and the wild world of cybersecurity — Bill Largent has stories and wisdom to share in the newest Humans of Talos: cs.co/633207eVC8
From a wave of ToolShell incidents, to a rise in post-exploitation phishing and the creative misuse of legitimate tools like Velociraptor, this episode of the TTP is packed with insights from Q3: www.youtube.com/watch?v=q7yV...
they won't even open betting lines for DNS as the RFO on these things.
BleepingComputer@bleepingcomputer.com · 10mo agoAmazon says a major DNS failure was behind a massive AWS (Amazon Web Services) outage that took down many websites and online services on Monday.
Save the date: Cisco Talos is hosting a live Reddit AMA on r/cybersecurity on October 30! Our team members will be on standby to answer your questions about our latest Incident Response Quarterly Trends Report, today’s threat landscape, and more.
Talos is serving up a special episode of Beers with Talos! VP Christopher Marshall (the “real Marshall,” much to Joe’s displeasure) joins Hazel, Bill, and Joe for a very real conversation about leading a large team when the world won’t stop moving: cs.co/63325AFR3x
If anyone needs me I will be in the museum, lying down next to the bog bodies.
