Cisco Talos Intelligence Group

Hazel may have fallen down a wormhole of weird comic book powers, but her latest newsletter lands on a vital truth: Empathy is the most underrated superpower we have in the cybersecurity trenches: cs.co/6016BBRHYg

CVE 2026-000-25 (aka William Largent) has had 25 years of uninterrupted persistence with Cisco! Hazel, Dave, and Joe celebrate Bill’s years of service with a good, old-fashioned roast: cs.co/6011BBuhgb

AI brings time-saving benefits to both defenders and threat actors, but we can tip the scale in our favor. The latest Tool Talk shows how generative AI can be used to rapidly deploy adaptive honeypot systems: cs.co/6012BBMtQQ

With attackers moving faster than ever, it’s easy to feel overwhelmed. As Talos wraps up 2025 Year in Review coverage, Hazel shares practical priorities to start implementing today: cs.co/6011BBMsV7

In the latest newsletter, Joe explains why the best security professionals take time to step away from coding to study the economics, art, and human behavior that make the world go 'round: cs.co/6010BBGpG8

I'm at @BlackHatEvents Asia today and tomorrow! Looking forward to all the interesting talks and conversations! Please come say hi if you are here! #BHASIA

Nearly a third of MFA spray attacks in 2025 targeted identity and access management (IAM) applications, and technology and manufacturing were the most targeted industries. For the full breakdown, read the 2025 Year in Review today: cs.co/6016BBBemE

The number of device registration events reported by users as fraud increased 178% from 2024 to 2025. Dive deeper into these trends in our Year in Review: cs.co/6014BBBjiA

Attacks are becoming faster to build, easier to scale, and increasingly designed to blend into normal activity. Watch the latest TTP for more incident response trends from Q1 2026: cs.co/6010BBDTna

Attackers continued to rely heavily on phishing — an easy and low-cost social engineering operation — for initial access in 2025. For phishing lure trends and more, read the full 2025 Year in Review: cs.co/6018BBBeDQ

Know someone trying to break into cybersecurity? Tag them. 👇 We’ve released 8 free @Splunk courses that form the Cybersecurity Defense Analyst Career Path, built for aspiring SOC Analysts. Start learning today: cs.co/6011BBBoIc

Phishing is making a comeback with an AI-powered twist. Read Talos' Q1 2026 Incident Response Trends report to see how threat actors are targeting public administration and how you can lock down your defenses against these evolving tactics: cs.co/6011B6hCjZ

Is your office printer secretly putting your network at risk? Amy and Martin Lee chat through 2025 phishing and APT trends to expose how threat actors are blending high-tech exploits with everyday business workflows to bypass your best defenses: cs.co/6015BB66Pf

From weaponizing Direct Send emails to a 178% surge in device compromise, attackers are finding increasingly creative ways to steal your organization's keys to the kingdom: cs.co/6013B6hhVf

Don't let a few "Bad Apples" spoil your entire enterprise orchard. Check out our latest research on how attackers are weaponizing native macOS primitives: cs.co/6011B6h77b

Cisco Talos’ Vulnerability Discovery & Research team recently disclosed one Foxit Reader vulnerability, and six LibRaw file reader vulnerabilities: cs.co/6013B6fRz1

Thor has returned to break down Q1 vulnerability stats, exploring everything from the persistence of legacy CVEs to the emerging impact of AI on tomorrow’s threats: cs.co/6011B64rjD

Curious how state-sponsored threat actors from China, Russia, North Korea, and Iran operated in 2025? Here’s how they achieved their objectives: cs.co/6010B62VLp

The "PowMix" botnet is playing a high-stakes game of digital hide-and-seek by mimicking REST APIs, but Talos is turning on the lights with our latest blog: cs.co/6014B64K3a

In a world of five-second attention spans, Head of Creative Wendy Bishop and her powerhouse design team are Talos’ secret weapon, turning our most complex security research into must-see content: cs.co/6017B62nXx