Cisco Talos
Security Happenings at Cisco Live U.S.
Here are the major security activities happening at Cisco Live from June 9 – 13 at the San Diego Convention Center. See you there next week!
One year later: The VPNFilter catastrophe that wasn’t
One year ago, Cisco Talos first disclosed the existence of VPNFilter on May 23, 2018. The malware made headlines across the globe, as it was a sophisticated piece of malware...
Recent MuddyWater-associated BlackWater campaign shows signs of new anti-detection techniques
This blog was authored by Danny Adamitis, David Maynor, and Kendall McKay Executive
Enabling AMP in Cisco SD-WAN
Attain the ability to sandbox and block standard, polymorphic and file-less malware across the WAN, all from the Cisco SD-WAN console. Introducing Advanced Malware Protection (AMP) for Networks.
Threat Roundup for April 26 to May 3
Talos lists ten of the most prevalent threats observed between April 26 and May 03, summarizing key behavioral characteristics, and discussing how our customers are automatically protected from these threats.
DNSpionage brings out the Karkoff
In November 2018, Cisco Talos discovered an attack campaign, called DNSpionage, in which threat actors created a new remote administrative tool that supports HTTP and DNS communication with the attackers'...
DNS Hijacking Abuses Trust In Core Internet Service
This blog post discusses the technical details of a state-sponsored attack manipulating DNS systems. While this incident is limited to targeting primarily national security organizations in the Middle East and...