Advertisement
Attackers Abuse Legitimate SaaS and Commerce Infrastructure
Cisco Talos research reveals attackers abusing 25+ trusted platforms, weaponizing transactional email pipelines for social engineering.
UAT-11473 Deploys KeyDrift Malware on Cisco SD-WAN via CVE-2026-20127
Analyze UAT-11473 targeting Cisco SD-WAN controllers using CVE-2026-20127 and the custom KeyDrift framework for long-term persistence.
NIK C2: AI-Enabled C2 Framework with Ransomware & Data Theft
Cisco Talos observed NIK C2, a new AI-integrated command-and-control framework. It enables credential dumping, keystroke logging, and ransomware deployment.
CVE-2026-76418: Cisco Firewall DoS - Patch Now
CISA added CVE-2026-76418, an unauthenticated remote DoS affecting Cisco Secure Firewall ASA and FTD, to KEV catalog with active exploitation.
NIK C2 Framework Integrates AI Directly Into Attack Chains
Cisco Talos discovers NIK C2, a Go-based implant integrating AI to dump credentials and stream keystrokes while hijacking victim API keys.
Cisco Patches 35 Vulnerabilities: Critical Flaws in Meraki, NX-OS
Cisco released patches for 35 vulnerabilities, including multiple critical issues in Meraki, License On-Prem, NX-OS, and APIC products.
Multi-Vendor Patches: Adobe, Apple, Foxit, Microsoft Vulnerabilities
Cisco Talos discloses patched privilege escalation, RCE, and information disclosure vulnerabilities across Adobe, Apple, Foxit, and Microsoft products.
Cisco FMC RCE via CVE-2026-20079: Patch Now
Active exploitation of critical Cisco Secure Firewall Management Center vulnerabilities (CVE-2026-20079, CVE-2026-20316) by state-sponsored and crimeware actors.
Cisco Talos Newsletter: Frustrating Adversaries and Security Updates
Read the latest Threat Source newsletter by Cisco Talos, featuring adversary frustration tactics and weekly cybersecurity news summaries.
CAIRN: Cisco Talos's New Approach to AI-Integrated Malware Tracking
Cisco Talos introduces CAIRN, a metadata-first methodology and toolkit for hunting, classifying, and tracking emerging AI-integrated malware.
CLOSEDQUORUM: Autonomous AI C2 Implant Redefines Cyber Operations
Cisco Talos uncovers CLOSEDQUORUM, a novel AI-driven C2 implant autonomously making decisions for credential and crypto wallet harvesting.
CVE-2026-76504: Cisco Catalyst SD-WAN Manager Admin Access
CISA confirms active exploitation of CVE-2026-76504, a hex encoding vulnerability allowing unauthenticated remote admin access to Cisco Catalyst SD-WAN Manager.
Cisco Talos Announces Executive Threat Detection Service
Cisco Talos launches Executive Threat Detection to protect leadership teams from targeted social engineering, whaling, and stealthy compromises.
The AI Safety Penalty: How LLM Guardrails Hinder Defenders
Cisco Talos warns about the 'AI safety penalty,' where large language model guardrails impede legitimate defensive operations, giving attackers an advantage.
Critical Cisco Nexus 9000 RCE (CVE-2026-20212) & IOS XR Hardening
Cisco addresses a critical RCE flaw (CVE-2026-20212) in Nexus 9000 switches, alongside significant IOS XR hardening updates.
Evaluating LLMs for SOC Operations and Log Analysis
Discover how Cisco Talos evaluated 66 model and reasoning combinations for SOC workflows, focusing on cost, speed, and consistency.
Cisco Patches Nine Crosswork and Secure Workload Flaws
Cisco patches nine vulnerabilities in Crosswork and Secure Workload platforms, with five flaws scoring the maximum CVSS 10.0 severity rating.
CVE-2026-20349: Cisco ASA/FTD DoS Vulnerability Under Active Exploit
CISA warns of active exploitation of CVE-2026-20349, a heap inspection vulnerability causing DoS in Cisco ASA and FTD devices.
Cisco Talos: AI, Adaptive Malware, and Threat Intelligence
Cisco Talos Intelligence Integrations help defend against advanced threats like AI-driven attacks and adaptive malware by applying real-time threat intelligence.
AI-Driven Vulnerability Surges and UAT-11795 Starland RAT Campaign
Analysis of a record Patch Tuesday driven by AI vulnerability research, alongside Cisco Talos findings on UAT-11795 deploying Starland RAT.
Cisco Talos Previews AI Threats and Warlock Ransomware at Black Hat
Cisco Talos outlines research on AI threat actor tactics, Warlock ransomware, and agent identity security ahead of Black Hat USA 2026.
msaRAT: Chaos Ransomware's Covert Browser-Based C2
Cisco Talos uncovers msaRAT, a new Rust-based RAT used by Chaos ransomware for covert C2 via Chrome DevTools Protocol, evading detection.
Talos Q2 2026 Report: Phishing and Living-off-the-Land Trends
Cisco Talos Q2 2026 report reveals spikes in MFA-bypassing phishing and malicious use of remote management tools.
CVE-2026-20316: Cisco Secure FMC Hard-coded Password Vulnerability
CISA confirms active exploitation of CVE-2026-20316, a hard-coded password vulnerability in Cisco Secure Firewall Management Center.