Don’t swing at everythingCisco Talos·Jul 23, 18:00 UTC · Jul 23, 2026RansomwareCVE-2026-60137CVE-2026-6303060
What happens when you engage Cisco Talos Incident Response?Cisco Talos·Sep 24, 10:00 UTC · Sep 24, 2025Ransomware60
How Cisco Talos powers the solutions protecting your organizationCisco Talos·Jan 7, 11:00 UTC · Jan 7, 2026Exploit / PoC60
A (somewhat) complete timeline of Talos’ historyCisco Talos·Jul 24, 10:00 UTC · Jul 24, 2024Ransomware60
More details emerge on China's widespread UkraineCyberScoop·May 5, 12:00 UTC · May 5, 2022Exploit / PoC in the wild60
ArcaneDoor - New espionage-focused campaign found targeting perimeter network devicesCisco Talos·Apr 24, 15:54 UTC · Apr 24, 2024Threat actorCVE-2025-20333CVE-2025-20362CVE-2025-20363+3 CVEs60
Talk of election security is good, but we still need more money to solve the problemCisco Talos·Sep 19, 18:00 UTC · Sep 19, 2024RansomwareCVE-2024-3825760
Russian cyber group exploits seven-year-old network vulnerabilities for longCyberScoop·Aug 20, 15:33 UTC · Aug 20, 2025VulnerabilityCVE-2018-017160
Memory corruption vulnerability in Microsoft Edge; MilesightVPN and router could be taken overCisco Talos·Jul 19, 15:58 UTC · Jul 19, 2023Vulnerability in the wildCVE-2023-36887CVE-2023-31194CVE-2023-27390160
Libbiosig, Grassroot DiCoM, Smallstep stepCisco Talos·Dec 17, 21:02 UTC · Dec 17, 2025VulnerabilityCVE-2025-66043CVE-2025-66048CVE-2025-53618+4 CVEs60
10 new vulnerabilities disclosed by Talos, including use-afterCisco Talos·Sep 27, 16:00 UTC · Sep 27, 2023VulnerabilityCVE-2023-3421CVE-2023-32653CVE-2023-39453+7 CVEs60
Threat Source newsletter (Nov. 7, 2019)Cisco Talos·Nov 7, 19:00 UTC · Nov 7, 2019RansomwareCVE-2019-1372060
Multiple vulnerabilities in Adobe Acrobat Reader could lead to remote code executionCisco Talos·Feb 29, 13:39 UTC · Feb 29, 2024VulnerabilityCVE-2024-20735CVE-2024-20747CVE-2024-20749+23 CVEs60
catdoc zero-day, NVIDIA, High-Logic FontCreator and Parallel vulnerabilitiesCisco Talos·Jun 11, 14:03 UTC · Jun 11, 2025Exploit / PoCCVE-2024-48877CVE-2024-52035CVE-2024-54028+6 CVEs60
10 Zero-Day Vulnerabilities In Industrial Cell Router Could Lead To Code Execution, Buffer OverflowsCisco Talos·Oct 11, 16:00 UTC · Oct 11, 2023Exploit / PoCCVE-2023-32632CVE-2023-24479CVE-2023-32645+11 CVEs60
North Korean hacking ops continue to exploit Log4ShellCyberScoop·Dec 11, 13:00 UTC · Dec 11, 2023Ransomware in the wild60
Why a Cisco Talos Incident Response Retainer is a gameCisco Talos·Sep 17, 10:00 UTC · Sep 17, 2025Ransomware60
Critical vulnerability in ManageEngine could lead to file creation, dozens of other vulnerabilities disclosed by Talos to start 2024Cisco Talos·Jan 18, 13:56 UTC · Jan 18, 2024VulnerabilityCVE-2023-47211CVE-2023-38618CVE-2023-38621+52 CVEs60
Out-of-bounds reads in Adobe Acrobat; Foxit PDF Reader contains vulnerability that could lead to SYSTEMCisco Talos·May 29, 16:08 UTC · May 29, 2024VulnerabilityCVE-2024-30311CVE-2024-30312CVE-2024-29072+26 CVEs60
Critical Code Execution Flaw Found in LIVE555 Streaming LibraryThe Hacker News·Oct 22, 16:46 UTC · Oct 22, 2018VulnerabilityCVE-2018-401360
Talos discloses multiple zero-day vulnerabilities, two of which could lead to code executionCisco Talos·May 8, 16:00 UTC · May 8, 2024Exploit / PoCCVE-2023-49606CVE-2023-47166CVE-2023-4721260
NotPetya - Ukraine secret service announces a joint investigation with Europol, FBI, and NCASecurity Affairs·Oct 14, 14:18 UTC · Oct 14, 2017Ransomware60
9 vulnerabilities found in VPN software, including 1 critical issue that could lead to remote code executionCisco Talos·Oct 25, 16:00 UTC · Oct 25, 2023VulnerabilityCVE-2023-22325CVE-2023-23581CVE-2023-22308+16 CVEs60
Norway issues warning after ‘important businesses’ affected by Cisco zeroThe Record·Oct 24, 12:22 UTC · Oct 24, 2023Exploit / PoC in the wildCVE-2023-20198CVE-2023-2027360
Notpetya - The Petya variant used in the massive attack is a wiper disguised by a ransomwareSecurity Affairs·Oct 14, 15:09 UTC · Oct 14, 2017Ransomware60
Looking Glasses with BaconCisco Talos·Sep 11, 17:37 UTC · Sep 11, 2014Vulnerability in the wildCVE-2014-3927CVE-2014-3926CVE-2014-3928+3 CVEs60
Over 70,000 Memcached Servers Still Vulnerable to Remote HackingThe Hacker News·Jul 18, 15:52 UTC · Jul 18, 2017RansomwareCVE-2016-8704CVE-2016-8705CVE-2016-870660
Hackers linked to North Korea targeted Indian medical org, energy sectorThe Record·Feb 7, 14:55 UTC · Feb 7, 2023RansomwareCVE-2022-27925CVE-2022-3704260
Microsoft Patch Tuesday, June 2018 EditionKrebs on Security·Jun 12, 21:30 UTC · Jun 12, 2018VulnerabilityCVE-2018-826760
A new alert system from CISA seems to be effective — now we just need companies to sign upCisco Talos·May 9, 18:00 UTC · May 9, 2024Ransomware in the wildCVE-2023-4960660
Hafnium Update: Continued Microsoft Exchange Server ExploitationCisco Talos·Mar 10, 00:52 UTC · Mar 10, 2021Exploit / PoC60
Threat Source newsletter (Jan. 30, 2020)Cisco Talos·Jan 30, 19:00 UTC · Jan 30, 2020RansomwareCVE-2019-1978160
Allscripts faces lawsuit after ransomware attack impacts doctors' offices across U.S.CyberScoop·Jan 29, 18:57 UTC · Jan 29, 2018Ransomware in the wild60
THN Weekly Roundup — 10 Most Important Stories You Shouldn't MissThe Hacker News·Jul 22, 18:40 UTC · Jul 22, 2017Ransomware in the wildCVE-2017-11421CVE-2017-7494CVE-2017-976560
North Korean operatives spotted using evasive techniques to steal data and cryptocurrencyCyberScoop·Oct 16, 21:54 UTC · Oct 16, 2025Ransomware in the wild60
Salt Typhoon gained initial access to telecoms through Cisco devicesCyberScoop·Feb 20, 22:31 UTC · Feb 20, 2025Threat actor in the wildCVE-2018-0171CVE-2023-20198CVE-2023-2027360
New decryptor for Babuk Tortilla ransomware variant releasedCisco Talos·Jan 9, 09:00 UTC · Jan 9, 2024Ransomware60