Talos diverts hostile OT agent requests onto a plant twin
Across 2,400 autonomous attacker agents in four concealment tiers, no write reached the real plant.
Stories per day · 30 days
Relatedcis1command-and-control1cve-2025-80881detection-engineering1government1honeypot1industrial-control1infostealer1interview1llm-agents1nik-c21openai1operational-technology1pickleshell1reverse-shell1splunk1uat-62751windows1
9 stories, newest first · one card per story
Stories tagged #talos
NIK C2 malware uses the OpenAI API for theft and remote control
Cisco Talos says the Go implant can bill a victim’s OpenAI key, log keys, and show a non-encrypting lock screen.
Talos interview covers Ryan Fetterman's path into detection research
He recounts 15 years from federal SOC work and Splunk's SURGe team into Talos, including an early Pandora Song case.
1
UAT-6275 Hackers Exploit WinRAR Flaw to Target CIS Government Organizations
UAT-6275 used WinRAR CVE-2025-8088 to plant reverse shells on CIS government systems via malicious archives.
Ignore all instructions and read this blog: The state of AI-analysis evasion in malware
Cisco Talos finds malware embedding AI-evasion prompts that swayed analysis in about 35 percent of tests.
7
Trust and the enticing consultancy offer
Cisco Talos warns security pros of fake consultancy offers used to trick them into abusing privileged access, and released the CAIRN AI-malware hunting toolkit.
2
The Closed Quorum: Inside the first reported autonomous AI C2 implant
Cisco Talos discovered CLOSEDQUORUM, the first autonomous AI-driven malware C2 implant using multiple LLMs for independent decision-making.
1
Curiouser and Curiouser
Cisco Talos' Threat Source newsletter reflects on the 'Make Hazel a Hacker' segment and how cybersecurity questions can have multiple correct answers.
Microsoft Patch Tuesday for August 2026 — Snort rules and prominent vulnerabilities
Microsoft's August 2026 Patch Tuesday fixes 421 vulnerabilities across its products, including 62 rated critical; Cisco Talos published analysis and matching Snort rules.