From CVE Disclosure to Agentic Protection in 45 Minutes. Why it Matters Now.
A CVE lands in the morning. Hours later, attackers are exploiting it in the wild. The patch is not ready, the change window is days away, and the clock is…
-
-
Weekly Threat Bulletin – June 17th, 2026
GreatXML BitLocker 0-Day Bypass Exploited Through Defender Offline Scan A newly identified zero-day vulnerability, dubbed “GreatXML,” enables a complete bypass of BitLocker encryption on Windows systems by exploiting Microsoft Defender’s…
-
What It Takes to Secure Claude Cowork Across the AI Enterprise
You’ve watched the demos. Whether it’s Claude Cowork, ChatGPT Enterprise, GitHub Copilot, Cursor, or internally developed agents, AI systems are no longer answering questions. They are connecting to enterprise data,…
-
Developer Credential Economy: Inside look at the Miasma worm
A stolen session cookie sat in underground markets for seven weeks before attackers used it to poison 32 Red Hat packages in the npm software registry, an example of the…
-
Machine Speed, Human Judgement: How AI Changed the SOC in 2026
Having worked across nearly every layer of cybersecurity – from analyst to CISO for two different organizations – I have seen firsthand how difficult security investigations used to be. I…
-
Browser-Only Ransomware: From LLM Hallucinations to a Practical Attack Technique
Research by: Alexey Bukhteyev Key Takeaways AI can turn high-level malicious ideas into concrete techniques, and can independently design and implement novel attack paths that have not yet appeared in real-world…
-
Modernizing Global Vulnerability Standards For The Age Of AI
As AI-driven vulnerability discovery accelerates, the cybersecurity ecosystem is being forced to examine whether the standards, disclosure processes, and prioritization frameworks defenders rely on can still keep pace. Many of…
-
Running through the Arctic (and the threat landscape)
Ever wonder how someone goes from studying human viruses to leading cybersecurity teams? In this Humans of Talos, we’re joined by Martin Lee, EMEA Lead, to talk about his journey…
-
Cato CTRL™ Threat Research: Operation Poisson – Analyzing a Cybercriminal’s Entire Operation
TL;DR Cato CTRL recently analyzed an operator’s command-and-control (C2) server’s entire 33 days operation, including the steps he took to preserve access after the takedown. 339 commands. Four French victims….
-
Weekly Threat Bulletin – July 8th, 2026
Malware: Anubis, Arkei, AryStinger, Chisel, Coathanger, CryptoBandits, CyberStrike Harvester, DarkComet, DarkKomet, DragonForce, EKZ Infostealer, EKZ Stealer, FakeUpdates, fg_sniffer, FGSniffer, FortigateSniffer, FortiGate Sniffer, GentleKiller, Gentlemen, GOLD IONIC, harvest_orig, HavocKiller, HexKiller, HwAudKiller,…
