Vulnerability Spotlight: Tinysvcmdns Multi-label DNS DoS Vulnerabilility

By Talos Group Overview Talos is disclosing a single NULL pointer dereference vulnerability in the tinysvcmdns library. Tinysvcmdns is a tiny MDNS responder implementation for publishing services. This is essentially a mini and embedded version of Avahi or Bonjour. Read More >>

Source:: Cisco Security Notice

Broadening the Art of the Possible Through Diversity

By John N. Stewart During a recent conversation with an industry peer and great friend, he asked, “How did you make Cisco’s Security and Trust Organization so inclusive and diverse?” The question made me pause for a couple reasons. First, that he thought that one person alone could be behind such a broad team achievement. Second, how this question […]

Source:: Cisco Security Notice

Broadening the Art of the Possible Through Diversity

By John N. Stewart During a recent conversation with an industry peer and great friend, he asked, “How did you make Cisco’s Security and Trust Organization so inclusive and diverse?” The question made me pause for a couple reasons. First, that he thought that one person alone could be behind such a broad team achievement. Second, how this question […]

Source:: Cisco Security Notice

Korea In The Crosshairs

By Talos Group This blog post is authored by Warren Mercer and Paul Rascagneres and with contributions from Jungsoo An. This article exposes the malicious activities of Group 123 during 2017. We assess with high confidence that Group 123 was responsible for the following six campaigns: “Golden Time” campaign. “Evil New Year” campaign. “Are you Happy?” campaign. “FreeMilk” campaign. “North Korean Human […]

Source:: Cisco Security Notice

Korea In The Crosshairs

By Talos Group This article exposes the malicious activities of Group 123 during 2017. We assess with high confidence that Group 123 was responsible for six campaigns targeting both Korean and Non-Korean institutions.

Source:: Cisco Security Notice

Korea In The Crosshairs

By Talos Group This blog post is authored by Warren Mercer and Paul Rascagneres and with contributions from Jungsoo An. This article exposes the malicious activities of Group 123 during 2017. We assess with high confidence that Group 123 was responsible for the following six campaigns: “Golden Time” campaign. “Evil New Year” campaign. “Are you Happy?” campaign. “FreeMilk” campaign. “North Korean Human […]

Source:: Cisco Security Notice

Korea In The Crosshairs

By Talos Group This article exposes the malicious activities of Group 123 during 2017. We assess with high confidence that Group 123 was responsible for six campaigns targeting both Korean and Non-Korean institutions.

Source:: Cisco Security Notice

Security Challenges and Opportunities: The Security Day at Cisco Live in Barcelona on 29th January

By James McNab Every organisation has something valuable to protect and adversaries who want to get their hands on it. The challenge is that the struggle between the relentless attackers and the tireless defenders does not always seem to be evenly balanced. Attackers have unlimited resources and an unlimited number of tries to conduct attacks. They only need […]

Source:: Cisco Security Notice

Security Challenges and Opportunities: The Security Day at Cisco Live in Barcelona on 29th January

By James McNab Every organisation has something valuable to protect and adversaries who want to get their hands on it. The challenge is that the struggle between the relentless attackers and the tireless defenders does not always seem to be evenly balanced. Attackers have unlimited resources and an unlimited number of tries to conduct attacks. They only need […]

Source:: Cisco Security Notice

Vulnerability Spotlight: Multiple Unpatched Vulnerabilities in Blender Identified

By Talos Group Technology has evolved in incredible ways that has helped people to create and visualize media like never before. Today, people can use tools such as Blender to visualize, model, and animate 3D content, especially since it’s free and open-source software. However, this also make it an attractive target for adversaries to audit and find vulnerabilities. […]

Source:: Cisco Security Notice