Published file metadata, source observations, indicators, and research history in one bounded catalog.
Sources represented on this page. Publication and observation dates describe the content; successful batch dates describe local collection. A recent batch does not certify complete coverage or current provider availability.
1 sources: 0 stale, 0 needing attention, 0 paused, 1 unverified.
Stale means older than twice the recorded collection interval, with a minimum of one hour; without an interval, the threshold is 24 hours. Cached content remains available while a feed is stale, paused, or unverified.
In this week's Threat Source, David talks about why focusing on your security basics is still your best bet, even in a world with rapid AI advancements.
First reported Sep 17, 2026 18:00 UTCCatalog metadata updated Oct 08, 2026 03:42 UTCOpen evidence recordWhat really frustrates an adversary? Eight Cisco Talos researchers share practical ways to make their next move slower and riskier, from deception and behavioral detection to breaking attack dependencies and resisting manufactured urgency.
First reported Oct 01, 2026 10:00 UTCCatalog metadata updated Oct 08, 2026 03:42 UTCOpen evidence recordThe cybersecurity community has seen examples of autonomous agents, built inside AI labs, attacking public infrastructure. How you prepare for agentic threats is what makes the difference during real incidents.
First reported Oct 07, 2026 10:00 UTCCatalog metadata updated Oct 08, 2026 03:42 UTCOpen evidence recordRansomware incidents in Japan rose 4.7% year over year. The Gentlemen was the most active group, with leak-site listings more than doubling from January to July. Qilin ranked second and appeared to use AI, while SMEs with capital under JPY 1 billion represented 80% of victims.
First reported Sep 17, 2026 10:00 UTCCatalog metadata updated Oct 08, 2026 03:42 UTCOpen evidence recordIn this week’s newsletter Martin muses over a very suspicious elicitation over social media and the true value of trust within the cyber ecosystem. Hubris might be the real vulnerability that the cyber industry must worry about.
First reported Sep 24, 2026 18:00 UTCCatalog metadata updated Oct 08, 2026 03:42 UTCOpen evidence recordIn this week’s edition, Amy reflects on the importance of prioritizing family and personal well-being over the pressure to remain constantly productive.
First reported Oct 01, 2026 18:00 UTCCatalog metadata updated Oct 08, 2026 03:42 UTCOpen evidence recordCisco Talos is actively tracking the exploitation of two vulnerabilities in Cisco’s Secure Firewall Management Center (FMC) Software.
First reported Sep 09, 2026 16:08 UTCCatalog metadata updated Oct 08, 2026 03:42 UTCOpen evidence recordCisco Talos’ Vulnerability Discovery & Research team recently disclosed vulnerabilities in Adobe, Apple, Foxit Reader, and Microsoft.The vulnerabilities mentioned in this blog post have been patched by their respective vendors, in adherence to Cisco’s third-party vulnerability disclosure policy. For Snort coverage that can detect
First reported Oct 07, 2026 19:27 UTCCatalog metadata updated Oct 08, 2026 03:42 UTCOpen evidence recordCLOSEDQUORUM, a malware binary discovered through Cisco Talos’ CAIRN project, exhibits fully autonomous command and control (C2). It represents a shift in effort displacement for attackers, in which expanding portions of the attack chain can be executed without operator involvement.
First reported Sep 22, 2026 10:00 UTCCatalog metadata updated Oct 08, 2026 03:42 UTCOpen evidence recordIn this week's Threat Source newsletter, Joe explores why the word "burnout" often fails to capture the true toll of working in the cybersecurity industry and why we need better language to address it.
First reported Sep 10, 2026 18:00 UTCCatalog metadata updated Oct 08, 2026 03:42 UTCOpen evidence recordMicrosoft has released its monthly security update for September 2026, which includes 973 vulnerabilities affecting a range of products, including 113 that Microsoft marked as "critical."
First reported Sep 08, 2026 22:16 UTCCatalog metadata updated Oct 08, 2026 03:42 UTCOpen evidence recordTalos is releasing CAIRN, a research toolkit for hunting, classifying, and tracking emerging AI-integrated malware.
First reported Sep 22, 2026 10:00 UTCCatalog metadata updated Oct 08, 2026 03:42 UTCOpen evidence recordCisco Talos uncovered a cluster of activity we track as UAT-11587 targeting government and policy organizations across Asia, including in Taiwan, India, the Philippines, and Cambodia, to deliver a previously undocumented backdoor referred to as “Antino” in developer artifacts.
First reported Sep 30, 2026 10:00 UTCCatalog metadata updated Oct 08, 2026 03:42 UTCOpen evidence recordThis new proactive service joins the suite of retainer offerings to provide dedicated, intelligence-led hunting specifically for your organization’s most high-value IT assets.
First reported Sep 29, 2026 10:00 UTCCatalog metadata updated Oct 08, 2026 03:42 UTCOpen evidence recordAdvances in AI technology will continue to identify vulnerabilities that in some circumstances are difficult, or effectively impossible, to patch. Appropriate network segmentation, rigorous visibility, and the deployment of NGFW/IPS combinations can provide a powerful compensatory layer.
First reported Sep 16, 2026 10:00 UTCCatalog metadata updated Oct 08, 2026 03:42 UTCOpen evidence recordA filename, label, or report mention alone does not establish maliciousness. Observation dates describe cited sources; collection dates describe this local metadata catalog. No malware samples are stored, fetched, or executed by these pages.