corpus.blog
41554 blogs · [ { "id": "01a0d74b-aeb5-73ea-beb1-139ca554c8a4", "title": "Trust and the enticing consultancy offer", "url": "https://blog.talosintelligence.com/trust-and-the-enticing-consultancy-offer/", "published_at": "2026-09-24T18:00:37+00:00" }, { "id": "01a0d74b-aeb5-73ea-beb1-139ca5693b5c", "title": "The Closed Quorum: Inside the first reported autonomous AI C2 implant", "url": "https://blog.talosintelligence.com/the-closed-quorum-inside-the-first-reported-autonomous-ai-c2-implant/", "published_at": "2026-09-22T10:00:58+00:00" }, { "id": "01a0d74b-aeb5-73ea-beb1-139ca5d4551c", "title": "Introducing CAIRN: Frontier tracking for AI-integrated malware", "url": "https://blog.talosintelligence.com/introducing-cairn-frontier-tracking-for-ai-integrated-malware/", "published_at": "2026-09-22T10:00:25+00:00" }, { "id": "01a0d74b-aeb5-73ea-beb1-139ca6213b37", "title": "Should you care about an “AI slowdown?”", "url": "https://blog.talosintelligence.com/should-you-care-about-an-ai-slowdown/", "published_at": "2026-09-17T18:00:23+00:00" }, { "id": "01a0d74b-aeb5-73ea-beb1-139ca645dc05", "title": "Ransomware incidents in Japan in the first half of 2026: Investigation of The Gentlemen’s infrastructure and evidence of Qilin's AI use", "url": "https://blog.talosintelligence.com/ransomware-incidents-in-japan-in-the-first-half-of-2026/", "published_at": "2026-09-17T10:00:43+00:00" }, { "id": "01a0d74b-aeb5-73ea-beb1-139ca69dd437", "title": "Securing the unpatchable in an age of AI-driven vulnerabilities", "url": "https://blog.talosintelligence.com/securing-the-unpatchable-in-an-age-of-ai-driven-vulnerabilities/", "published_at": "2026-09-16T10:00:36+00:00" }, { "id": "01a08c80-9650-70e0-b582-ff53842891ab", "title": "We've got one word for it, and it's usually the wrong one", "url": "https://blog.talosintelligence.com/weve-got-one-word-for-it-and-its-usually-the-wrong-one/", "published_at": "2026-09-10T18:00:15+00:00" }, { "id": "01a08754-cb61-730c-831c-efbe06770405", "title": "Active exploitation of Cisco Secure Firewall Management Center vulnerabilities", "url": "https://blog.talosintelligence.com/fmc-ongoing-exploitation/", "published_at": "2026-09-09T16:08:59+00:00" }, { "id": "01a08754-cb61-730c-831c-efbe068c54f9", "title": "Microsoft Patch Tuesday for September 2026 — Snort rules and prominent vulnerabilities", "url": "https://blog.talosintelligence.com/microsoft-patch-tuesday-for-september-2026/", "published_at": "2026-09-08T22:16:35+00:00" }, { "id": "01a08215-7ff6-704b-ac9e-4433c9bc15e3", "title": "ClearFake WebDAV infection chain delivers Amatera stealer, ZigCryptoStealer, and NetSupport Manager", "url": "https://blog.talosintelligence.com/clearfake-webdav-infection-chain/", "published_at": "2026-09-08T10:01:07+00:00" }, { "id": "01a08215-7ff6-704b-ac9e-4433ca75a937", "title": "ClickFix moves into the browser: Cryptocurrency theft with Google-hosted C2", "url": "https://blog.talosintelligence.com/clickfix-moves-into-the-browser/", "published_at": "2026-09-08T10:00:38+00:00" }, { "id": "01a07df2-022b-723d-a298-b1e8e2e5bcf5", "title": "The story behind the intelligence", "url": "https://blog.talosintelligence.com/the-story-behind-the-intelligence/", "published_at": "2026-09-03T18:00:13+00:00" }, { "id": "01a07df2-022b-723d-a298-b1e8e34e7365", "title": "“Sorry, I can’t help with that”: How your guardrails might become the attacker’s best friend", "url": "https://blog.talosintelligence.com/sorry-i-cant-help-with-that-how-your-guardrails-might-become-the-attackers-best-friend/", "published_at": "2026-08-27T18:00:24+00:00" }, { "id": "01a07df2-022b-723d-a298-b1e8e4163d9c", "title": "JavaScript obfuscation: From party trick to phishing kit", "url": "https://blog.talosintelligence.com/javascript-obfuscation-from-party-trick-to-phishing-kit/", "published_at": "2026-08-27T10:00:27+00:00" }, { "id": "01a07df2-022b-723d-a298-b1e8e4e719ac", "title": "Choose your fighter: Balancing competing requirements to select models for your AI SOC", "url": "https://blog.talosintelligence.com/choose-your-fighter-balancing-competing-requirements-to-select-models-for-your-ai-soc/", "published_at": "2026-08-26T10:00:05+00:00" }, { "id": "01a07df2-022b-723d-a298-b1e8e4fff2d0", "title": "The safety penalty: Reclaiming operational sovereignty in the age of AI", "url": "https://blog.talosintelligence.com/the-safety-penalty-reclaiming-operational-sovereignty-in-the-age-of-ai/", "published_at": "2026-08-25T10:00:22+00:00" }, { "id": "01a07df2-022b-723d-a298-b1e8e5998f87", "title": "Is Cyber missing the Marque?", "url": "https://blog.talosintelligence.com/is-cyber-missing-the-marque/", "published_at": "2026-08-20T18:00:18+00:00" }, { "id": "01a07df2-022b-723d-a298-b1e8e675e498", "title": "UAT-10147 deploys SPECTRE: A cross-platform implant with Linux rootkit and BYOVD capabilities", "url": "https://blog.talosintelligence.com/uat-10147-deploys-spectre-a-cross-platform-implant-with-linux-rootkit-and-byovd-capabilities/", "published_at": "2026-08-20T10:00:50+00:00" }, { "id": "01a07df2-022b-723d-a298-b1e8e7067d2c", "title": "UAT-10147: Chinese-speaking adversary integrates agentic AI into post-compromise operations", "url": "https://blog.talosintelligence.com/uat-10147-chinese-speaking-adversary-integrates-agentic-ai-into-post-compromise-operations/", "published_at": "2026-08-20T10:00:32+00:00" }, { "id": "01a07df2-022b-723d-a298-b1e8e7976f27", "title": "Describing attacks with crime script analysis", "url": "https://blog.talosintelligence.com/describing-attacks-with-crime-script-analysis/", "published_at": "2026-08-19T10:00:52+00:00" }, { "id": "01a07df2-022b-723d-a298-b1e8e8563b1b", "title": "Curiouser and Curiouser", "url": "https://blog.talosintelligence.com/curiouser-and-curiouser/", "published_at": "2026-08-13T18:00:18+00:00" }, { "id": "01a07df2-022b-723d-a298-b1e8e8865081", "title": "Dissecting the JWR phishing framework", "url": "https://blog.talosintelligence.com/dissecting-the-jwr-phishing-framework/", "published_at": "2026-08-13T10:00:35+00:00" }, { "id": "01a07df2-022b-723d-a298-b1e8e972ded9", "title": "Microsoft Patch Tuesday for August 2026 — Snort rules and prominent vulnerabilities", "url": "https://blog.talosintelligence.com/microsoft-patch-tuesday-for-august-2026/", "published_at": "2026-08-11T22:21:02+00:00" }, { "id": "01a07df2-022b-723d-a298-b1e8e9f3919a", "title": "Why metaphor may dictate your security strategy", "url": "https://blog.talosintelligence.com/why-metaphor-may-dictate-your-security-strategy/", "published_at": "2026-08-06T18:00:01+00:00" }, { "id": "01a07df2-022b-723d-a298-b1e8ea7548b8", "title": "“Keep going, bro. You’ve got this!” A data-driven look at how adversaries are weaponizing AI", "url": "https://blog.talosintelligence.com/keep-going-bro-youve-got-this-a-data-driven-look-at-how-adversaries-are-weaponizing-ai/", "published_at": "2026-08-04T10:00:11+00:00" }, { "id": "01a07df2-022b-723d-a298-b1e8ea9b2845", "title": "[Webinar] Tales from the Frontlines: An exclusive briefing on Q2 incidents", "url": "https://blog.talosintelligence.com/webinar-tales-from-the-frontlines-an-exclusive-briefing-on-q2-incidents/", "published_at": "2026-08-03T16:00:12+00:00" }, { "id": "01a0e27c-76a8-7102-9719-9e41be74e726", "title": "Attribution", "url": "https://blog.talosintelligence.com/2020/08/attribution-puzzle.html", "published_at": "2020-08-14T20:10:38+00:00" }, { "id": "01a0e27c-76a8-7102-9719-9e41bf439ea0", "title": "Fingerprint cloning", "url": "https://blog.talosintelligence.com/2020/04/fingerprint-research.html)", "published_at": "2020-04-21T11:12:45+00:00" }, { "id": "01a0e27c-76a8-7102-9719-9e41c02b2807", "title": "China Chopper still active 9 years later", "url": "https://blog.talosintelligence.com/2019/08/china-chopper-still-active-9-years-later.html", "published_at": "2019-08-29T11:20:01+00:00" } ] posts Claim your blog
Back to Talos Blog
Blog · corpus.blog/blogs/blog.talosintelligence.com/posts

Talos Blog

blog.talosintelligence.com

2026

Trust and the enticing consultancy offeroriginal ↗
24 Sept 2026
The Closed Quorum: Inside the first reported autonomous AI C2 implantoriginal ↗
22 Sept 2026
Introducing CAIRN: Frontier tracking for AI-integrated malwareoriginal ↗
22 Sept 2026
Should you care about an “AI slowdown?”original ↗
17 Sept 2026
Ransomware incidents in Japan in the first half of 2026: Investigation of The Gentlemen’s infrastructure and evidence of Qilin's AI useoriginal ↗
17 Sept 2026
Securing the unpatchable in an age of AI-driven vulnerabilitiesoriginal ↗
16 Sept 2026
We've got one word for it, and it's usually the wrong oneoriginal ↗
10 Sept 2026
Active exploitation of Cisco Secure Firewall Management Center vulnerabilitiesoriginal ↗
9 Sept 2026
Microsoft Patch Tuesday for September 2026 — Snort rules and prominent vulnerabilitiesoriginal ↗
8 Sept 2026
ClearFake WebDAV infection chain delivers Amatera stealer, ZigCryptoStealer, and NetSupport Manageroriginal ↗
8 Sept 2026
ClickFix moves into the browser: Cryptocurrency theft with Google-hosted C2original ↗
8 Sept 2026
The story behind the intelligenceoriginal ↗
3 Sept 2026
“Sorry, I can’t help with that”: How your guardrails might become the attacker’s best friendoriginal ↗
27 Aug 2026
JavaScript obfuscation: From party trick to phishing kitoriginal ↗
27 Aug 2026
Choose your fighter: Balancing competing requirements to select models for your AI SOCoriginal ↗
26 Aug 2026
The safety penalty: Reclaiming operational sovereignty in the age of AIoriginal ↗
25 Aug 2026
Is Cyber missing the Marque?original ↗
20 Aug 2026
UAT-10147 deploys SPECTRE: A cross-platform implant with Linux rootkit and BYOVD capabilitiesoriginal ↗
20 Aug 2026
UAT-10147: Chinese-speaking adversary integrates agentic AI into post-compromise operationsoriginal ↗
20 Aug 2026
Describing attacks with crime script analysisoriginal ↗
19 Aug 2026
Curiouser and Curiouseroriginal ↗
13 Aug 2026
Dissecting the JWR phishing frameworkoriginal ↗
13 Aug 2026
Microsoft Patch Tuesday for August 2026 — Snort rules and prominent vulnerabilitiesoriginal ↗
11 Aug 2026
Why metaphor may dictate your security strategyoriginal ↗
6 Aug 2026
“Keep going, bro. You’ve got this!” A data-driven look at how adversaries are weaponizing AIoriginal ↗
4 Aug 2026
[Webinar] Tales from the Frontlines: An exclusive briefing on Q2 incidentsoriginal ↗
3 Aug 2026

2020

Attributionoriginal ↗
14 Aug 2020
Fingerprint cloningoriginal ↗
21 Apr 2020

2019

China Chopper still active 9 years lateroriginal ↗
29 Aug 2019