Talos Takes

Talos’ spin on security news

Join Talos researchers and analysts as they address the top news and trends in cyber security. The rotating cast of hosts and guests will cover everything from breaking news, to attacker trends and emerging threats.

Subscribe
  • Talos Takes : Episode 53
    2021-05-14

    Talos Takes Ep. #53: What can we learn from those air fryer vulnerabilities?

    Everyone had jokes when it came to the vulnerabilities we recently disclosed in a WiFi-connected air fryer. But there are actually some lessons to take away from this, such as: “Not everything needs to be connected to the internet.” Joe Marshall joins the show this week to discuss all things “smart” appliances, how to protect your network and the repercussions of these specific air fryer vulnerabilities.

    Hosted By:
    Jon Munshaw
    Featuring:
    Joe Marshall@ImmortanJo3
    Download
    Run Time: 11:00

    Keywords
    • IoT
    • ICS
    • vulnerabilities
    • patching

  • Talos Takes : Episode 52
    2021-05-07

    Talos Takes Ep. #52: Why not a world passwordless day?

    To celebrate World Password Day this week, we’re talking about getting rid of passwords! Dave Lewis, a global advisory CISO for Cisco Secure, joins Jon to talk about all things passwordless. This is a new initiative Cisco Secure and Duo have undertaken to get network administrators to move away from using passwords in favor of other forms of authentication. Jon and Dave discuss why passwords can be dangerous, the benefits of going passwordless and how to convince longtime users to ditch traditional login credentials.

    Hosted By:
    Jon Munshaw
    Featuring:
    Dave Lewis@gattaca
    Download
    Run Time: 9:40

    Keywords
    • passwords
    • passwordless
    • MFA
    • Duo

  • Talos Takes : Episode 51
    2021-04-29

    Talos Takes Ep. #51: COVID and tax scams go hand-in-hand this year

    We can set our watches to tax scams every year in April. The bad guys are always looking to steal your information, promising to get you a bigger tax return or do your taxes for you. This year is a bit different because Tax Day is a bit later than usual thanks to — you guessed it — COVID. Attackers are now combining these two topics to create spam campaigns, promising to provide you new information about how COVID affects your taxes, or even promising to send you a gift in exchange for receiving your COVID vaccine. Jaeson Schultz makes his inaugural appearance on Talos Takes to discuss what he’s seeing in the wild and how you can avoid these common scams.

    Hosted By:
    Jon Munshaw
    Featuring:
    Jaeson Schultz@jaesonschultz
    Download
    Run Time: 13:18

    Keywords
    • scams
    • spam
    • COVID
    • tax day
    • email

  • Talos Takes : Episode 50
    2021-04-23

    Talos Takes Ep. #50: Attackers are using Discord just as much as you are

    Cisco Talos recently discovered a wave of attackers spreading malware via collaboration apps like Discord and Slack. On this week’s episode of Talos Takes, Nick Biasini joins the show to bring us inside his research process for this post and discuss why these attacks have been so successful. Jon brings up his Dungeons & Dragons group, too, if you’re interested in that sort of thing.

    Hosted By:
    Jon Munshaw
    Featuring:
    Nick Biasini@InfoSec_Nick
    Download
    Run Time: 7:18

    Keywords
    • malware
    • Discord
    • spam

  • Talos Takes : Episode 49
    2021-04-16

    Talos Takes Ep. #49: LodaRAT's connection to Android devices

    Chris Neal from Talos Outreach has followed LodaRAT for years now. It’s gone from a fairly small threat to a full-on malware with several features that target all sorts of Android devices. Chris joins the show this week to discuss his history of researching LodaRAT and updates us on its latest TTPs. Find out how this trojan tries to trick users into downloading it on their phones and how it hunts for your banking information.

    Hosted By:
    Jon Munshaw
    Featuring:
    Chris Neal
    Download
    Run Time: 6:05

    Keywords
    • malware
    • trojans
    • banking trojan
    • mobile malware
    • LodaRAT

  • Talos Takes : Episode 48
    2021-04-09

    Talos Takes Ep. #48: The history of ObliqueRAT

    After researching and writing about ObliqueRAT for several months now, Asheer Malhotra joins Talos Takes for the first time to discuss this trojan. We’ve seen this malware evolve over the past year or so to ad new evasion techniques and find ways to avoid email filters and usual antivirus protections. Asheer talks about his history researching this malware and provides some advice on how to avoid email spam and the other maldocs these actors try to spread.

    Hosted By:
    Jon Munshaw
    Featuring:
    Asheer Malhotra@asheermalhotra
    Download
    Run Time: 7:54

    Keywords
    • ObliqueRAT
    • malware
    • trojans
    • spam

  • Talos Takes : Episode 47
    2021-04-02

    Talos Takes Ep. #47: Masslogger

    On this week’s episode of Talos Takes, we go back a month or so to reflect on the Masslogger trojan Talos wrote about earlier this year. This malware may not make national headlines, but that doesn’t mean you should just ignore it. Find out where this trojan is hiding and why it’s after your Outlook and Google Chrome login credentials.

    Hosted By:
    Jon Munshaw
    Featuring:
    Nick Biasini@InfoSec_Nick
    Download
    Run Time: 4:52

    Keywords
    • trojan
    • Masslogger
    • malware
    • Threats

  • Talos Takes : Episode 46
    2021-03-26

    Talos Takes Ep. #46 (XL Edition): Snort 3 roundtable discussion

    We’ve got another special XL episode this week, this time about Snort 3. This roundtable covers everything you could know about Snort 3’s life, going back as far as its inception in the early 2010s. We even went out of our way to get Marty Roesch, the creator of Snort.

    Marty, along with our other panelists, discusses the origins of Snort 3, what benefits you can gain by upgrading and what other features you can expect to see in the future.

    Hosted By:
    Joel Esler@JoelEsler
    Featuring:
    Sean Baird
    Download
    Run Time: 53:13

    Keywords
    • Snort
    • Snort 3

  • Talos Takes : Episode 45
    2021-03-19

    Talos Takes Ep. #45: Finding an alternative to SMS multi-factor authentication

    It was only a matter of time before we had Wendy Nather from Cisco Secure Duo on the show. We finally met Beers with Talos’ level of stardom, as Wendy joins the show to discuss SMS messages as a form of multi-factor authentication. We break down why SMS authentication is still around and used by some of our most important services like banks, and what alternatives are out there. We also discuss the dangers of SIM-jacking attacks and the benefits of using Duo’s app-based authentication.

    Hosted By:
    Jon Munshaw
    Featuring:
    Wendy Nather@wendynather
    Download
    Run Time: 8:30

    Keywords
    • MFA
    • SMS
    • 2FA
    • passwords

  • Talos Takes : Episode 44
    2021-03-12

    Talos Takes Ep. #44: A super-sized edition for a roundtable discussion on SolarWinds

    Welcome to the first-ever XL edition of Talos Takes. This one is a little longer than usual, but we promise you it’s worth it. We recently brought together researchers from all corners of Talos to talk about what we know about SolarWinds so far, and what’s still to be discovered. Our various teams have spent the past several months diving deep into the SolarWinds supply chain attack, and this is a collection of Talos’ knowledge on the current situation. Talking points include whether it’s fair to refer to this campaign as “SolarWinds,” what other initial infection vectors there may be, the breadth of the attack and more boots-on-the-ground intelligence. If you want to watch the video version, head to our YouTube page.

    Hosted By:
    Jon Munshaw
    Featuring:
    Nick Biasini@InfoSec_Nick, Joe Marshall@ImmortanJo3, and Pierre Cadieux@pchobbit
    Download
    Run Time: 34:49

    Keywords
    • SolarWinds
    • Incident Response
    • supply chain
    • news
    • Headlines

  • Talos Takes : Episode 43
    2021-03-05

    Talos Takes Ep. #43: Microsoft Exchange Server emergency show

    We put this week’s Talos Takes episode together last minute to discuss the Microsoft Exchange Server zero-day vulnerabilities Microsoft disclosed earlier this week. Nick Biasini joins the show to discuss mitigation strategies and what these vulnerabilities mean for your environment at-large. Plus, we discuss why this is another case of patching above all else. For more coverage on this topic, check out the Talos blog.

    Hosted By:
    Jon Munshaw
    Featuring:
    Nick Biasini@InfoSec_Nick
    Download
    Run Time: 5:30

    Keywords
    • Microsoft
    • Exchange
    • vulnerabilities
    • CVEs
    • zero-day

  • Talos Takes : Episode 42
    2021-02-26

    Talos Takes Ep. #42: Seriously folks, save your logs

    When Pierre Cadieux steps into a Cisco Talos Incident Response engagement, the first thing he wants to do is check out the customer’s logs. But if there are no logs to be found, he’ll be pretty limited in the kinds of insights he can provide.

    This has come up several times during the SolarWinds era, when customers are wanting to know if they were targeted in the widespread supply chain attack. So in this episode of Talos Takes, Pierre joins the show to discuss why it’s so important to keep logs for everything — log-ins, events, applications and more.

    Hosted By:
    Jon Munshaw
    Featuring:
    Pierre Cadieux@pchobbit
    Download
    Run Time: 7:30

    Keywords
    • SolarWinds
    • Incident Response
    • security logs
    • Cisco Talos Incident Response
    • security

  • Talos Takes : Episode 41
    2021-02-11

    Talos Takes Ep. #41: Why you should upgrade to Snort 3

    For this week’s episode of Talos Takes, we’re switching back to Snort talk. For anyone who hasn’t been on security Twitter over the past month, you may not know that we released the Snort 3 GA last month — formally known as Snort 3.1.0. To celebrate, Nick Mavis joins the show again to discuss Snort 3’s new features and upgrades over 2.9.X. Nick, who regularly writes Snort rules for Cisco Talos and has been working hands-on with both versions of Snort for years, talks about how the rules improve with Snort 3, why detection and protection are better and everything else he loves about Snort 3. For more, check out the Snort 3 page on Snort.org.

    Hosted By:
    Jon Munshaw
    Featuring:
    Nicholas Mavis
    Download
    Run Time: 6:02

    Keywords
    • Snort
    • Snort 3

  • Talos Takes : Episode 40
    2021-02-05

    Talos Takes Ep. #40: Lessons learned from our conversations with a ransomware operator

    For the first time in Talos Takes history, we have a whopping TWO guests on to talk about Talos’ latest research paper. In this episode, Dmytro Korzhevin and Azim Khodjibaev discuss their work interviewing a LockBit ransomware operator. They spent multiple weeks speaking to this actor over social media, and eventually turned their conversations into a paper that lays out what we learned about the ransomware landscape. Dmytro and Azim talked about lessons learned, what surprised them about the threat actor, and how actors choose their targets.

    Hosted By:
    Jon Munshaw
    Featuring:
    Azim Khodjibaev@AShukuhi and Dmytro Korzhevin@dkorzhevin
    Download
    Run Time: 8:12

    Keywords
    • LockBit
    • ransomware
    • malware

  • Talos Takes : Episode 39
    2021-01-29

    Talos Takes Ep. #39: An update on SolarWinds as it relates to IoT and OT

    We know we just talked about supply chain attacks and SolarWinds last week, but it’s still all anyone in security is talking about. Joe Marshall joins the show this time to approach the SolarWinds breach from an internet-of-things and operational security perspective. He recently co-wrote a blog for Cisco detailing how outsourcing OT over the past few years has made the SolarWinds compromise worse. Joe, a lifelong researcher and security practitioner in the OT and infrastructure space, discusses what we still don’t know about this attack, what you should do if you think you may be affected, and how we can learn from this going forward. For more on Talos’ coverage and defense against the SolarWinds campaign, check out our blog post here.

    Hosted By:
    Jon Munshaw
    Featuring:
    Joe Marshall@ImmortanJo3
    Download
    Run Time: 12:30

    Keywords
    • SolarWinds
    • IoT
    • operational technology
    • infrastructure