Cisco Talos

Government and policy organizations across Asia have become the target of a new espionage campaign orchestrated by a China-nexus threat actor, according to a report by Cisco Talos released on May 29, 2024.

A novel Windows malware, identified as CLOSEDQUORUM, has been developed to operate by soliciting decisions from a collective of up to four artificial intelligence models, rather than relying on direct commands from a remote attacker's server.

Cisco Talos, the threat intelligence arm of Cisco Systems, has reported that two recently patched vulnerabilities within Cisco Secure Firewall Management Center (FMC) are currently being exploited by multiple threat actors.

Cisco has issued a warning regarding two high-severity vulnerabilities discovered within the ClamAV antivirus engine, specifically impacting the Secure Endpoint Connector. These flaws, identified as CVE-2023-20031 and CVE-2023-20198, could enable threat actors to initiate denial-of-service (DoS) attacks, leading…

The Chaos ransomware group has been observed routing its command-and-control (C2) traffic through compromised victim browsers, specifically utilizing headless instances of Chrome and Edge. Cisco Talos detailed this technique on Thursday, identifying a Rust-based implant named msaRAT as the tool…

A Chinese threat actor identified as UAT-7810 is actively developing custom malware to broaden its Operational Relay Box (ORB) network through the compromise of internet-facing networking devices. Cisco Talos researchers have detailed these activities, noting that UAT-7810 is an advanced…