Talos Takes

Cisco Talos

Podcast

Episodes

Latest Episodes

The trust paradox: How attackers weaponize legitimate SaaS platforms

5/7/2026 • 20 min

In this episode of Talos Takes, Amy Ciminnisi sits down with researcher Diana Brown to discuss the rise of "platform-as-a-proxy" (PAP) attacks. We explore how threat actors are weaponizing legitimate SaaS platforms like GitHub and Jira to deliver phishing campaigns that bypass traditional security filters. By leveraging the platforms' own infrastructure to send … Play episode

It's not you, it's your printer: State-sponsored and phishing threats in 2…
2025's ransomware trends and zombie vulnerabilities
Cybersecurity’s double-header: 2025 insights from Talos and Splunk
Modernizing your threat hunt
Holding the line: Service provider security
IR Trends Q4 2025: Ransomware chills and phishing heats up
Cracking the code: What encryption can (and can’t) do for you
Cybersecurity certifications and you
2015 vs 2025: What the Last Decade of Threats Taught Us
When You’re Told “No Budget”: The Blueprint for Staying Secure
How Attackers Use Your Own Tools Against You (IR trends Q3 2025)
Passwordless Security: Debunking the Biggest Myths
You Can't Patch Burnout: When Cybersecurity Takes a Toll
Tampered Chef: When Malvertising Serves Up Infostealers
Inside the Black Hat NOC: Lessons in Securing One of the Wildest Networks
Breaking Down Chaos: Tactics and Origins of a New RaaS Operation
Why Attackers Love Your Remote Access Tools
Teaching LLMs to spot malicious PowerShell scripts
How cybercriminals are camouflaging threats as fake AI tool installers
Inside the attack chain: A new methodology for tracking compartmentalized …
Follow the motive: Rethinking defense against Initial Access Groups
Year in Review special pt. 4: How AI is influencing the threat landscape?
Year in Review special part 3: Identity and MFA attacks
Year in Review special part 2: The biggest ransomware trends
Year in Review special part 1: vulnerabilities, email threats, and adversa…
A blueprint for protecting major events
Why attackers are using hidden text salting to evade email filters
How to establish a threat intelligence program (Cisco Live EMEA preview)
Web shell frenzies, the first appearance of Interlock, and why hackers hav…
Exploring vulnerable Windows drivers
It's the 35th anniversary of ransomware - let's talk about the major shift…
Unwrapping the emerging Interlock ransomware attack
It's Taplunk! Talos and Splunk threat researchers meet to put the security…
The biggest takeaways from Talos IR's new report: New ransomware variants,…
How Talos IR and Splunk are teaming up
Why the BlackByte ransomware group may be more active than we initially th…
AI, critical infrastructure dominate conversation at Hacker Summer Camp
A 1-on-1 with Talos VP Matt Watchinski
What should we be doing to better support open-source software?
Threat actor trends and the most prevalent malware from the past quarter
You got a data breach notification. Now what?
What we learned from studying the TTPs of the 14 most active ransomware gr…
Time to catch up on the wide-reaching Snowflake incident
Everything we know about denial-of-service attacks in 2024
The many shades of LilacSquid
A mid-year checkin on Volt Typhoon
How much has AI helped bad actors who spread disinformation?
Recapping RSA
Why CoralRaider is looking to steal your login credentials

Talos Takes RSS Feed

Share: Twitter • Facebook • Embed

Copy embed code: