Thanks Cisco Talos Intelligence Group for the Snorty Rubik's cube. I finally learned how to finish it !

🤗I've written a book! Let me introduce you "Visual Threat Intelligence" You can register now to stay updated on its release and learn more about it in the link below. I really hope you'll like it! 🥹 #VisualThreatIntelligence #infosec #threatintel 👉store.securitybreak.io/threatintel

Today is my third job anniversary, working for Cisco Talos Intelligence Group . I'm proud to be part of TI&I. I learned so much ! And it's not over, let's continue to piss-off the bad guys \o/

Monday is one of my "backup day". Quick reminder for you, have you done your backups and tested them recently ?

We have new details on a #spyware tool called #Predator that's actively being sold and used to unknowingly track targeted users. Here's the full technical breakdown of how this tool works and why the use of "mercenary" spyware is on the rise cs.co/6016OWk3A

🤓Excited to announce that Visual Threat Intelligence is now available as an ebook! Paperback will follow in a few weeks. There is a 15% launch discount on the eBook with code INTELLALLTHETHINGS. Valid for one week! #infosec #threatintel #cybersecurity 👇 store.securitybreak.io/threatintel

Whether your business is just getting off the ground, or looking to expand its cybersecurity program, our latest paper from Talos Incident Response has advice for building the strongest security plan, no matter your budget or team size. cs.co/6013OQVJd

Hey :) We published an updated #Vidar's infrastructure analysis, providing more insights about infrastructure rotation over Russia and Moldova, traffic anonymization, new management keys, etc: team-cymru.com/post/darth-vid… Feedback welcome, and happy hunting 🍷 Team Cymru Research

An actor we're calling "ShroudedSnooper" is actively targeting telecommunications companies in the Middle East using a previously undiscovered #malware family. More details on this threat and how users can stay protected cs.co/6015PCxv1

Refreshed today, we see 74k devices exposing the WebUI on the Internet. #Cisco #CVE Cc CERT Orange Cyberdefense

💻I've published a new blog post where I discuss practical use cases of LLM applied to threat intelligence. Check this out for a real talk about LLM usage for threat intelligence! 🤓 #infosecurity #threatintel #cybersecurity tomrocc.medium.com/applying-llms-…

This has been years in the making, literally. Sebastien Larinier and I are happy to announce the release of #Yeti 2.0 ✨ 🍰 (after we promised an EOM release at hack_lu last month 😅) Website: yeti-platform.io Release: github.com/yeti-platform/… mini-🧵👇🏼

Cet auteur anonyme du Moyen Âge n’imaginait pas que son roman serait à l’honneur 700 ans après dans le métro parisien !!! Éditions Les Belles Lettres ARTE Alexandre Astier Le Chevalier au Dragon 🐉

Here’s a deeper look at what the team and I did to help Ukraine with its power grids. It was a privilege to lead the team who helped do this work. cs.co/6013RGxaL

Where are the NFT or blockchains based games in metaverse that everyone promised a couple of years ago, that will change tje world ? Was it a scam? Really ?! I'm shocked...

#Turla targeting NGOs supporting Ukraine. See this last blogpost we worked on with colleagues.

I finally took my ticket for Botconf Who will come this year ? #botconf2024

A new suspected data theft campaign active since at least 2021, we attribute to "LilacSquid", a group that shares several keys TTPs with North Korean state-sponsored actors. Awesome work of my teammates, you should read it :) blog.talosintelligence.com/lilacsquid/

Cisco Talos Incident Response (Talos IR) recently observed an attacker conducting big-game hunting and double extortion attacks using the relatively new Interlock ransomware. Read the blog here: cs.co/6019SsMIh