
Sign up to save your podcasts
Or


UEFI malware in development since 2016 discovered in Gigabyte and ASUS motherboards.
As Microsoft finally disables macros by default, container files emerge as replacement delivery mechanism.
QBot uses old version of Windows Calculator to facilitate DLL hijacking.
Atlassian issues fix for critical hardcoded credentials vulnerability
Two new ransomware strains are cross platform in nature
New modular “Lightning Framework” adds to fears of Linux malware surge
Impersonation of cybersecurity firms by threat actors as part of callback phishing attacks.
Luna Moth becomes the latest attack group to perform Ransomware style extortion without encryption.
Searchable data leak sites gain traction among threat actors as new leverage tool.
Ransomware affiliates spoof US companies to obtain new red team tools as they pivot away from Cobalt Strike.
Hive ransomware strain is completely re-written in Rust, gaining faster encryption among other benefits.
Microsoft reverses change popular among InfoSec community, no longer disabling document macros by default.
Mitel phone bug exploited to perform ransomware attack.
Lockbit 3.0 introduces first ransomware bug bounty program.
AMD reportedly suffers attack and data is currently held for ransom.
New variation of PetiPtoam flaw dubbed DFSCoerce can allow windows domain takeover.
Okta discusses Lapsus$ breach and how zero trust helped secure network from worse effects.
A collection of 56 flaws dubbed Icefall degrades security posture of thousands of OT devices.
New Symbiote Linux malware has several concerning stealth, obfuscation, and rootkit style techniques.
Emotet returns, featuring a similar codebase, but a host of new tricks.
Report highlights how non admin 0365 access could be used to sabotage/encrypt cloud files.
Two recent flaws can be combined to create very sophisticated phishing attacks.
Dridex authors EvilCorp become a LockBit affiliate, likely in another effort to evade sanctions.
POC code released for “trivial” to exploit Atlassian Confluence vulnerability.
New Chromeloader malware employs stealthy installation and persistence methods.
New MS Office zero day allows “no click” powershell exploitation even with macros disabled.
Information on a Russian botnet designed to manipulate social media trends and spread disinformation, facial recognition technology Clearview AI is fined by the UK government and an Iranian threat group target the port of London authority.
From the publisher's feed
Talion Threat Set Radio is your weekly cyber threat intelligence bulletin. We cut through the noise to give you our honest opinion on the threat news that matters.