Talion Threat Set Radio

Talion Threat Set Radio

By Talion Threat Intelligence TeamTechnology
Download on the App Store

Talion Threat Set Radio episodes

  • Threat Bulletin #220

    Tool which allows extraction of KeePass master password publicly available.

    Geacon, an open source Cobalt Strike port usable on MacOS, sees spike in use.

    Report outlines Microsoft Teams functions which can enable phishing and more.

    7 min
  • Threat Bulletin #219

    ViperSoftX infostealer expands to target specific password managers.

    DLL sideloading is so effective, attackers begin doubling up the technique.

    North Korean Kimsuky group employing new Reconshark recon tool.

    8 min
  • Threat Bulletin #218

    GhostToken flaw, which allowed invisible persistence, patched and visible.

    AuKill tool used in attack pipeline to kill EDR processes.

    PoC exploit code available for Papercut flaw, which allows server takeover.

    8 min
  • Threat Bulletin #217

    Lazarus moves to distribute Linux malware via faux job offers.

    Aurora distributed via YouTube, resulting in evasive loader payload.

    Tangle of attackers as multiple groups collaborate with Domino malware.

    8 min
  • Threat Bulletin #216

    Lazarus evolve their tactics and targeted industries.

    Zero day from recent patch Tuesday under active Ransomware exploitation.

    MuddyWater pairing with new splinter group to perform destructive attacks.

    8 min
  • Threat Bulletin #215

    Wordpress plugin with over 11 million install base under active exploitation.
    Western Digital hit by cyber attack, services impacted, cause unclear.
    SFX archives can be used to run stealthy Powershell backdoors.

    7 min
  • Threat Bulletin #214

    Malicious Python package avoids detection through use of Unicode Homoglyphs.

    The well established IcedID malware shifts from banking to ransomware delivery.

    Supply chain attack hits customers of 3CX VOIP application, including the NHS.

    8 min
  • Threat Bulletin #213


    In this week’s episode we report on:
    Fortinet zero-day vulnerability CVE-2022-42475 being exploited by a Chinese hacking group UNC3886, recent tactics from Russian state backed group Nobelium & Hitachi Energy confirmed as latest victim of Cl0ps exploitation of Fortra’s GoAnywhere MFT vulnerability.

    8 min
  • Threat Bulletin #212

    New GoBruteforcer botnet in active development according to report.

    AI videos are being used as an effective lure to drop malware.

    Document signing services abused to deliver Redline stealer.

    7 min
  • Threat Bulletin #211

    Emotet returns following 3 month break.

    CISA issues advisory regarding new Royal ransomware capabilities.

    Old UAC bypass technique used to drop Remcos.

    9 min

About Talion Threat Set Radio

From the publisher's feed

Talion Threat Set Radio is your weekly cyber threat intelligence bulletin. We cut through the noise to give you our honest opinion on the threat news that matters.