Listen to Talos security experts as they bring their hot takes on current security topics and Talos research to the table. Along the way Hazel, Mitch, Matt and a rotating chair of special guests will talk about anything (and we mean anything) that's on their minds, from the latest YouTube trends to Olympic curling etiquette. New episodes every other Thursday.
David Bianco built the Pyramid of Pain, so we offered him some more. David joins the crew for a conversation how AI changes about his famous model, how EvidenceForge creates simulated incidents for research and training, and why his red-team entrance exam didn’t go to plan.
First, we discuss the newly disclosed PHP vulnerabilities and the potential impact there (we recorded this on day 1 of the disclosure, hence expediting the release of this episode from its normal release schedule). Later, David’s decades of experience are put to work helping Hazel hack a fictional smart toilet company.
Here's the Talos advisory about the PHP vulnerabilities https://blog.talosintelligence.com/two-critical-rces-in-php-core/
Every week, our host brings on a new guest from Talos or the broader Cisco Security world to break down a complicated security topic in just five or 10 minutes. We cover everything from breaking news to attacker trends and emerging threats.
Attackers have always had a bottleneck. Stealing massive amounts of data is easy, but identifying which victims are truly worth the effort can be slow, tedious work. That changed with the discovery of the VOLTA-AUTODOXER.
In this episode, Amy chats with Ryan Fetterman, creator of the CAIRN research framework, to break down a newly discovered infostealer. Unlike traditional stealers, VOLTA integrates LLMs to analyze stolen credentials in real-time, effectively turning raw data into a prioritized, high-value dossier for the attacker.
We discuss:
Resources: