Sign in

mesiagh.bsky.social

@mesiagh.bsky.social
59 followers 106 following 9 posts
PostsRepliesMedia
Reposted by @mesiagh.bsky.social
BleepingComputer @bleepingcomputer.com · 03/11/2025
Microsoft security researchers have discovered a new backdoor malware named SesameOp that uses the OpenAI Assistants API as a covert command-and-control channel.
bleepingcomputer.com
Microsoft: SesameOp malware abuses OpenAI Assistants API in attacks
Microsoft security researchers have discovered a new backdoor malware named SesameOp that uses the OpenAI Assistants API as a covert command-and-control channel.
0115
Reposted by @mesiagh.bsky.social
Cisco Talos Intelligence Group @talosintelligence.com · 24/07/2025
SnortML, Cisco’s machine learning-powered detection engine, identifies patterns of exploit attempts — even those it hasn't seen before — without relying on static rules. Stop by the Cisco booth at Black Hat to learn more: www.youtube.com/watch?v=jkxn...
youtube.com
How SnortML Uses Machine Learning to Stop Zero-Day Attacks
YouTube video by Cisco Talos Intelligence Group
021
Reposted by @mesiagh.bsky.social
Cisco Talos Intelligence Group @talosintelligence.com · 16/07/2025
Don’t miss Part 2 of last week's TTP! Talos' Jaeson Schultz breaks down how attackers are using large language models (LLMs) to usher in the next phase of cyber threats by manipulating the data these models rely on: cs.co/633204Cuoo
Jaeson, a qhite man with a moustache and beard, smiles at the camera.
032
Reposted by @mesiagh.bsky.social
Cisco Talos Intelligence Group @talosintelligence.com · 11/07/2025
Don't miss the newest TTP! Jaeson Schultz joins Hazel to explore the wild world of cybercriminals scamming each other with fake AI tools, inventing new ways to jailbreak large language models, and so much more: cs.co/633204IoEG
Jaeson, a white man with a moustache and beard, smiles at the camera. The "TTP" logo is on a black background on the right half of the screen.
001
Reposted by @mesiagh.bsky.social
Catalin Cimpanu @campuscodi.risky.biz · 04/06/2025
UNC6040 used voice-phishing to steal data from companies' Salesforce systems cloud.google.com/blog/topics/...
052
Reposted by @mesiagh.bsky.social
Cisco Talos Intelligence Group @talosintelligence.com · 01/05/2025
While important to have, MFA isn’t an invincible shield. Ready to see how cybercriminals are bypassing MFA — and what it means for your security? Read our newest blog: blog.talosintelligence.com/state-of-the...
001
Reposted by @mesiagh.bsky.social
Cisco Talos Intelligence Group @talosintelligence.com · 15/04/2025
In 2024, the education sector faced the brunt of ransomware attacks. 📚 Explore our latest summary for more insights, including the methods ransomware actors are using to slip past defenses with minimal noise: blog.talosintelligence.com/year-in-revi...
041
Reposted by @mesiagh.bsky.social
Cisco Talos Intelligence Group @talosintelligence.com · 10/04/2025
In this week's Threat Source newsletter, Martin shares strategies to strengthen defenses against evolving email lures and frequently targeted vulnerabilities, even when budgets are tight. Read it here: cs.co/63325FLEAf
Banner reading: "Threat Source newsletter: All the security news you need to know - hitting your inbox every Thursday."
012
Reposted by @mesiagh.bsky.social
Cisco Talos Intelligence Group @talosintelligence.com · 04/04/2025
Part 2 of the latest Talos Threat Perspective is out now! This year's report authors dive into most prolific ransomware groups and what is contributing to their success. Watch the full video here: youtu.be/YFwMSxYd-Kk?...
011
Reposted by @mesiagh.bsky.social
Cisco Talos Intelligence Group @talosintelligence.com · 31/03/2025
Cisco Talos’ 2024 Year in Review is available now! With visibility into more than 886 billion security events per day, the report features our key insights. Read the full report here: cs.co/63320FzuMG
174
Reposted by @mesiagh.bsky.social
Dark Web Informer @darkwebinformer.com · 12/03/2025
💡phisherman: A real fake social engineering app Link: github.com/jfmaes/phish...
021
Reposted by @mesiagh.bsky.social
Brad @malware-traffic-analysis.net · 25/02/2025
2025-02-25 (Tuesday): #VenomRAT from #malspam uses zip attachment containing a VHD file containing a VBS file. Calls Pastebin link for C2 server information. Details at github.com/malware-traf...
022
Reposted by @mesiagh.bsky.social
Whitney Alese @thereclaimed.bsky.social · 24/02/2025
Nothing to see here. Just casually dropping a comprehensive list of banned books docs.house.gov/meetings/GO/...
docs.house.gov
67951343
Reposted by @mesiagh.bsky.social
Cisco Talos Intelligence Group @talosintelligence.com · 20/02/2025
This week's newsletter is fresh in your inbox. William dives into security and efficiency, and the latest Talos research: cs.co/63329IhpJ3
Cisco Talos Threat Source Newsletter logo
041
Reposted by @mesiagh.bsky.social
Brad @malware-traffic-analysis.net · 06/02/2025
2025-02-05 (Wednesday): #ClearFake / #ClickFix style fake CAPTCHA leads to possible #Vidar. Vidar C2 using eteherealpath[.]top behind Cloudflare. Details at github.com/malware-traf...
167
Reposted by @mesiagh.bsky.social
Brad @malware-traffic-analysis.net · 30/01/2025
2025-01-30 (Thursday): #XLoader infection. Unlike my previous XLoader infections, this one didn't run in my VM, so I used a physical host. A #pcap of the infection traffic, the associated malware samples, and more info is available at malware-traffic-analysis.net/2025/01/30/i...
Screenshot of my blog post with analysis of the XLoader infection.XLoader distributed as a RAR attachment to an email.  The malware is a Windows executable file within that RAR archive.Traffic from the XLoader infection filtered in Wireshark.XLoader persistent on the infected Windows host through a Windows registry update.
0104
Reposted by @mesiagh.bsky.social
Brad @malware-traffic-analysis.net · 29/01/2025
2025-01-28 (Tues): A case of web injects--malicious script injected in pages of legit websites. In this example, a site has two instances of injected script, #KongTuke and #SocGholish. A #pcap of the resulting infection, malware samples & more info at www.malware-traffic-analysis.net/2025/01/28/i...
186
mesiagh.bsky.social @mesiagh.bsky.social · 28/01/2025
We've discovered an ongoing malicious campaign operated by a financially motivated threat actor targeting users, predominantly in Poland and Germany. Read the blog on the new TorNet backdoor here: blog.talosintelligence.com/new-tornet-b...
blog.talosintelligence.com
New TorNet backdoor seen in widespread campaign
Cisco Talos discovered an ongoing malicious campaign operated by a financially motivated threat actor targeting users, predominantly in Poland and Germany.
000
mesiagh.bsky.social @mesiagh.bsky.social · 27/01/2025
Recent changes in #LummaStealer - using ChaCha20 for C2 encryption, the new config extractor in C/C++. Courtesy of @russianpanda.bsky.social github.com/RussianPanda...
github.com
Configuration_extractors/LummaC2 at main · RussianPanda95/Configuration_extractors
Configuration Extractors for Malware. Contribute to RussianPanda95/Configuration_extractors development by creating an account on GitHub.
011
mesiagh.bsky.social @mesiagh.bsky.social · 24/01/2025
We observed an increase in the number of email threats leveraging hidden text salting, also known as "poisoning", in the second half of 2024. Read our latest blog to learn more: blog.talosintelligence.com/seasoning-em...
blog.talosintelligence.com
Seasoning email threats with hidden text salting
Hidden text salting is a simple yet effective technique for bypassing email parsers, confusing spam filters, and evading detection engines that rely on keywords. Cisco Talos has observed an increase i...
010
Reposted by @mesiagh.bsky.social
Sam Bowne :donor: @sambowne.infosec.exchange.ap.brid.gy · 20/01/2025
I'm teaching Machine Learning Security as an online class, free for anyone to attend (as all my classes are): samsclass.info/ML/ML_S25.shtml
samsclass.info
Machine Learning Security -- Sam Bowne
012
mesiagh.bsky.social @mesiagh.bsky.social · 14/01/2025
The Microsoft AI Red Team recently released both a blog and an in-depth whitepaper after red teaming 100+ different GenAI products. Read the blog here - microsoft.com/en-us/securi... And download the whitepaper here - airedteamwhitepapers.blob.core.windows.net/lessonswhite...
microsoft.com
3 takeaways from red teaming 100 generative AI products | Microsoft Security Blog
The growing sophistication of AI systems and Microsoft’s increasing investment in AI have made red teaming more important than ever. Learn more.
000
Reposted by @mesiagh.bsky.social
Joseph Cox @josephcox.bsky.social · 04/12/2024
New: YouTube is running hundreds of ads featuring deepfaked celebrities like Arnold Schwarzenegger, Sylvester Stallone, and Mike Tyson promising to get customers 'rock hard' (they're selling sketchy erectile dysfunction treatments) www.404media.co/deepfake-you...
404media.co
Deepfake YouTube Ads of Celebrities Promise to Get You ‘Rock Hard’
Deepfakes of Arnold Schwarzenegger, Sylvester Stallone, Mike Tyson, and Terry Crews are selling erectile dysfunction supplements on YouTube.
35815
Reposted by @mesiagh.bsky.social
Hash Miser ✊🇺🇦 @hash-miser.bsky.social · 20/11/2024
Cyber Blackfriday tips is already ongoing on GitHub (via Thomas Roccia, fr0gger_) github.com/0x90n/InfoSe...
github.com
GitHub - 0x90n/InfoSec-Black-Friday: All the deals for InfoSec related software/tools this Black Friday
All the deals for InfoSec related software/tools this Black Friday - 0x90n/InfoSec-Black-Friday
092
mesiagh.bsky.social @mesiagh.bsky.social · 20/11/2024
QR codes are disproportionately effective at bypassing most anti-spam filters. We discovered two effective methods for defanging malicious QR codes, a necessary step to make them safe for consumption. Find out how prevalent this attack is in our blog #QR #phishing cs.co/6012sxBa4
cs.co
Malicious QR Codes: How big of a problem is it, really?
QR codes are disproportionately effective at bypassing most anti-spam filters. Talos discovered two effective methods for defanging malicious QR codes, a necessary step to make them safe for consumpti...
000
mesiagh.bsky.social @mesiagh.bsky.social · 19/11/2024
We've recently published a blog on a new information stealing campaign, PXA Stealer, targeting government and education sectors. #malware #stealer #cybersecurity Read the blog here: cs.co/6019sqbWX
cs.co
New PXA Stealer targets government and education sectors for sensitive information
Cisco Talos discovered a new information stealing campaign operated by a Vietnamese-speaking threat actor targeting government and education entities in Europe and Asia.
031