Sign in

William Largent

@securitywill.bsky.social
113 followers 108 following 47 posts

Cisco Talos Threat Research

PostsRepliesMedia
William Largent @securitywill.bsky.social · 05/08/2026
Arnaud comes to the show and elevates the discourse - while making fun of the bad guys. win/win.
000
Reposted by William Largent
Cisco Talos Intelligence Group @talosintelligence.com · 14/07/2026
Protect your development environment from rising Python supply-chain threats by understanding the package installation lifecycle and implementing these essential defensive strategies: cs.co/63323BEnJc1
a minimalist python wrapped around a carboard package
023
Reposted by William Largent
David J. Bianco @davidjbianco.bsky.social · 10/07/2026
Some recent(ish) updates to CFPlease.io: - Shareable links to CFPs and events - Submit your own events to the queue (moderation req'd) - A public API for searching and filtering Looking for a place to present your cybersecurity research, or just a cool conference to attend? Give it a try!
011
Reposted by William Largent
Cisco Talos Intelligence Group @talosintelligence.com · 02/07/2026
Windows COM is a playground for threat actors, but it doesn't have to be a mystery. Join us on the latest Talos Takes to learn how to spot malicious activity and sharpen your analysis skills: cs.co/63320BDm4is
talos takes
033
William Largent @securitywill.bsky.social · 24/06/2026
👀
000
Reposted by William Largent
CineCalendar @cinecalendar.bsky.social · 08/06/2026
Jun 8th 1998 - Peter Gibbons had a bad case of the Mondays and gets reminded about the new cover sheets on the TPS reports. Michael Bolton (not that one) tells the guys he could write a virus to rip off the company. 📽️📅 Office Space (1999)
3 Screenshots from the movie "Office Space" (1999): First, a close-up of a wristwatch showing the date as Monday the 8th. Second, a man in an office shirt stands beside a woman who comments, "Uh-oh. Sounds like somebody's got a case of the Mondays." Third, a bespectacled man with suspenders leans on a cubicle wall and says, "Yeah, you apparently didn't put one of the new cover sheets on your T.P.S. reports."
216462
Reposted by William Largent
David J. Bianco @davidjbianco.bsky.social · 03/06/2026
I did a podcast talking about my newest open source project, EvidenceForge. Realistic synthetic log data turned out to be a lot more interesting of a project than I expected.
012
William Largent @securitywill.bsky.social · 09/04/2026
I can teach you languages and tools - I can't teach you innate curiosity ¯\_(ツ)_/¯
020
William Largent @securitywill.bsky.social · 25/03/2026
this is art.
000
Reposted by William Largent
vx-underground (automated mirror) @vxundergroundre.bsky.social · 04/03/2026
In today's episode of "lol wtf the internet is silly" - Iran malwares Iraq - Ukraine malwares Russia - North Korea attacking cryptocurrency exchanges - China malwares a bunch of countries - Chinese nerds infect iOS apps (lol) - North Korea oopsies, infects PC from GTA V mods
0144
William Largent @securitywill.bsky.social · 25/02/2026
4chan for AI is absolutely how we end up with some kind of IncelSkyNet that is a far worse future for us and our new impotent overlords.
000
Reposted by William Largent
SwiftOnSecurity @swiftonsecurity.com · 20/02/2026
Fun fact you can do everything you want with just HTML tables and people liked that version of the Internet a lot better
2129742
Reposted by William Largent
derek guy @dieworkwear.bsky.social · 18/02/2026
some of you are looksmaxxing when you need to be booksmaxxing
211152782511
William Largent @securitywill.bsky.social · 18/02/2026
"Qiling will be my go-to for from the start of an emulation project... ... if all you need is the ability to debug your scripts, udbserver is an easy solution that you can use with your Unicorn scripts as-is."
000
William Largent @securitywill.bsky.social · 12/02/2026
yo dawg, I heard you like malware xzibit meme like it's 2007
010
Reposted by William Largent
BleepingComputer @bleepingcomputer.com · 04/02/2026
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) ordered government agencies to patch their systems against a five-year-old GitLab vulnerability that is actively being exploited in attacks.
bleepingcomputer.com
CISA warns of five-year-old GitLab flaw exploited in attacks
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) ordered government agencies to patch their systems against a five-year-old GitLab vulnerability that is actively being exploited in attacks.
052
Reposted by William Largent
BleepingComputer @bleepingcomputer.com · 12/12/2025
Kali Linux has released version 2025.4, its final update of the year, introducing three new tools, desktop environment improvements, and enhanced Wayland support.
bleepingcomputer.com
Kali Linux 2025.4 released with 3 new tools, desktop updates
Kali Linux has released version 2025.4, its final update of the year, introducing three new tools, desktop environment improvements, and enhanced Wayland support.
0125
Reposted by William Largent
Cisco Talos Intelligence Group @talosintelligence.com · 12/12/2025
Put your cyber skills to the test with Talos’ 12 Days of Malware, featuring insights from Talos-driven research published throughout the year. Try to guess the threat actor or tool in as few clues as possible, and share how you did in the comments below: blog.talosintelligence.com/salt-typhoon...
032
Reposted by William Largent
derek guy @dieworkwear.bsky.social · 08/12/2025
sitting next to a sweaty guy on a plane who just finished a workout at terminal 8 while wearing a shirt, tie, and suit
4738563834
Reposted by William Largent
Catalin Cimpanu @campuscodi.risky.biz · 25/11/2025
watchTowr Labs has found thousands of secret tokens and credentials shared publicly on code formatting and beautification sites, such as JSONFormatter and CodeBeautify labs.watchtowr.com/stop-putting...
labs.watchtowr.com
Stop Putting Your Passwords Into Random Websites (Yes, Seriously, You Are The Problem)
Welcome to watchTowr vs the Internet, part 68. That feeling you’re experiencing? Dread. You should be used to it by now. As is fast becoming an unofficial and, apparently, frowned upon tradition - w...
0156
William Largent @securitywill.bsky.social · 20/11/2025
***record scratch*** "Yep, that's me. You're probably wondering how I ended up in this situation..."
010
Reposted by William Largent
Cisco Talos Intelligence Group @talosintelligence.com · 28/10/2025
From a wave of ToolShell incidents, to a rise in post-exploitation phishing and the creative misuse of legitimate tools like Velociraptor, this episode of the TTP is packed with insights from Q3: www.youtube.com/watch?v=q7yV...
011
William Largent @securitywill.bsky.social · 27/10/2025
you need this in your life.
010
William Largent @securitywill.bsky.social · 24/10/2025
they won't even open betting lines for DNS as the RFO on these things.
000
William Largent @securitywill.bsky.social · 22/10/2025
000
Reposted by William Largent
Cisco Talos Intelligence Group @talosintelligence.com · 17/10/2025
Save the date: Cisco Talos is hosting a live Reddit AMA on r/cybersecurity on October 30! Our team members will be on standby to answer your questions about our latest Incident Response Quarterly Trends Report, today’s threat landscape, and more.
A promotional graphic for a Reddit AMA by Cisco Talos. It features the text: 'Join our Reddit AMA. Get your questions answered by Talos researchers and incident responders. October 30th on reddit.com/r/cybersecurity.' The background is dark with a blue map design.
031
Reposted by William Largent
Cisco Talos Intelligence Group @talosintelligence.com · 16/10/2025
Talos is serving up a special episode of Beers with Talos! VP Christopher Marshall (the “real Marshall,” much to Joe’s displeasure) joins Hazel, Bill, and Joe for a very real conversation about leading a large team when the world won’t stop moving: cs.co/63325AFR3x
011
Reposted by William Largent
derek guy @dieworkwear.bsky.social · 14/10/2025
gene kelly is antifa
255106581686
Reposted by William Largent
bleary @bleary.off-the-records.com · 13/10/2025
If anyone needs me I will be in the museum, lying down next to the bog bodies.
Did people really memorize phone numbers before cell phones, or is that just a movie thing?
2? Questions
I was watching some old shows from the 90s and noticed people would just dial numbers from memory - like they'd call their friends or family without looking anything up.
Made me wonder if that was actually normal back then? Did people genuinely have all their important numbers memorized, or did most folks keep a little address book or written list nearby?
1505235954817
William Largent @securitywill.bsky.social · 11/09/2025
Pearls firmly clutched.
media.tenor.com
a man in a suit is making a funny face and saying oh no !
ALT: a man in a suit is making a funny face and saying oh no !
010
Reposted by William Largent
Carly @nautiluscarly.bsky.social · 20/08/2025
Support your public library. Defend your public library. Slay the enemies of your public library.
178102063225
Reposted by William Largent
Rebecca Watson @skepchick.org · 22/07/2025
Ozzy Osbourne visited my magic shop. He said he'd like to buy some stink bombs. How many? All of them. I had to go through drawers finding every last one. He bought 900 of them. To sign the credit card slip I handed him a shock pen, which he thought was hilarious and bought that too. RIP
85161573150
William Largent @securitywill.bsky.social · 22/07/2025
This. Read this and repeat it over and over to yourself if you need to do so.
000
William Largent @securitywill.bsky.social · 11/07/2025
Look, I'm not going to say that this is a personal attack ... ... it is. This is a personal attack.
000
Reposted by William Largent
Cisco Talos Intelligence Group @talosintelligence.com · 10/07/2025
We’re halfway through 2025, and vulnerability reporting is evolving fast. Check out the latest Threat Source newsletter as Thorsten breaks down record CVE volumes and new reporting challenges: blog.talosintelligence.com/patch-track-...
022
Reposted by William Largent
Catalin Cimpanu @campuscodi.risky.biz · 08/07/2025
Threat actor deepfakes Marco Rubio's voice to approach foreign officials on Signal www.washingtonpost.com/national-sec...
washingtonpost.com
A Marco Rubio impostor is using AI voice to call high-level officials
An imposter using AI to pose as Secretary of State Marco Rubio contacted three foreign ministers, a U.S. governor and a member of Congress, according to a State Department cable.
12010
Reposted by William Largent
Cisco Talos Intelligence Group @talosintelligence.com · 26/06/2025
Join us for a deep dive into how Cisco Talos uncovered two critical vulnerabilities in the AsIO3.sys driver powering ASUS Armory Crate: blog.talosintelligence.com/decrement-by...
033
Reposted by William Largent
Cisco Talos Intelligence Group @talosintelligence.com · 11/06/2025
Cisco Talos uncovered zero-day vulnerabilities in catdoc, plus vulnerabilities in Parallel, NVIDIA, and High-Logic FontCreator 15—all now patched: blog.talosintelligence.com/catdoc-zero-...
031
Reposted by William Largent
Catalin Cimpanu @campuscodi.risky.biz · 01/05/2025
Security researcher Michalis Antoniades has released Chronos, a kernel extension to support EDR-like capabilities on RTOS embedded systems github.com/dest-3/Chronos
github.com
GitHub - dest-3/Chronos: Time-Based Detection and Response for Safety-Critical Real-Time Embedded Systems - EDR Kernel Extension for FreeRTOS
Time-Based Detection and Response for Safety-Critical Real-Time Embedded Systems - EDR Kernel Extension for FreeRTOS - dest-3/Chronos
054
Reposted by William Largent
Cisco Talos Intelligence Group @talosintelligence.com · 31/03/2025
Cisco Talos’ 2024 Year in Review is available now! With visibility into more than 886 billion security events per day, the report features our key insights. Read the full report here: cs.co/63320FzuMG
174
William Largent @securitywill.bsky.social · 28/03/2025
I really hate this archaic nonsense is still a part of the community - but this is a really good post from a couple of Splunk/SURGe folks. I am so lucky to work on a team that is very diverse across the board but I am very aware that we are flying in the face of the norm.
dispatch.thorcollective.com
Why We Need More Women and Intersectional Diversity in Cyber (And How to Get There)
Representation matters in cybersecurity. Here’s why—and what we can do about it.
010
Reposted by William Largent
Cisco Talos Intelligence Group @talosintelligence.com · 19/03/2025
From threat hunting, detection building, vulnerability discoveries and incident response, Cisco Talos shows up every day to try and make the internet a safer place. Watch our full overview here: cs.co/633280m3rs
063
William Largent @securitywill.bsky.social · 28/01/2025
"The PureCrypter malware found in this intrusion is a Windows dynamic-link library obfuscated with Eziriz’s .NET Reactor obfuscator. It has resources of encrypted binaries of legitimate DLLs, including Protobuf-net and Microsoft task scheduler DLL along with the TorNet backdoor. "
010
William Largent @securitywill.bsky.social · 20/12/2024
the accuracy
010
Reposted by William Largent
Catalin Cimpanu @campuscodi.risky.biz · 04/12/2024
Supply Chain Attack Detected in Solana's web3.js Library: socket.dev/blog/supply-... Solana blamed it on a phishing attack: github.com/solana-labs/...
socket.dev
Supply Chain Attack Detected in Solana's web3.js Library - S...
A supply chain attack has been detected in versions 1.95.6 and 1.95.7 of the popular @solana/web3.js library.
1196
Reposted by William Largent
Matthew Olney @kpyke.bsky.social · 04/12/2024
<Bangs drum like Animal on a bender>
051
William Largent @securitywill.bsky.social · 02/12/2024
Ack.
000
Reposted by William Largent
Catalin Cimpanu @campuscodi.risky.biz · 21/11/2024
FBI confirms that despite the Chinese-sounding name, the BianLian ransomware gang and its affiliates operate out of Russia PDF: www.ic3.gov/CSA/2024/241...
626785
William Largent @securitywill.bsky.social · 20/12/2023
Want to actually know what it's like to work at Talos? Like truly understand? Listen to the podcast linked here - you get A LOT of Talos people from disparate groups and in listening you can understand the Talos culture isn't buzzword bullshit. I fucking love my team. Ride or die.
beerswithtalos.talosintelligence.com
Talos Speed Dating (the episode we never set out to make but did anyway) - Beers with Talos Podcast
Mitch, Matt and Lurene were almost about to be in the same physical space at the same time to record an episode, and then Lurene couldn't make it...so we made this instead! Mitch is joined by Azim Kho...
000
Reposted by William Largent
Jaeson Schultz @jaesons.bsky.social · 31/10/2023
A threat actor known as #AridViper (likely operating out of #Gaza) has been targeting users in the #MiddleEast with #spyware disguised as dating apps, dating back to November 2022. blog.talosintelligence.com/arid-viper-m...
blog.talosintelligence.com
Arid Viper disguising mobile spyware as updates for non-malicious Android applications
Since April 2022, Cisco Talos has been tracking a malicious campaign operated by the espionage-motivated Arid Viper advanced persistent threat (APT) group targeting Arabic-speaking Android users.
011