Tag: IoC
- 
		
		
		Cisco Talos Blog: Newly identified wiper malware “PathWiper” targets critical infrastructure in UkraineSource URL: https://blog.talosintelligence.com/pathwiper-targets-ukraine/ Source: Cisco Talos Blog Title: Newly identified wiper malware “PathWiper” targets critical infrastructure in Ukraine Feedly Summary: Cisco Talos observed a destructive attack on a critical infrastructure entity within Ukraine, using a previously unknown wiper we are calling “PathWiper.” AI Summary and Description: Yes Summary: Cisco Talos has reported a destructive cyber… 
- 
		
		
		Cisco Talos Blog: Ghosted by a cybercriminalSource URL: https://blog.talosintelligence.com/ghosted-by-a-cybercriminal/ Source: Cisco Talos Blog Title: Ghosted by a cybercriminal Feedly Summary: Hazel observes that cybercriminals often fumble teamwork, with fragile alliances crumbling over missed messages. Plus, how UAT-6382 is exploiting Cityworks and what you can do to stay secure. AI Summary and Description: Yes Summary: The text elaborates on the evolving dynamics… 
- 
		
		
		Cisco Talos Blog: UAT-6382 exploits Cityworks zero-day vulnerability to deliver malwareSource URL: https://blog.talosintelligence.com/uat-6382-exploits-cityworks-vulnerability/ Source: Cisco Talos Blog Title: UAT-6382 exploits Cityworks zero-day vulnerability to deliver malware Feedly Summary: Talos has observed exploitation of CVE-2025-0994 in the wild by UAT-6382, a Chinese-speaking threat actor, who then deployed malware payloads via TetraLoader. AI Summary and Description: Yes **Summary:** The text describes the exploitation of a significant remote-code-execution… 
- 
		
		
		Cloud Blog: From insight to action: M-Trends, agentic AI, and how we’re boosting defenders at RSAC 2025Source URL: https://cloud.google.com/blog/products/identity-security/from-insight-to-action-m-trends-agentic-ai-and-how-were-boosting-defenders-at-rsac-2025/ Source: Cloud Blog Title: From insight to action: M-Trends, agentic AI, and how we’re boosting defenders at RSAC 2025 Feedly Summary: Cybersecurity is facing a unique moment, where AI-enhanced threat intelligence, products, and services are poised to give defenders an advantage over the threats they face that’s proven elusive — until now. … 
- 
		
		
		Cisco Talos Blog: Introducing ToyMaker, an Initial Access Broker working in cahoots with double extortion gangsSource URL: https://blog.talosintelligence.com/introducing-toymaker-an-initial-access-broker/ Source: Cisco Talos Blog Title: Introducing ToyMaker, an Initial Access Broker working in cahoots with double extortion gangs Feedly Summary: Cisco Talos discovered a sophisticated attack on critical infrastructure by ToyMaker and Cactus, using the LAGTOY backdoor to orchestrate a relentless double extortion scheme. AI Summary and Description: Yes **Summary:** The text…