The sliding doors of misinformation that come with AI-generated search results

Cisco Talos reports discovery of a threat actor named "LilacSquid" active since at least 2021 that gains access via vulnerable web applications and compromised RDP credentials to maintain persistence and deploy open-source tools (MeshAgent, SSF) alongside custom malware (PurpleInk and loaders InkBox/InkLoader); the newsletter also highlights recent major incidents (London hospitals hit by ransomware, the dismantling of the 911 S5 botnet, and Operation Endgame) and publishes IoCs and detection signatures while recommending patching and deployment of Talos detections.