What I’ve learned in my first 7-ish years in cybersecurity

Cisco Talos reports a new wave of activity by a Russian-speaking actor tracked as UAT-5647 targeting Ukrainian government and Polish entities using an updated RomCom/SingeCamper (memory-resident, registry-loaded, loopback communication) and additional tooling (RustClaw, MeltingClaw, DustyHammock, ShadyHammock). The newsletter also highlights broader high-impact issues: reported Chinese state-sponsored intrusions (Salt Typhoon) accessing ISP-collected communications, and an actively exploited Qualcomm zero-day (CVE-2024-43047) affecting dozens of chipsets — Talos has published detection rules and signatures to help defenders.