We've got one word for it, and it's usually the wrong one
ID: ff6afa97-71dc-52d0-b942-01197558fd0f
STIX ID: report--ff6afa97-71dc-52d0-b942-01197558fd0f
Feed Name: Cisco Talos
Cisco Talos' Threat Source newsletter summarizes several active cyber threats including a WebDAV-based infection chain delivering the Amatera stealer (with ZigCryptoStealer and NetSupport Manager) attributed to UAT-10820, active exploitation of Cisco FMC vulnerabilities, and a Microsoft Defender zero-day named "ShieldCrash", plus additional campaigns (Google-redirect phishing, HAProxy backdoor linked to North Korean actors). The bulletin provides IOCs (multiple SHA256/MD5 hashes), recommended detections (monitor WebDAV, suspicious rundll32 ordinal calls, enable memory scanning), and contextual analysis of attacker delivery/evasion techniques.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
