logo

We've got one word for it, and it's usually the wrong one

ID: ff6afa97-71dc-52d0-b942-01197558fd0f

STIX ID: report--ff6afa97-71dc-52d0-b942-01197558fd0f

Feed Name: Cisco Talos

Threat Score
75/100

Date Published: 2026-09-10

Date Updated: 2026-09-11

Author: Joe Marshall

...
...

Cisco Talos' Threat Source newsletter summarizes several active cyber threats including a WebDAV-based infection chain delivering the Amatera stealer (with ZigCryptoStealer and NetSupport Manager) attributed to UAT-10820, active exploitation of Cisco FMC vulnerabilities, and a Microsoft Defender zero-day named "ShieldCrash", plus additional campaigns (Google-redirect phishing, HAProxy backdoor linked to North Korean actors). The bulletin provides IOCs (multiple SHA256/MD5 hashes), recommended detections (monitor WebDAV, suspicious rundll32 ordinal calls, enable memory scanning), and contextual analysis of attacker delivery/evasion techniques.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.