Threats, Beers, and No Silver Bullets. Listen to Talos security experts as they bring their hot takes on current security topics and Talos research to the table. Along the way, Mitch, Matt and a rotating chair of special guests will talk about anything (and we mean anything) that's on their minds, from the latest YouTube trends to Olympic curling etiquette. New episodes every other Thursday.
…
continue reading
It's been a while huh? Apologies for our absence, but the team are back with a run through of everything we've got going on at Black Hat - from our 10 year birthday celebrations, the interesting lightning talks in our booth, and Joe Marshall's "Backdoors and Breaches" game. Come and visit us at Cisco Booth 1732 and Splunk Booth 1940. Before that, M…
…
continue reading
Power grid security expert Joe Marshall joins the crew today to talk all things, well, power grid security. But not before he gets an impromptu pop quiz from Matt in the roundtable. Joe then tells some stories from his days working in electric utility, deploying new systems and his experiences with pentesting teams ("Wow, y'all need to stop!"). Plu…
…
continue reading
Matt, Mitch and Lurene discuss if the internet is better or worse today than it was 20 years ago. This leads them to discuss their various career paths, with Lurene talking about how she got into vulnerability exploitation and how Matt got into threat intelligence. And why neither of those paths would be recommended today. Lurene and Matt then clas…
…
continue reading
You will no doubt have seen the advisories published over the last few weeks concerning Volt Typhoon's malicious activities. In this episode, JJ Cummings joins the crew to discuss the background to this threat actor, their impact on the threat landscape, and the covertly strategic (and specific) nature of their operations. The team also discusses t…
…
continue reading
Matt, Mitch and Lurene sit down to discuss “random stuff from Reddit” (don’t be put off – they’re all genuinely interesting security questions!). Topics range from password managers and how password security guidance has become outdated, how to ‘self-learn’ in cybersecurity, and thoughtful approaches towards security incidents. Before that, the tea…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Talos Speed Dating (the episode we never set out to make but did anyway)
1:08:28
1:08:28
Play later
Play later
Lists
Like
Liked
1:08:28
Mitch, Matt and Lurene were almost about to be in the same physical space at the same time to record an episode, and then Lurene couldn't make it...so we made this instead! Mitch is joined by Azim Khodjibaev from the Talos Threat Intelligence and Interdiction team to rapid-fire interview a bunch of Talos employees who happened to be around the Mary…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
The TurkeyLurkey Man wants YOU to read the Talos 2023 Year in Review report
1:03:20
1:03:20
Play later
Play later
Lists
Like
Liked
1:03:20
We recorded this episode AFTER Thanksgiving, so you'll need to forgive us for the amount of Thanksgiving talk that doesn't actually apply until Thanksgiving 2024. It all evens out in the end because the annual "Ranksgiving" from special guest David Liebenberg results in the creation of TurkeyLurkey Man. Then, TurkeyLurkey Man helps the rest of the …
…
continue reading
It's that time of the quarter again when we sit down to look at what we learned over the past three months. Caitlin Huey from the Talos Threat Interdiction Team joins the show for this special look at the latest Talos Incident Response Quarterly Trends report. Caitlin's team helps compile these reports and digs through mountains of data to find out…
…
continue reading
This episode of Beers with Talos has a very special guest: Our old friend Nigel Houghton. He's one of the OG BWTers and is back with two-plus years' worth of hot takes to get off his chest. Nigel starts out by delivering his long-awaited update on his beloved Mighty Red. But he, Mitch, Matt and Lurene do eventually get to cybersecurity talk, includ…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
"I'm going to breach you off." "Not if I breach you off first!"
56:47
56:47
Play later
Play later
Lists
Like
Liked
56:47
We know we're like two weeks late to the Barbie party, but the whole Beers with Talos crew has seen it now so we had to talk about it. Expect a lot of "Barbie" talk up at the top. After that, though, we dive into how to set up deception systems and establish your environment to make it harder for an intruder to get in. The goal here is to make it s…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Rachel Tobac on social engineering, expanding opportunities for women in cybersecurity
50:57
50:57
Play later
Play later
Lists
Like
Liked
50:57
In this special episode, Matt is flying solo while he interviews Rachel Tobac, the CEO of SocialProof Security. Rachel's company helps individuals and companies keep their data safe by offering various training and penetration testing opportunities, all related to social engineering attacks and risks. Ahead of BlackHat and DEFCON, Matt wanted to ta…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Yarrr! There be mercenaries on the high seas!
43:57
43:57
Play later
Play later
Lists
Like
Liked
43:57
The Beers with Talos Crew is back to a team of four this week, with special guest Nick Biasini joining the show to talk about Mercenary Groups and the spyware they're creating. This episode, we talk about the current spyware landscape, and how it encompasses "mercenary" groups like the NSO Group and Intellexa, and state-sponsored actors looking to …
…
continue reading
Mitch was out for this recording, so Hazel Burton, the newest addition to Team Talos, stepped in to host this episode! She, Lurene and Matt got together for Mental Health Awareness Month and share stories and advice with one another. Cybersecurity is a notoriously rough field for burnout and an imbalance between work and life, so they share some ti…
…
continue reading
Our second of two episodes recorded live at the RSA Conference, Mitch and Lurene are joined by Nick Biasini from Talos Outreach and AJ Shipley, a vice president of product management for Cisco Secure. The four of them recap Nick and AJ's talk they gave at RSA and discuss the centralization of cybersecurity. AJ shares some important insights about t…
…
continue reading
This is the first of two episodes we have coming out that we recorded live at the RSA Conference. In this edition of Beers with Talos, we welcome Mick Baccio, a security strategist for Splunk, to talk about all things RSA. At this point in the week, we had hit the halfway point of RSA and were pretty tired already, so bear with us — don't expect an…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
The one where they talk a lot about wireless routers
54:45
54:45
Play later
Play later
Lists
Like
Liked
54:45
This episode discusses network resilience, hardware hygiene, and the recently disclosed Jaguar Tooth campaign. J.J. joins the show and the usual cast to discuss the recent attacks against out-of-date and unpatched wireless routers from sophisticated, state-sponsored actors. J.J., Matt and Lurene detail the research around these campaigns and advice…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Should we even care about vulnerability severity scores?
43:00
43:00
Play later
Play later
Lists
Like
Liked
43:00
Everyone fears the dreaded 10-out-of-10 CVSS severity score on a vulnerability with "critical" written somewhere on the advisory. But does that number even matter to an attacker or hypothetical defender? Matt, Mitch and Lurene discuss the various ways the security community classifies vulnerabilities and how potential targets can use that informati…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Beers with Talos Ep. #130: Ransomware is a people problem (but getting rid of email helps)
47:34
47:34
Play later
Play later
Lists
Like
Liked
47:34
(Recorded Jan. 27, 2023) No Matt this episode, so we have two guests in the rotating chair(s): Nick Biasini and David Liebenberg. Lurene, Mitch and our two esteemed companions talk about the human problem of ransomware. Lurene says getting rid of email altogether is the best option — but since that doesn't seem likely anytime soon, what are some ot…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Talos Year in Review 2022 w/ Dave Liebenberg
57:48
57:48
Play later
Play later
Lists
Like
Liked
57:48
With this episode, we set out to discuss the first annual Cisco Talos Year in Review report - a look back at the major threats, trends, and topics from 2022 and what we should take forward into 2023. Our guest Dave Liebenberg runs the team behind this report and joins us to discuss *why* his team undertook this effort, and some of the finer points …
…
continue reading
![Artwork](/static/images/128pixel.png)
1
I find your vulnerabilities offensive (and exploitable).
1:00:21
1:00:21
Play later
Play later
Lists
Like
Liked
1:00:21
We are (finally) talking about the recent OpenSSL vulnerability as we had to redo this EP. In our infinite podcasting wisdom, we took a stab at it roughly 2 hours before the embargo expired and coverage was released - which is obviously is a very silly idea in hindsight. After we cover the current issue at hand, Lurene leads us through the surface …
…
continue reading
Mitch was trying to preserve his voice, so Matt is driving the bus during this episode — hang on! In this edition, we're talking about script kiddies (unfortunately, not "kitties.") These are basically adversaries with an extreme base level of computer knowledge who use basic scripts to carry out cyber attacks. How can we avoid these attacks, even …
…
continue reading
![Artwork](/static/images/128pixel.png)
1
The intricacies of cyber conflict in Ukraine
58:24
58:24
Play later
Play later
Lists
Like
Liked
58:24
At the onset of Russia's invasion of Ukraine, many experts and government officials expected there to be two fronts of the war — one on the ground in Ukraine and one in cyberspace. But all things considered, we haven't seen as much offensive cyber warfare come from either side of this conflict this year. J.J. Cummings from Talos Threat Intelligence…
…
continue reading
We're excited to add to the growing Beers with Talos family with the addition of Lurene Grenier to the squad. Lurene joins her first episode and hits the ground running talking about her current role within Talos. She, Mitch and Matt talk about the major differences between exploit development and vulnerability discovery, and how Lurene started her…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Beers with Talos Ep. #111: Saying farewell to Craig and his killer robots
47:10
47:10
Play later
Play later
Lists
Like
Liked
47:10
[Re-uploaded to fix an audio gap.] Yes, we’ve been sitting on this one for a while. But it’s worth it, we promise! We wanted to wait until we had more news to share, so it’s finally time to announce that Craig has left us. We will absolutely miss Craig, but look forward to the next act of Beers with Talos now that 2/5ths of the original crew is gon…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Beers with Talos Ep. #112: A new host approaches!
56:51
56:51
Play later
Play later
Lists
Like
Liked
56:51
This is our first episode sans-Craig, but we didn’t wait long to find his replacement! Tune in as we add a new host to the crew. Then, we talk about drama on the ransomware landscape among as-a-service groups. Please note, we recorded this episode before everything dropped on Log4J. We are recording an emergency episode as we speak on this and will…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Beers with Talos Ep. #117: Talos' Big Game commercial about a month too late
43:12
43:12
Play later
Play later
Lists
Like
Liked
43:12
We’re dropping two episodes today. This is undoubtedly the less serious of the two, as it was recorded prior to the invasion of Ukraine. Check out Ep. #118 for more on that situation. In this episode, though, we got to talk about Talos’ involvement at the Super Bowl. Mitch welcomes on Brett Ellis, who was at SoFi Stadium in Los Angeles to help defe…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Beers with Talos Ep. #113: Emergency Log4j live show
59:35
59:35
Play later
Play later
Lists
Like
Liked
59:35
Log4j was a big enough deal that we finally decided to host a live show. Mitch, Matt, Liz and special guest JJ Cummings from our Threat Intel team got together to update everyone on where things stand with this critical vulnerabilities. It’s not all doom and gloom though, Matt at least brought some memes!…
…
continue reading