Insights
Analysis, regulatory guidance and threat research for security and risk leaders.
If something were amiss in your environment right now, would you know? Threat hunting doesn't need an intelligence team. Start with your own blind spots, one person and one hypothesis at a time.
Read the article
Our threat research team came across a fake identity-verification page in the wild and decided to follow it all the way down - by hand, without ever executing a single stage. What we found...
Read the article
The dark web isn't just a cybersecurity thriller plot — it's a thriving marketplace where your organisation's credentials, network access, and customer data are actively traded. For mid-market companies without dedicated security teams, understanding...
Read the article
Many companies rely on generic cybersecurity tools for threat intelligence—but these tools don’t reveal if your business is being actively targeted. Learn why tailored, context-aware threat intelligence is essential for staying ahead of modern...
Read the article
This threat advisory provides a detailed breakdown of a recent XWorm malware attack, revealing how attackers leveraged phishing emails, fileless execution, and process hollowing to infiltrate a target environment. By analysing the multi-stage attack...
Read the article
Talanos Dark and Deep Web Intelligence service is offered as both a single point-in-time risk assessment report as well as an ongoing detection and response capability, without limitations on the number of domains, public...
Read the article
Talanos truly believe that defenders who care about cybersecurity should put in the effort to close down attacker infrastructure they discover. We don’t do it for our customers, for money or for recognition - we...
Read the article
Introduction: The MITRE ATT&CK framework is well known for being the most accomplished knowledge base of adversary tactics and techniques based on real-world observations and for its ability to accurately project possible steps the...
Read the article
Introduction One of the interesting cases from the Talanos threat hunting team sessions was the discovery of the clear text credentials passed as parameters in the URL which belonged to the supplier’s website. This...
Read the article
An increasing number of cyber-attacks employ techniques to bypass multi-factor authentication (MFA) which allows criminals the ability to access corporate networks with limited ability by security teams to detect these threats.
Read the articleThirty minutes with a Talanos consultant to work through where you actually stand — no obligation, no sales script.