Threat Source Newsletter in orange against a dark blue background
Shakespeare, stubborn scripts, and shifting cyber trends — William’s got laughs and lessons waiting for you in this week’s newsletter: cs.co/63323hqmJL
Threat Advisory. The words "THREAT ADVISORY" are in bold white font over a bar. To the left is an icon with a biohazard symbol. At the bottom is "CISCO TALOS" in white text on a blue backdrop.
Cisco Talos is tracking active exploitation of CVE-2026-20127 affecting Cisco Catalyst SD-WAN Controllers. Customers are strongly advised to review our latest threat advisory (cs.co/9001hs79z) and follow the published guidance (cs.co/9001hs7aL) to protect your environment.
"Threat Spotlight" in yellow and white against a dark blue background. A spotlight shines down at the floor, with the malware symbol casting a shadow in the middle.
Cisco Talos is disclosing the "Dohdoor" backdoor, which is stealthily targeting education and health care networks using DNS-over-HTTPS, evading traditional security tools, and hiding behind trusted cloud infrastructure: cs.co/63327hqSsN
Threat Source Newsletter in orange against a dark blue background
In this week’s newsletter, Martin considers how defenders can turn the tables, using offensive AI tools against themselves: cs.co/63320heyqj
Cisco Talos presents "VULNERABILITY DEEP DIVE" in bold white text over a black hole graphic. The background is a gradient from dark blue to black, highlighted by a central spotlight.
What does it take to bypass hardware protections and find hidden flaws in industrial IoT devices? Discover how targeted emulation led to six new CVEs in our latest blog: cs.co/63325hjH4c
Valentine's card on orange background with white hearts, text: "To: Like a well-timed security patch, you make everything better. Consider this your Valentine's alert! From: THOR". Headshot of a man with glasses. "CISCO TALOS THREAT SOURCE NEWSLETTER".
Thor is here to make sure your news feed is never missing a critical update. Consider this your official alert to subscribe to our newsletter for the latest Talos research and security news: cs.co/threatsource
Against a blue background, a woman smiles next to the text: "To: If love were a phishing email, I'd still click on you. Don't tell the Talos IT team. From: Amy." The bottom reads: CISCO TALOS THREAT SOURCE NEWSLETTER cs.co/threatsource.
Amy thinks that some things are worth the risk, like clicking “subscribe” on the Threat Source newsletter for the best headlines and security updates: cs.co/threatsource
A Valentine card with the text 'To: One ring to rule them all. I hate single points of failure so... be my backup? From: Hazel'. A headshot of Hazel is on the left. The card also has the CISCO Talos Threat Source Newsletter and cs.co/threatsource URL.
Hazel is geeking out over the perfect security strategy, and she wants you to be part of the fellowship. Join the adventure by subscribing to the Threat Source newsletter for the latest research and security news: cs.co/threatsource
Threat Source Newsletter banner
If you thought your vulnerability backlog couldn’t get any bigger, meet Shannon, a fully autonomous AI penetration testing tool. Amy’s got the details (and many questions) in this week’s newsletter: cs.co/63329hurDH
A Valentine's Day image with a man, presumably named Joe, next to the following text: "To: HI FRIENDS!! Roses are red and exploits are mean, but you're the strongest layer in my security routine. From: JOE".
Joe is sending a digital high-five and a whole lot of threat intelligence your way, Valentine! Keep your security routine extra sweet by subscribing to the Threat Source newsletter for the latest Talos research and security news: cs.co/threatsource
Ransomware chills, phishing heats up… Dig into Q4 2025’s top IR trends and get practical tips from Amy and Dave on the latest Talos Takes episode: cs.co/63323h3NVL
Humans of Talos banner
Hear Ryan Liles spill the tea on how he plays the ultimate middleman between Cisco’s product teams and third-party testing labs: cs.co/63328h3FBs
Valentine's card with an orange background, it reads: "To: You must be library fines because my heart skips a beat every time I see you. Be my Threat Source Valentine? From: WILLIAM" with a headshot of William, and 'cs.co/threatsource'.
Looking for a security Valentine who has a book quote to go with every bit of threat intel? Subscribe to the Threat Source newsletter today for more heartfelt notes from Bill: cs.co/threatsource
Valentine's Day image featuring "To: Roses are red, cyber breaches make me blue. I'd love my detection logic to protect you. Happy Valentine's Day. From: Martin", alongside a headshot and the text "TALOS THREAT SOURCE NEWSLETTER".
Let Martin’s detection logic keep your heart and your network safe this Valentine's Day. Subscribe to the Threat Source newsletter today for the latest Talos research and security news: cs.co/threatsource
Cisco Talos Incident Response presents "Tales from the Frontlines: Recapping the action and sharing stories from behind the scenes," on February 11, 2026, at 10:00 a.m. ET/4:00 p.m. CET. Register at https://cs.co/IRTales-2025-Q4.
There's still time to register! Tomorrow, Cisco Talos IR is sharing the most critical and high-impact incidents they responded to last quarter and how you can protect your organization: cs.co/IRTales-2025...
Dark blue banner with bright orange letters reading "Threat Source Newsletter"
Welcome to AI church, where the spirit is willing but the Clawdbot security is weak. Grab a pew and listen to Joe's cautionary sermon: cs.co/63325hyYHf
CISCO TALOS Incident Response presents "Tales from the Frontlines," recapping action and sharing stories. The Webex event is on February 11, 2026, at 10:00 a.m. ET/4:00 p.m. CET. Register at https://cs.co/IRTales-2025-Q4.
Register now! In this exclusive session, Cisco Talos IR is sharing the most critical and high-impact incidents they responded to last quarter, and what you can do to protect yourself: cs.co/IRTales-2025...
Cisco Talos Incident Response promo: "Tales from the Frontlines." Action recap and behind-the-scenes stories. February 11, 2026, 10:00 a.m. ET/4:00 p.m. CET. Register at https://cs.co/IRTales-2025-Q4. Knight illustration.
Real incidents, real organizations, real lessons learned. Don't miss this live session with Cisco Talos IR next week to hear about the most critical and high-impact incidents they responded to last quarter. Register now: cs.co/IRTales-2025...
Background features a blue gradient with concentric circles. The text states 'Cisco Talos' at the top. Below, in bold orange letters, it reads 'THREAT SOURCE NEWSLETTER.' At the bottom, it says, 'All the security news you need to know - hitting your inbox every Thursday.'
Feeling overwhelmed by just about everything? This week’s newsletter from Hazel shares a touch of Taskmaster-inspired levity, and the latest cyber threats:cs.co/63326hDp4i
A blurred face of a person wearing a dark sweater, positioned against a light background. To the right, a logo featuring the letters 'TP' in blue on a black and white grid design with the text 'Talos Threat Perspective' and 'Cisco Talos' below.
Tune in to the latest episode of the Talos Threat Perspective as Hazel, Joe Marshall, and Craig Jackson explore Q4 2025’s top cybersecurity trends: cs.co/63321hDGlS
White text reading "Cisco Talos Incident Respnose Quarterly Trends" on a dark blue background. A shield logo in black, blue, and gray to the right of it.
In Q4 2025, Cisco Talos IR observed a surge in exploitation of public-facing applications and a targeted phishing campaign against Native American tribal organizations: cs.co/63322h6w1q
A digital poster featuring a knight-like armored figure with a shield, set against a fortress backdrop. Text reads: 'Tales from the Frontlines' and details a Cisco Talos event on February 11, 2026, at 10:00 am ET.
Go beyond the blog with Cisco Talos IR on February 11. This live session features candid stories, behind-the-scenes insights, and strategic lessons learned from the most critical real-world incidents we faced last quarter. Register to attend now: cs.co/IRTales-2025...
Logo for 'Talos Takes' featuring a microphone graphic with a mesh pattern. The text 'TALOS' is prominently displayed in bold white letters, while 'TAKES' is in a smaller font. The background has a gradient blue design with soundwave patterns.
Think your data is safe just because it’s encrypted? In this episode, Amy, Yuri Kramarz, and Tim Wadhwa-Brown expose the surprising pitfalls — like default settings and poor key management — that could leave your secrets wide open: cs.co/63326hBbWw
Orange text reading "Threat Source Newsletter." White text underneath reading "All the security news you need to know - hitting your inbox every Thursday." Both are on a dark blue background.
This week’s newsletter from Bill reminds us why fighting through alert fatigue to stay vigilant — especially when it comes to reconnaissance events — and knowing your environment are essential for strong cybersecurity: cs.co/63321CAFMh
"Threat Source newsletter" in orange letters on a dark background. Above is the Cisco Talos logo, and beneath is the text in white, "All the security news you need to know - hitting your inbox every Thursday."
No crystal ball needed! In today’s newsletter, Martin unpacks why reflecting on today’s tense threat landscape helps us predict the twists and turns cybersecurity teams can expect in 2026: cs.co/63324CIYUa
Kick off 2026 with Talos Takes as new host Amy Ciminnisi and guest Joe Marshall dive into the wild world of cybersecurity certifications, break down some options, and get spicy tackling skeptics and barriers head-on: cs.co/63320CImV4
White text reading "HUMANS OF TALOS" on a navy background, with the Cisco Talos logo beneath and orange and purple chat boxes around the title.
Terryn Valikodath never imagined that a childhood jailbreaking iPhones and exploring criminal forensics would land him in incident response. Hear him recount the journey in our latest episode: cs.co/63324Cxnam
Bandages with a shield symbol arranged in an "X" over the "Tuesday" spot in a week-long calendar. Above are the words "PATCH TUESDAY" in white on a blue background.
Microsoft has released its monthly security update for January 2026. It includes 112 vulnerabilities affecting a range of products, including eight it marked as “critical:” cs.co/63327Cxoy7
Background features a glowing blue swirl. Text reads 'CISCO Live! Amsterdam February 9-13, 2026. Learn. Network. Innovate. Join us in Amsterdam for Cisco Live 2026. Register today. #CiscoLiveEMEA'.
Sign up for a Security Operations Center (SOC) Tour at Cisco Live Amsterdam 2026. Get a behind-the-scenes look at how Cisco detects and responds to active threats in real-time conference traffic: cs.co/63322CxnJi
In orange letters, "THREAT SOURCE NEWSLETTER." Underneath, it reads "All the security news you need to know - hitting your inbox every Thursday." Both are on a blue background with the Cisco Talos logo positioned above.
In this week's newsletter, see why Amy says showing up imperfectly, from art projects to cyber defense, beats chasing flawless resolutions every time: cs.co/63328CSOTI
