Cyber Risks · Cisco Talos

A puppet made me cry and all I got was this t-shirt

Summary: Cisco Talos published its 2025 Year in Review, drawn from Cisco telemetry, Talos research, and Talos Incident Response case data, and reports that attackers are targeting identity by compromising the infrastructure around it, including physical hardware devices, software, and management platforms. The newsletter also notes that network components act as de facto identity gateways, letting adversaries impersonate users, bypass MFA, and traverse networks undetected, and that compromising a single ADC or management platform can expose dozens of downstream systems.

Key Takeaway: Talos states that compromise of an identity-centric network component can invalidate MFA, bypass segmentation, and grant immediate access to high-value resources, and that one compromised ADC or management platform can expose dozens of downstream systems.

Read the original at Cisco Talos ↗

Topics
Malware
Related