Predicting 2026
Summary: Cisco Talos' year-ahead newsletter predicts continued infostealer malware and phishing campaigns as adversaries map supply chains, proxy actors conducting destructive attacks funded by extortion, and breaches caused by poorly constrained or insufficiently governed AI agents given broader access to internal systems. The same edition reports Talos is monitoring UAT-8837, assessed with medium confidence as a China-nexus APT targeting critical infrastructure organizations in North America since at least 2025 by exploiting vulnerabilities or using stolen credentials, and notes Microsoft's January 2026 Patch Tuesday covered 112 vulnerabilities, 8 rated critical.
Key Takeaway: Talos assesses UAT-8837 can bypass traditional defenses, even leveraging zero-day vulnerabilities, against high-value critical infrastructure targets - while the familiar gaps it also names, unpatched systems, leaked credentials, and accounts without multi-factor authentication, remain the underpinnings of most successful attacks.
Read the original at Cisco Talos ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026