Forest Global Training Partners

Cyber Risks · Cisco Talos

Do we still have to keep doing it like this?

Summary: In a Threat Source newsletter keynote recap, Wendy Nather noted that the InfoSec Research Council's 2005 'Hard Problems' list still matches the toughest challenges of 2025, and that security is harder now due to added complexity, supply chains, stolen credentials and shared infrastructure. Nather also cited an organization where people who attended cybersecurity awareness training were more likely to click malicious links, and Cisco Talos published research on Bring Your Own Vulnerable Driver attacks, identifying three major payloads and activity linked to ransomware groups.

What's compelling: Talos reports that exploitation of vulnerable drivers has moved from advanced threat actors to commodity threats, primarily ransomware, with attackers using corrupted drivers to escalate privileges, deploy unsigned code, or terminate EDR tools - meaning the tooling built to stop ransomware can itself be switched off.

Read the original at Cisco Talos ↗

Topics
Malware
Related