Ryan Pentney reflects on 10 years of Talos and his many roles from the Sourcefire days
Summary: Ryan Pentney, Cisco Talos' threat intelligence lead for the Asia-Pacific region, has spent almost 17 years at Talos and its predecessor Sourcefire, joining in 2008 as one of fewer than 10 people on the detection team writing Snort rules and ClamAV signatures. Talos now numbers more than 500 people, and Pentney leads a team of 10 investigating active malware threats, international threat groups and state-sponsored actors.
Key Takeaway: The detection team Pentney joined in 2008 had fewer than 10 people; the group now exceeds 500, and he says his forward focus is state-sponsored activity and using Talos telemetry with mathematical and statistical methods to surface insights that are not obvious.
Read the original at Cisco Talos ↗
- Topics
- Threat Actors & Nation-State
- Related
- University of Texas at Arlington warns personal information stolen during cyberattack Cyber Risks · Nov 13, 2026Hackers Exploit PHP2Shell Flaws in Check Point Gateways to Deploy TSGA Backdoor and Wipe ESXi Files Cyber Risks · Nov 13, 2026Hackers compromise 4,800 GitHub accounts to steal cloud credentials Cyber Risks · Nov 12, 2026