James Nutland studies what makes threat actors tick, growing our understanding of the current APT landscape
Summary: James Nutland, an analyst on Cisco Talos' Threat Intelligence and Interdiction team, came to threat research through a social psychology degree and a master's in counterterrorism from the University of East London before moving into system administration and then Talos. His work led to disclosure of the TimbreStealer campaign targeting Mexican users with tax-themed lure documents, and he contributed victim notifications for Talos' Ukraine Task Force, where he found malicious use of a defense evasion tool that wipes traces and logs of connected USB devices and certain host user activity.
What's compelling: The defense evasion tool Nutland traced across multiple potential Ukrainian victims erases USB device traces and user activity logs on the host - the exact records investigators rely on after an intrusion, and Ukrainian organizations are now looking to crack down on it.
Read the original at Cisco Talos ↗
- Topics
- Detection & Response
- Related
- YARA-X 1.23.0 Release, (Sun, Nov 15th) Cyber Risks · Nov 15, 2026Inside Falcon AI Gateway: One Control Point for AI Traffic Cyber Risks · Nov 13, 2026Macfinger Click Fix campaign sends Down TheDRAIN infostealer for macOS, (Fri, Nov 13th) Cyber Risks · Nov 13, 2026