Forest Global Training Partners

Cyber Risks · Cisco Talos

Enter the substitute teacher

Summary: In this week's Cisco Talos Threat Source newsletter, a substitute author answers the question he gets most at speaking engagements about how to become a threat hunter by saying the key is intellectual curiosity, and advises readers to follow their aptitude rather than their passion. The newsletter also notes that academic researchers published a paper on Thursday revealing a newly discovered vulnerability in Apple's M-series chips that lets attackers extract secret keys from Macs during widely used cryptographic operations, and that Metasploit released Framework 6.4 with a Windows Meterpreter feature for searching process memory using regular expressions.

Why it matters: A vulnerability baked into Apple's M-series chips lets attackers pull secret keys out of Macs during routine cryptographic operations, which puts the keys protecting data and identities on those machines in scope. The newsletter's own framing is that vulnerabilities continue to be exploited and vendor consolidation continues, so the pipeline of new attack surface is not slowing.

Read the original at Cisco Talos ↗

Topics
Malware
Related