Talos Incident Response quarterly threat report — The top malware families and TTPs used in Q2 2021
Summary: Cisco Talos Incident Response reported that ransomware accounted for about 46 percent of all threats in Q2 2021, more than tripling the next most common threat, exploitation of Microsoft Exchange Server vulnerabilities. Health care was the most-targeted vertical for the third consecutive quarter, and actors used commercial tools such as Cobalt Strike, open-source tools including Rubeus, and native binaries such as PowerShell.
Why it matters: For the vast majority of incidents, CTIR could not reasonably determine the initial vector because of logging deficiencies, and CTIR notes that many ransomware incidents it observed could have been prevented had MFA been enabled on critical services.
Read the original at Cisco Talos ↗
- Topics
- Detection & Response
- Related
- YARA-X 1.23.0 Release, (Sun, Nov 15th) Cyber Risks · Nov 15, 2026Inside Falcon AI Gateway: One Control Point for AI Traffic Cyber Risks · Nov 13, 2026Macfinger Click Fix campaign sends Down TheDRAIN infostealer for macOS, (Fri, Nov 13th) Cyber Risks · Nov 13, 2026