Talos Takes Ep. #60: Everything you need to know about the Kaseya situation
Summary: Cisco Talos released a special "XL edition" of its Talos Takes podcast featuring the audio of a live stream in which Nick Biasini of Talos Outreach and Cisco product marketing manager Hazel Burton discussed the Kaseya supply chain attack and the follow-on ransomware attacks over the Fourth of July weekend. The same text also reports that ransomware incidents in Japan rose 4.7% year over year, with The Gentlemen the most active group and leak-site listings more than doubling from January to July, and that the Chaos group uses new malware called "msaRAT" that connects through the browser rather than directly to command-and-control.
Key Takeaway: The Kaseya campaign was a supply chain attack whose damage played out through follow-on ransomware, and the same text notes 134 ransomware incidents reported in Japan in 2025, a 17.5% year-over-year increase, with SMEs holding under JPY 1 billion accounting for 80% of victims.
Read the original at Cisco Talos ↗
- Topics
- Supply Chain & AppSec
- Related
- Kitesurf is now open source Cyber Risks · Nov 13, 2026Trained to betray: How post-training supply chain attacks hijack coding agents Cyber Risks · Nov 12, 2026ZDI-26-913: (0Day) Meta fairseq load_audio_path Code Injection Remote Code Execution Vulnerability Cyber Risks · Nov 11, 2026