Threat Source newsletter (Dec. 10, 2020)
Summary: Cisco Talos reported that FireEye disclosed an incident resulting in the inadvertent disclosure of internally developed offensive security tools used across its red-team engagements. Microsoft's December Patch Tuesday disclosed 58 vulnerabilities, including 10 critical ones, the lowest count since January, while Talos also released protection against RegretLocker ransomware, which encrypts Windows virtual hard drives and closes open files to encrypt them.
Bottom line: FireEye's own red-team tooling is now loose in the wild, and RegretLocker's ability to encrypt virtual hard drives and force-close open files means VM-dependent environments face a ransomware strain built to defeat the assumption that locked files are safe.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026