Cisco Talos Incident Response "Stories from the Field" #2: When do lawyers get involved?
Summary: Cisco Talos Incident Response published the second video in its "Stories in the Field" series, in which Matt Aubert argues that incident response teams should involve general counsel early in the recovery process. The same text notes that phishing remained the leading initial access technique, the percentage of ransomware and pre-ransomware cases increased, and finance and public administration tied as the top-targeted industries.
What you should know: Phishing stayed the top way attackers got in while ransomware and pre-ransomware cases rose, and finance and public administration were the most-targeted industries - so the legal question of when counsel joins is likely to come up in your next incident, not someone else's.
Read the original at Cisco Talos ↗
- Topics
- Detection & Response
- Related
- YARA-X 1.23.0 Release, (Sun, Nov 15th) Cyber Risks · Nov 15, 2026Inside Falcon AI Gateway: One Control Point for AI Traffic Cyber Risks · Nov 13, 2026Macfinger Click Fix campaign sends Down TheDRAIN infostealer for macOS, (Fri, Nov 13th) Cyber Risks · Nov 13, 2026