Threat Source newsletter (Nov. 7, 2019)
Summary: Cisco announced on Tuesday that Cisco Incident Response is becoming part of the Talos family, with IR gaining access to Talos intelligence and Talos adding IR's boots-on-the-ground experience to its portfolio. The newsletter also notes a BSides Lisbon talk by Vitor Ventura on abusing the Telegram registration process to intercept messages on non-rooted Android devices without replacing the official app, and a CactusCon talk by Edmund Brumaghin and Earl Carter on the past, present, and future of supply chain attacks.
What's compelling: The Telegram research shows that end-to-end encryption in a secure messaging app can be bypassed through the registration process itself, letting an attacker intercept messages on a non-rooted Android device without ever replacing the official application.
Read the original at Cisco Talos ↗
- Topics
- Detection & Response
- Related
- YARA-X 1.23.0 Release, (Sun, Nov 15th) Cyber Risks · Nov 15, 2026Inside Falcon AI Gateway: One Control Point for AI Traffic Cyber Risks · Nov 13, 2026Macfinger Click Fix campaign sends Down TheDRAIN infostealer for macOS, (Fri, Nov 13th) Cyber Risks · Nov 13, 2026