The security threat landscape is constantly in flux as attackers evolve their skills and tactics. Cisco’s Talos team specializes in early-warning intelligence and threat analysis necessary to help secure networks in today’s volatile threat landscape. In this talk, Earl will analyze how the threat landscape has evolved over the last year or so by looking at some major threats that Talos has examined. Many people view the threat landscape simply as phishing, malvertising and software vulnerabilities. The threat landscape, however, has become much more complex. Now threats include new attack vectors such as DSN messenger solely utilizing DNS traffic for command and control activity, destructive malware such as the Nyetya supply chain attack that targeted 80% of the companies in the Ukraine as well as an evolution of self-propagating malware which began with the Wannacry attack and has continued to evolve with various other attacks such as Nyetya, BadRabbit & Olympic Destroyer. We are also starting to see more attacks target the IoT space with attacks such as VPNFilter. Only by understanding these various attacks and the vectors that they use can companies begin to protect their networks against these threats.
