What’s your CNAPP maturity?

More and more enterprises are opting for cloud-native application protection platforms CNAPPs instead of complex and hard-to-manage cloud security point solutions. Find out where your organization is on its CNAPP maturity journey...

UK Rail Operator LNER Confirms Cyber Attack Exposing Passenger Data

LNER cyber attack exposes passenger contact details and journey data. No financial information or passwords were taken, but…...

What’s Your Cybersecurity Maturity?

This blog post looks at four key milestones along the cybersecurity maturity journey and poses some questions you can ask to determine the stage of your organization’s progress...

Malicious code in @npmteanew/curly-journey (npm)

The package @npmteanew/curly-journey was found to contain malicious code...

MAL-2025-8333 Malicious code in @lbnqduy/laughing-journey (npm)

The package @lbnqduy/laughing-journey was found to contain malicious code...

MAL-2025-9131 Malicious code in @npmteanew/curly-journey (npm)

The package @npmteanew/curly-journey was found to contain malicious code...

Malicious code in @lbnqduy/legendary-journey (npm)

The package @lbnqduy/legendary-journey was found to contain malicious code...

Malicious code in @lbnqduy/psychic-journey (npm)

The package @lbnqduy/psychic-journey was found to contain malicious code...

MAL-2025-8334 Malicious code in @lbnqduy/legendary-journey (npm)

The package @lbnqduy/legendary-journey was found to contain malicious code...

MAL-2025-8341 Malicious code in @lbnqduy/psychic-journey (npm)

The package @lbnqduy/psychic-journey was found to contain malicious code...

Malicious code in @lbnqduy/laughing-journey (npm)

The package @lbnqduy/laughing-journey was found to contain malicious code...

Microsegmentation in Zero Trust Part One: Introduction and Planning

The Journey to Zero Trust series covers cybersecurity capabilities and architecture supporting organization adoption of modern zero trust ZT principles. ZT’s core concept of never trust and always verify evolved from prior cybersecurity models. This current ZT series supports an organization’s ZT...

Meet Hazel Burton

Welcome to the first episode of Humans of Talos, a new video interview series that shines a spotlight on team members across Talos. Featuring their personal stories, career journeys and unique perspectives, you'll get an inside look into what it's like to work in our organization and the people w...

CVE-2025-41458 Insecure data storage vulnerability in Two App Studio Journey v5.5.9 for iOS

Unencrypted storage in the database in Two App Studio Journey v5.5.9 for iOS allows local attackers to extract sensitive data via direct access to the app’s filesystem...

PT-2025-30259 · Unknown · Two App Studio Journey

Name of the Vulnerable Software and Affected Versions: Two App Studio Journey version 5.5.9 Description: The application stores data in an unencrypted format within its database on iOS devices. This allows local attackers to extract sensitive information by directly accessing the application’s...

Two App Studio Journey 安全漏洞

Two App Studio Journey is a cross-platform digital diary application from Two App Studio Singapore. A security vulnerability exists in Two App Studio Journey version 5.5.9, which stems from unencrypted storage of the database and could lead to the disclosure of sensitive data...

PT-2025-30260 · Unknown · Two App Studio Journey

Name of the Vulnerable Software and Affected Versions: Two App Studio Journey version 5.5.6 Description: The local authentication component has insufficient protection against brute-force attacks and runtime manipulation on iOS. This allows local attackers to bypass biometric and PIN-based access...

Two App Studio Journey 安全漏洞

Two App Studio Journey is a cross-platform digital journaling application from Two App Studio Singapore. A security vulnerability exists in Two App Studio Journey version 5.5.6, which stems from insufficient protection of the local authentication component and could result in biometric and PIN...

Rising star: Meet Dylan, MSRC’s youngest security researcher

At just 13 years old, Dylan became the youngest security researcher to collaborate with the Microsoft Security Response Center MSRC. His journey into cybersecurity is inspiring—rooted in curiosity, resilience, and a deep desire to make a difference. Early beginnings: From scratch to security...

Getting a career in cybersecurity isn’t easy, but this can help

Welcome to this week's edition of the Threat Source newsletter. Happy summer, friends! I hope everyone is staying cool and/or warm. I am fresh back from an exhaustive but great time in San Diego at Cisco Live U.S. It was so good to see colleagues, meet new friends and pet many therapy dogs in the...