New Lua-based malware LucidRook observed in targeted attacks against Taiwanese organizations

Cisco Talos observed a spear-phishing attack delivering LucidRook, a newly identified stager that targeted a Taiwanese NGO in October 2025. The metadata in the email suggests that it was delivered via authorized mail infrastructure, which implies potential misuse of legitimate sending capabilities.

Pulse ID: 69d65cbe07a5f680cde16920
Pulse Link: https://otx.alienvault.com/pulse/69d65cbe07a5f680cde16920
Pulse Author: AlienVault
Created: 2026-04-08 13:48:46

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#Cisco #CyberSecurity #Email #InfoSec #LUA #Malware #OTX #OpenThreatExchange #Phishing #SpearPhishing #Talos #bot #AlienVault

Cisco Talos: Qilin EDR killer infection chain

Pulse ID: 69d33a5e7b8174614730aac9
Pulse Link: https://otx.alienvault.com/pulse/69d33a5e7b8174614730aac9
Pulse Author: Tr1sa111
Created: 2026-04-06 04:45:18

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#Cisco #CyberSecurity #EDR #InfoSec #OTX #OpenThreatExchange #Talos #bot #Tr1sa111

Cisco Talos: Qilin EDR killer infection chain

Endpoint detection and response (EDR) tools are widely deployed and far more capable than traditional antivirus. As a result, attackers use EDR killers to disable or bypass them. The malicious “msimg32.dll” used in Qilin ransomware attacks, which is a multi-stage infection chain targeting EDR systems. It can terminate over 300 different EDR drivers from almost every vendor in the market.

Pulse ID: 69ce8a077d7ad13478a8e495
Pulse Link: https://otx.alienvault.com/pulse/69ce8a077d7ad13478a8e495
Pulse Author: AlienVault
Created: 2026-04-02 15:23:51

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#Cisco #CyberSecurity #EDR #Endpoint #EndpointDetectionandResponse #InfoSec #OTX #OpenThreatExchange #RansomWare #Talos #bot #AlienVault

We made some maintenance upgrades to our Kubernetes cluster for our instance.

It was mostly smooth sailing. Enjoy!

https://status.goingdark.social/maintenance/846923

#kubernetes #goingdark #talos

Talos: Hardware accelerator for deep convolutional neural networks

https://talos.wtf/

#HackerNews #Talos #Hardware #Accelerator #Deep #Learning #ConvolutionalNeuralNetworks

When creating a Talos Linux based kubernetes cluster it is important to give your Talos nodes unique names. Giving two the same name makes it not work 😅

#Nerd #HomeLab #Talos #Kubernetes

🧵 Today, I learned about NAT collision in my Kubernetes cluster with wireguard (kubespan) to mesh the network between my home nodes and edge node.

#kubernetes #talos #network #homelab

#Kubernetes As a Service (KAAS) in #Proxmox: The purpose of this lab to demonstrate capabilities of #Talos Linux, Sidero (#CAPI), #FluxCD & #Proxmox #Operator, and how they can be used to provision #k8s clusters in a true #GitOps way.

> https://github.com/kubebn/talos-proxmox-kaas/tree/main