Cisco Talos
Cisco's threat-intelligence and research group, tracking attackers and vulnerabilities to protect Cisco customers and publishing free research for defenders.
At a glance
- Entity level
- Unit within an organisation
- Type
- Unit of a company
- Part of
- Cisco Systems
- Also known as
- Talos Intelligence Group
- Flagship output
- Talos Year in Review (latest: 2025 Year in Review, 23 March 2026)
- Category
- Cyber & technology risk
- Tier
- Tier 1: One of the largest commercial threat-intelligence teams; Year in Review widely cited by defenders and media.
- Headquarters
- San Jose, United States
- Coverage
- Global threat landscape: vulnerabilities, ransomware, identity attacks, state-sponsored activity.
- Public access
- Free
- Latest activity seen
- 23 Mar 2026
- Evidence
- Active in 2025 to 26
How it produces intelligence
Telemetry from Cisco's security products plus incident-response casework and analyst research.
Risk themes
Focus regions
Links
What it publishes
| Output | Type | Cadence | Latest edition | Date | |
|---|---|---|---|---|---|
| Talos Year in Review | Threat report | Annual | 2025 Year in Review | 23 Mar 2026 | Read report |
| Threat Source newsletter | Daily/weekly briefing | Weekly | Read report | ||
| Talos Takes | Podcast | Irregular | Read report |
Latest findings
Recent public risk calls by Cisco Talos, summarised in our own words. They are its views, not 311's. Follow each source for the original.
Attackers kept exploiting old, deeply embedded software components such as Log4j and PHPUnit throughout 2025, while React2Shell surged in the final weeks of the year.
23 Mar 2026 · Horizon: 2025 to 2026 · Source: Cisco Talos 2025 Year in ReviewIdentity has become the main battleground: attackers abused weaknesses in multi-factor authentication flows and used hijacked accounts to send phishing from trusted senders.
23 Mar 2026 · Horizon: 2026 · Source: Cisco Talos 2025 Year in ReviewAttacker speed, AI tooling and exposed systems are shrinking the window defenders have to patch; ransomware crews increasingly blend in with normal activity.
23 Mar 2026 · Horizon: 2026 · Source: Cisco Talos 2025 Year in Review
Organisations doing similar work
Questions about Cisco Talos
What is Cisco Talos?
Cisco's threat-intelligence and research group, tracking attackers and vulnerabilities to protect Cisco customers and publishing free research for defenders.
How does Cisco Talos produce its intelligence?
Telemetry from Cisco's security products plus incident-response casework and analyst research.
Where is Cisco Talos based?
Cisco Talos is based in San Jose, United States.
What does Cisco Talos cover?
Its work covers cyber, technology & ai, conflict & security, with a focus on Global.
Profile compiled by the 311 Strategic Intelligence Unit from public sources. Last checked 21 Oct 2026. Listing is not a ranking or an endorsement. Evidence source. Is this your organisation? Request a correction.