How Attackers Use Your Own Tools Against You (IR trends Q3 2025)

Update: 2025-11-13

Description

In this episode of Talos Takes Hazel sits down with Talos' Bill Largent and Craig Jackson to discuss the latest Cisco Talos Incident Response Quarterly Trends Report (Q3 2025). From a wave of Toolshell events, to a rise in post-exploitation phishing, and the misuse of legitimate tools like Velociraptor, this quarter’s cases all point to a theme: attackers are getting very good at living off what’s already in your environment. Read the full report at https://blog.talosintelligence.com/ir-trends-q3-2025/

Comments

In Channel

When You’re Told “No Budget”: The Blueprint for Staying Secure

2025-11-2524:08

How Attackers Use Your Own Tools Against You (IR trends Q3 2025)

2025-11-1311:21

Passwordless Security: Debunking the Biggest Myths

2025-10-2415:08

You Can't Patch Burnout: When Cybersecurity Takes a Toll

2025-10-0247:21

Tampered Chef: When Malvertising Serves Up Infostealers

2025-09-1811:22

Inside the Black Hat NOC: Lessons in Securing One of the Wildest Networks

2025-09-0323:05

Breaking Down Chaos: Tactics and Origins of a New RaaS Operation

2025-08-0115:33

Why Attackers Love Your Remote Access Tools

2025-07-1714:22

Teaching LLMs to spot malicious PowerShell scripts

2025-06-2616:16

How cybercriminals are camouflaging threats as fake AI tool installers

2025-06-0517:05

Inside the attack chain: A new methodology for tracking compartmentalized threats

2025-05-2216:29

Follow the motive: Rethinking defense against Initial Access Groups

2025-05-1516:38

Year in Review special pt. 4: How AI is influencing the threat landscape?

2025-05-0132:19

Year in Review special part 3: Identity and MFA attacks

2025-04-2422:58

Year in Review special part 2: The biggest ransomware trends

2025-04-1718:41

Year in Review special part 1: vulnerabilities, email threats, and adversary tooling

2025-04-1018:15

A blueprint for protecting major events

2025-02-2613:43

Why attackers are using hidden text salting to evade email filters

2025-02-1209:59

How to establish a threat intelligence program (Cisco Live EMEA preview)

2025-02-0516:01

Web shell frenzies, the first appearance of Interlock, and why hackers have the worst cybersecurity: IR Trends Q4 2024

2025-01-3113:59

00:00

How Attackers Use Your Own Tools Against You (IR trends Q3 2025)

#box-pro-ellipsis-176567588232292{-webkit-line-clamp:2;}How Attackers Use Your Own Tools Against You (IR trends Q3 2025)

How Attackers Use Your Own Tools Against You (IR trends Q3 2025)

Cisco Talos

How Attackers Use Your Own Tools Against You (IR trends Q3 2025)