Officially

From the publisher, with its history intact.

Cisco Talos Intelligence talosintelligence.com

The Fine Art of Frustrating the Adversary

Imported from official source

Cybersecurity Classified by Officially

  • For Cybersecurity Awareness Month, eight Cisco Talos researchers share practical ways defenders can frustrate adversaries at different stages of an operation.
  • Deception techniques such as honeypot accounts, false infrastructure, and tarpits can slow adversaries down while giving defenders earlier opportunities to detect their activity.
  • Behavioral detections, tighter control of legitimate remote-management tools, and clear boundaries around AI agents can make essential adversary actions more visible and easier to interrupt.
  • Breaking dependencies between stages of an operation can prevent an adversary from reaching their next objective.

    • Years ago, Cisco Talos blocked an adversary’s command-and-control (C2) traffic. The adversary responded by tweeting, “Write a rule for your a**.”

    A fine endorsement of our work, if I’ve ever heard one. 

    Talos loves to see an adversary forced to change course. And if every alternative for them is slower, less stealthy, less reliable and more expensive? Chef’s kiss.

    Adversaries rely on certain advantages. They look for environments where tools and infrastructure allow them to blend in with normal activity. They also look for employees who can be pressured into acting before they have time to think.

    Strong cybersecurity defenses can change those conditions. They take away adversary choices and increase the risk attached to essential actions, forcing them to keep making new decisions. Each change of plan costs them time and resources, and may eventually cause them to give up and move to another target.

    It also creates more opportunities for defenders to spot what they are doing.

    This is an extract. The publication continues at the source.

    Read the original at the source: https://blog.talosintelligence.com/the-fine-art-of-frustrating-the-adversary/

    Officially imported this from Cisco Talos Intelligence’s own source and shows an extract. If you work there, claiming the profile and verifying the domain lets you choose to show the full text here.

    Provenance

    Organization
    Cisco Talos Intelligence — imported from official source
    Official source
    https://blog.talosintelligence.com/rss/ RSS
    Imported
    October 01, 2026 10:00
    Versions
    1 recorded
    Identity
    6abbe78414ab850001d399fb

    Officially records where a publication came from, not whether it is true. Imported records are reproduced from an organization's own official source.