Talos Intelligence Blog
blog.talosintel.com · Company blog · on HN since 2015
Cisco's Talos security research group publishes vulnerability reports, malware analysis, and threat write-ups on products such as PDFium, 7-Zip, and ntpd.
What HN saysHN links it for vulnerability disclosures, notably the PDFium flaw in Chrome, which prompted commenters to discuss PDF plugin choices.
16HN people shared it
2linked it in comments
24stories submitted
371story points
10 years agolast shared
2015people per year2026
Most-shared posts
- 1PDFium Vulnerability in Google Chrome Web Browser3 people · 6 points · first shared 2016 · discussion on HN
- 2Multiple 7-Zip Vulnerabilities Discovered2 people · 125 points · first shared 2016 · 68 comments on HN
- 3The "Wizzards" of Adware2 people · 72 points · first shared 2016 · 9 comments on HN
- 4Cisco Identifies Multiple Vulnerabilities in Ntpd2 people · 6 points · first shared 2015 · discussion on HN
- 5Threat Spotlight: CryptoWall 4 – The Evolution Continues2 people · 3 points · first shared 2015 · discussion on HN
- 6Apple Remote Code Execution with Image Files1 people · 133 points · first shared 2016 · 40 comments on HN
- 7Multiple RCE Vulnerabilities Within Lexmark Perceptive Document Filters1 people · 5 points · first shared 2016 · discussion on HN
- 8Apple Remote Code Execution with Image Files1 people · 3 points · first shared 2016 · discussion on HN
- 9OpenJPEG JPEG2000 Mcc Record Code Execution Vulnerability1 people · 2 points · first shared 2016 · discussion on HN
- 10Cisco Talos Blog: Widespread JBoss Backdoors a Major Threat1 people · 2 points · first shared 2016 · discussion on HN
- 11Research spotlight: needles in a haystack1 people · 2 points · first shared 2016 · discussion on HN
- 12Detecting DNS Data Exfiltration1 people · 2 points · first shared 2016 · discussion on HN
- 13Ransomware: Past, Present, and Future1 people · 2 points · first shared 2016 · discussion on HN
- 14Memcached Vulnerable to Remote Code Execution1 people · 2 points · first shared 2016 · discussion on HN
- 15Kernel Information Leak and Multiple DOS Issues Within Kaspersky Internet Security1 people · 2 points · first shared 2016 · discussion on HN
What HN people wrote when they linked it
dmix · 2016-09-30
Right, PDFium is the default. I've been using the PDF.js plugin for a while now and disabled the default via chrome://plugins.
Fortunately Chrome stopped supporting Foxit and Adobe PDF plugins with version 45 (released a year ago) when they depreciated NPAPI.
> As of Chrome 45, support for old, insecure NPAPI plugins is permanently removed. I believe Adobe Reader and Foxit Reader both integrate with web browsers through NPAPI plugins. If so, the old NPAPI-based Adobe Reader and Foxit Reader no longer works in Chrome, regardless of whichever version you have installed. http://www.chromium.org/developers/npapi-deprecation
It's interesting that they still expose their own C++ code to remote PDFs which apparently had some servere bugs: http://blog.talosintel.com/2016/06/pdfium.html