惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

云风的 BLOG
云风的 BLOG
The GitHub Blog
The GitHub Blog
Y
Y Combinator Blog
博客园 - 三生石上(FineUI控件)
T
The Blog of Author Tim Ferriss
宝玉的分享
宝玉的分享
Hugging Face - Blog
Hugging Face - Blog
WordPress大学
WordPress大学
V
Visual Studio Blog
小众软件
小众软件
Cyber Security Advisories - MS-ISAC
Cyber Security Advisories - MS-ISAC
MongoDB | Blog
MongoDB | Blog
V
V2EX
钛媒体:引领未来商业与生活新知
钛媒体:引领未来商业与生活新知
博客园 - 【当耐特】
Microsoft Azure Blog
Microsoft Azure Blog
The Cloudflare Blog
H
Hackread – Cybersecurity News, Data Breaches, AI and More
freeCodeCamp Programming Tutorials: Python, JavaScript, Git & More
Engineering at Meta
Engineering at Meta
L
LangChain Blog
Martin Fowler
Martin Fowler
GbyAI
GbyAI
博客园 - 司徒正美

Cisco Talos Blog

We've got one word for it, and it's usually the wrong one Active exploitation of Cisco Secure Firewall Management Center vulnerabilities Microsoft Patch Tuesday for September 2026 — Snort rules and prominent vulnerabilities ClearFake WebDAV infection chain delivers Amatera stealer, ZigCryptoStealer, and NetSupport Manager ClickFix moves into the browser: Cryptocurrency theft with Google-hosted C2 The story behind the intelligence “Sorry, I can’t help with that”: How your guardrails might become the attacker’s best friend JavaScript obfuscation: From party trick to phishing kit Choose your fighter: Balancing competing requirements to select models for your AI SOC The safety penalty: Reclaiming operational sovereignty in the age of AI Is Cyber missing the Marque? UAT-10147 deploys SPECTRE: A cross-platform implant with Linux rootkit and BYOVD capabilities UAT-10147: Chinese-speaking adversary integrates agentic AI into post-compromise operations Describing attacks with crime script analysis Curiouser and Curiouser Dissecting the JWR phishing framework Microsoft Patch Tuesday for August 2026 — Snort rules and prominent vulnerabilities Why metaphor may dictate your security strategy “Keep going, bro. You’ve got this!” A data-driven look at how adversaries are weaponizing AI [Webinar] Tales from the Frontlines: An exclusive briefing on Q2 incidents You were onto something with “It’s the Climb,” Miley Black Hat special: Rewind and revisit IR Trends Q2 2026: Phishing and weaponized remote management tools drive attack chains Don’t swing at everything Chaos ransomware's msaRAT: Living off the browser to build a covert C2 channel Preview: Cisco Talos at Black Hat USA 2026 Begun, the Patch Wars have The Hunter's Paradox: Is it time to embrace automated threat hunting? UAT-11795 deploys novel Starland RAT and bespoke WLDR C2 implant in financially motivated campaign Microsoft Patch Tuesday for July 2026 — Snort rules and prominent vulnerabilities
Winning the cyber marathon with Tony Giandomenico
Amy Ciminnisi · 2026-06-04 · via Cisco Talos Blog

In the high-speed world of cybersecurity, the difference between a breach and a breakthrough often comes down to endurance. Tony Giandomenico, Senior Director of Product Management with Cisco Talos, joins me to discuss how he balances the intensity of leading major product launches with the grueling discipline of Ironman triathlons.

Beyond the technical specs and new threat hunting features, this conversation dives deep into the human side of leadership. Tony shares his hard-won lessons on the power of communication, the importance of knowing your "why," and how to navigate the complexities of a 30-year career without losing your focus.

Amy Ciminnisi: You have been in the thick of the cyber security world for a while now, and a lot of things have shifted in this field. So what has been the biggest surprise for you, and what keeps you excited about leading the charge on the product side?

Tony Giandomenico: Well, I would probably say that the biggest shift over the last six months has been the increase rate of the capabilities of these frontier models. I'm the first one not to jump on the bandwagon of this stuff, because I've been doing this for about 30 plus years or so, but I think this feels a little different. The capabilities are increasing, and I think what that means to cybersecurity is a big shift. How do we deal with all that? From the adversary side, they're actually breaking in the networks like they typically do. They're moving laterally within the environment. They're evading different types of security controls. Finding vulnerabilities, exploiting those vulnerabilities, all of that stuff.

It's also going to be supercharged on the defensive side. Of course, you don't bring a knife to a gun fight, right? You're going to use the same AI technology — you know, the same frontier models — to speed things up there as well. From the product management side, I think we're going to see the things that we would have previously seen five years down the road a lot sooner. And that's kind of that's what kind of excites me about everything — that opportunity to explore the art of possibility is a lot more at your fingertips where it wasn't necessarily before.

AC: We specifically lined this episode up with the Cisco Talos Threat Hunting launch, which you played a major role in. For people who aren't familiar, can you explain what it is?

TG: Threat hunting is where we're looking for different types of threats that are circumventing our existing security control alerts, detection mechanisms, and so on. When defenders invest in these different types of technologies that are automatically detecting alerts or threats in your environment, the challenge that they have is the sensitivity meter. If they set it to be too high, the team might get inundated with false positives, and then that particular product isn't really worth that investment because you're constantly have to investigate those. So the sensitivity meter has to find some place in the middle. That's where it gives these stealthy threat actors a place to live. So you have a combination of AI and human-in-the-loop services, where we build hypotheses to identify actors that may have actually already circumvented your security controls.

Currently, we're hunting in the endpoint telemetry side (e.g., Secure Endpoint) that we offer our customers today. With this expansion, we're expanding it out to our flagship firewall product. So we'll be hunting within Secure Firewall as well as identity, which actually includes Duo and CII, which is Cisco Identity Intelligence.

AC: How do you keep your cool and stay focused on the why behind the work when you're dealing with the intensity of a major launch?

TG: Before coming to Cisco, I had a small cybersecurity consulting company for about 10 years or so out in the Hawaiian Islands. I had the domain expertise, but I had to learn financial aspects, sales, and marketing. I also had to understand what makes people tick. I wasn't able to talk to every individual the same way to get them on board with things. So the biggest thing that I took away when I went from running my business to working in a larger organization was that when folks are in different departments, there are competing priorities and I have to influence them. I have to get them to understand and believe in the vision. So if you go in there with that mindset, knowing that it's not going to flow exactly how you envisioned, things just work out.


Want to see more? Watch the full interview, and don’t forget to subscribe to our YouTube channel for future episodes of Humans of Talos.