Close Encounters of the Human Kind

Cisco Talos blog posts (June 2026) covering multiple vulnerability disclosures, research, and tooling. Key items include: heap-based buffer overflow findings in MediaArea/MediaInfoLib; a DICOM/Pydicom/GDCM/Orthanc heap overflow case study; disclosure of vulnerabilities affecting TP-Link, Adobe Photoshop, OpenVPN, and Norton VPN; Microsoft Patch Tuesday coverage with Snort rules and notable CVEs; tracking of a BadIIS malware/MaaS ecosystem; and new tooling/techniques such as vbdec’s live COM object model for agentic reverse engineering and EvidenceForge for synthetic security logs. The feedalso