RSS
X-ops
Patch Tuesday
Microsoft
Windows
Threat Research
SophosLabs Uncut
Microsoft stacks up 113 CVEs for January Patch Tuesday
cybercrime
Featured
GOLD SALEM
Ransomware
Warlock
GOLD SALEM tradecraft for deploying Warlock ransomware
Zero Days
A big finish to 2025 in December’s Patch Tuesday
vulnerability
react2shell
React2Shell flaw (CVE-2025-55182) exploited for remote code execution
Security news
Mac
mac malware
sponsorship
Sophos supports Objective-See Foundation to advance macOS security and inclusive cybersecurity education
Security Operations
Dragonforce
MSP
Simplehelp
Sophos MDR Incident Response
Sophos X-Ops
supply chain compromise
DragonForce actors target SimpleHelp vulnerabilities to attack MSP, customers
ctu
Gold Harvest
RansomHub
scattered spider
DragonForce targets rivals in a play for dominance
3am ransomware
vishing
A familiar playbook with a twist: 3AM ransomware actors dropped virtual machine with vishing and Quick Assist
CVSS
patching
Prioritizing patching: A deep dive into frameworks and tools – Part 2: Alternative frameworks