RSS
X-ops
Patch Tuesday
Microsoft
Windows
Threat Research
SophosLabs Uncut
Microsoft stacks up 113 CVEs for January Patch Tuesday
Featured
vulnerability
react2shell
React2Shell flaw (CVE-2025-55182) exploited for remote code execution
cybercrime
GOLD SALEM
Ransomware
Warlock
GOLD SALEM tradecraft for deploying Warlock ransomware
Zero Days
A big finish to 2025 in December’s Patch Tuesday
Security news
Mac
mac malware
sponsorship
Sophos supports Objective-See Foundation to advance macOS security and inclusive cybersecurity education
Asyncrat
Backdoor
Cybercrime Forums
Lumma Stealer
Sophos X-Ops
The strange tale of ischhfd83: When cybercriminals eat their own
Security Operations
Dragonforce
MSP
Simplehelp
Sophos MDR Incident Response
supply chain compromise
DragonForce actors target SimpleHelp vulnerabilities to attack MSP, customers
ctu
Gold Harvest
RansomHub
scattered spider
DragonForce targets rivals in a play for dominance
3am ransomware
vishing
A familiar playbook with a twist: 3AM ransomware actors dropped virtual machine with vishing and Quick Assist