Threat Research

Microsoft stacks up 113 CVEs for January Patch Tuesday

GOLD SALEM tradecraft for deploying Warlock ransomware

React2Shell flaw (CVE-2025-55182) exploited for remote code execution

A big finish to 2025 in December’s Patch Tuesday

Sophos supports Objective-See Foundation to advance macOS security and inclusive cybersecurity education

The strange tale of ischhfd83: When cybercriminals eat their own

DragonForce actors target SimpleHelp vulnerabilities to attack MSP, customers

DragonForce targets rivals in a play for dominance

A familiar playbook with a twist: 3AM ransomware actors dropped virtual machine with vishing and Quick Assist