Focus Scroll Background

Sophos Blog

RSS

A photograph of a large wave rising on the left-hand side

The breachpocalypse is here

It's just hard to measure

Ross McKerchar

Proof-of-concept exploit released for PHP vulnerabilities (CVE-2026-109618, CVE-2026-109619)

BRONZE SANDCASTLE deploys modified Meterpreter shells

The China-based threat group uses DLL sideloading in these attacks

Gabor Szappanos

ConnectWise Cloud Backup application abused in cross-tenant token sweep

Automated sign-ins used the vendor's Entra application identity to request Microsoft Graph tokens across consenting tenants

Plundered bitcoins recovered by FBI – all 3,879-and-one-sixth of them!

December 22, 2021

Plundered bitcoins recovered by FBI – all 3,879-and-one-sixth of them!

Naked Security

morgue freezers

December 22, 2021

Avos Locker remotely accesses boxes, even running in Safe Mode

SophosLabs Uncut

Apache’s other product: Critical bugs in ‘httpd’ web server, patch now!

December 21, 2021

Apache’s other product: Critical bugs in ‘httpd’ web server, patch now!

Naked Security

Sophos Gives Back

December 21, 2021

Sophos Gives Back

#SophosLife

cabless-opener-art-crop

December 21, 2021

Attackers test “CAB-less 40444” exploit in a dry run

Threat Research

Log4Shell: The Movie… a short, safe visual tour for work and home

December 20, 2021

Log4Shell: The Movie… a short, safe visual tour for work and home

Naked Security

logjam

December 20, 2021

Logjam: Log4j exploit attempts continue in globally distributed scans, attacks

Serious Security: OpenSSL fixes “error conflation” bugs – how mixing up mistakes can lead to trouble

December 17, 2021

Serious Security: OpenSSL fixes “error conflation” bugs – how mixing up mistakes can lead to trouble

Naked Security

Wooden,Natural,Sawn,Logs,As,Background,,Top,View,,Flat,Lay

December 17, 2021

Log4Shell Response and Mitigation Recommendations

Security Operations