Focus Scroll Background

Sophos Blog

RSS

A photograph of a large wave rising on the left-hand side

The breachpocalypse is here

It's just hard to measure

Ross McKerchar

Proof-of-concept exploit released for PHP vulnerabilities (CVE-2026-109618, CVE-2026-109619)

BRONZE SANDCASTLE deploys modified Meterpreter shells

The China-based threat group uses DLL sideloading in these attacks

Gabor Szappanos

ConnectWise Cloud Backup application abused in cross-tenant token sweep

Automated sign-ins used the vendor's Entra application identity to request Microsoft Graph tokens across consenting tenants

September 15, 2021

S3 Ep50: Two 0-days plus another 0-day plus a fast food bug [Podcast]

Naked Security

Copy of Featured image for Sophos News & Nak Sec (46)

September 15, 2021

Hindsight #6: Stay Ahead of the Game

Products & Services

Copy of Featured image for Sophos News & Nak Sec (42)

September 15, 2021

IDC Market Note: Sophos Plays a Quartet of Aces

Products & Services

Apple products vulnerable to FORCEDENTRY zero-day attack – patch now!

September 14, 2021

Apple products vulnerable to FORCEDENTRY zero-day attack – patch now!

Naked Security

wall-e cockroach screen

September 14, 2021

Big Office bug squashed for September 2021’s Patch Tuesday

Threat Research

Copy of Featured image for Sophos News & Nak Sec (38)

September 14, 2021

The State of Ransomware in Financial Services 2021

Products & Services

Serious Security: How to make sure you don’t miss bug reports!

September 13, 2021

Serious Security: How to make sure you don’t miss bug reports!

Naked Security

Windows zero-day MSHTML attack – how not to get booby trapped!

September 8, 2021

Windows zero-day MSHTML attack – how not to get booby trapped!

Naked Security

Poisoned proxy PACs! The NPM package with a network-wide security hole…

September 6, 2021

Poisoned proxy PACs! The NPM package with a network-wide security hole…

Naked Security