Focus Scroll Background

Sophos Blog

RSS

A photograph of a large wave rising on the left-hand side

The breachpocalypse is here

It's just hard to measure

Ross McKerchar

Proof-of-concept exploit released for PHP vulnerabilities (CVE-2026-109618, CVE-2026-109619)

BRONZE SANDCASTLE deploys modified Meterpreter shells

The China-based threat group uses DLL sideloading in these attacks

Gabor Szappanos

ConnectWise Cloud Backup application abused in cross-tenant token sweep

Automated sign-ins used the vendor's Entra application identity to request Microsoft Graph tokens across consenting tenants

Detecting Cobalt Strike: Penetration Testers

August 6, 2021

Detecting Cobalt Strike: Penetration Testers

Research

“Cobalt Strike” network attack tool patches crashtastic server bug

August 5, 2021

“Cobalt Strike” network attack tool patches crashtastic server bug

Naked Security

Sophos-news-featured-CompTIA-1200x628px-01

August 5, 2021

SophosLabs Intelix is now available to CompTIA ISAO members

Products & Services

Detecting Cobalt Strike: Government-Sponsored Threat Groups

August 5, 2021

Detecting Cobalt Strike: Government-Sponsored Threat Groups

Research

Detecting Cobalt Strike: Cybercrime Attacks

August 4, 2021

Detecting Cobalt Strike: Cybercrime Attacks

Research

Refactr Banners_Sophos-News-banner-1200x628px (2)

August 3, 2021

Sophos Acquires Refactr

Products & Services

4599528693_570c96e42f_k

August 3, 2021

Trash Panda as a Service: Raccoon Stealer steals cookies, cryptocoins, and more

Threat Research

Copy of Featured image for Sophos News & Nak Sec (16)

August 2, 2021

Hindsight #3: Deploy endpoint security everywhere

Products & Services

Microsoft researcher found Apple 0-day in March, didn’t report it

July 29, 2021

Microsoft researcher found Apple 0-day in March, didn’t report it

Naked Security