Focus Scroll Background

Sophos Blog

RSS

A photograph of a large wave rising on the left-hand side

The breachpocalypse is here

It's just hard to measure

Ross McKerchar

Proof-of-concept exploit released for PHP vulnerabilities (CVE-2026-109618, CVE-2026-109619)

BRONZE SANDCASTLE deploys modified Meterpreter shells

The China-based threat group uses DLL sideloading in these attacks

Gabor Szappanos

ConnectWise Cloud Backup application abused in cross-tenant token sweep

Automated sign-ins used the vendor's Entra application identity to request Microsoft Graph tokens across consenting tenants

multi cloud

March 10, 2021

Securing multi-cloud environments in government and public sector organizations

Products & Services

Serious Security: Webshells explained in the aftermath of HAFNIUM attacks

March 9, 2021

Serious Security: Webshells explained in the aftermath of HAFNIUM attacks

Naked Security

microsoft-word-vulnerabilidad-300×157

March 9, 2021

SophosLabs Offensive Security releases post-exploitation tool for Exchange

SophosLabs Uncut

patch tuesday

March 9, 2021

Critical updates dominate March, 2021 Patch Tuesday releases

SophosLabs Uncut

sophos intercept x

March 9, 2021

Intercept X’s new secret weapon: Dynamic Shellcode Protection

Products & Services

March 9, 2021

The importance of adaptability: a day in the life of a Distinguished Engineer

#SophosLife

Naked Security Live – ICU: How much do your home-working photos give away?

March 8, 2021

Naked Security Live – ICU: How much do your home-working photos give away?

Naked Security

Hafnium

March 8, 2021

Protecting Sophos customers from HAFNIUM

Products & Services

SUPERNOVA Web Shell Deployment Linked to SPIRAL Threat Group

March 8, 2021

SUPERNOVA Web Shell Deployment Linked to SPIRAL Threat Group

Research