Focus Scroll Background

Sophos Blog

RSS

PHP advisory October 2026 feature image

Proof-of-concept exploit released for PHP vulnerabilities (CVE-2026-109618, CVE-2026-109619)

BRONZE SANDCASTLE deploys modified Meterpreter shells

The China-based threat group uses DLL sideloading in these attacks

Gabor Szappanos

ConnectWise Cloud Backup application abused in cross-tenant token sweep

Automated sign-ins used the vendor's Entra application identity to request Microsoft Graph tokens across consenting tenants

Beyond the mailbox: Graph reconnaissance and ServiceNow user enumeration in a modern identity intrusion

No novelty required to be effective

S2 Ep33: Ransomware on sale, dark web disaster, dead drops and pillow forts – Naked Security Podcast

April 2, 2020

S2 Ep33: Ransomware on sale, dark web disaster, dead drops and pillow forts – Naked Security Podcast

Naked Security

shutterstock_597381098-compressor

April 2, 2020

Phone carriers must authenticate calls to fight robocalls, says FCC

Naked Security

shutterstock_1626743383

April 2, 2020

Coronavirus scams: what to look for and how to stop them

Products & Services

shutterstock_1642888921-compressor

April 2, 2020

COVID-19 forces browser makers to continue supporting TLS 1.0

Naked Security

shutterstock_1048598825-compressor

April 1, 2020

Bill Gates’s YouTube ‘Bitcoin giveaway’ is a big fat scam

Naked Security

shutterstock_793641088-compressor

April 1, 2020

QR code generator scam steals thousands in Bitcoin

Naked Security

shutterstock_1629340546-compressor

April 1, 2020

Microsoft’s Edge browser to get breached credential alerts

Naked Security

Security Team

April 1, 2020

Protecting your company during COVID-19: guidance for CIOs and CISOs

Products & Services

shutterstock_1437567077-compressor

March 31, 2020

Marriott International confirms data breach of up to 5.2 million guests

Naked Security