Focus Scroll Background

Sophos Blog

RSS

PHP advisory October 2026 feature image

Proof-of-concept exploit released for PHP vulnerabilities (CVE-2026-109618, CVE-2026-109619)

BRONZE SANDCASTLE deploys modified Meterpreter shells

The China-based threat group uses DLL sideloading in these attacks

Gabor Szappanos

ConnectWise Cloud Backup application abused in cross-tenant token sweep

Automated sign-ins used the vendor's Entra application identity to request Microsoft Graph tokens across consenting tenants

Beyond the mailbox: Graph reconnaissance and ServiceNow user enumeration in a modern identity intrusion

No novelty required to be effective

shutterstock_1512002987-compressor

March 26, 2020

Adobe issues emergency fix for file-munching bug

Naked Security

shutterstock_1632557005

March 26, 2020

Hijacked Twitter accounts used to advertise face masks

Naked Security

shutterstock_231940516-compressor

March 26, 2020

Apple iOS 13.4 offers fixes for 30 vulnerabilities

Naked Security

shutterstock_1450286750-compressor

March 25, 2020

Windows has a zero-day that won’t be patched for weeks

Naked Security

shutterstock_1658523400-compressor

March 25, 2020

Hackers target WHO in phishing attack

Naked Security

shutterstock_1654862974-compressor

March 25, 2020

Battling the global COVID-19 scammers and fake news hawkers

Naked Security

shutterstock_1066305839-compressor

March 24, 2020

Facebook Messenger may ban mass-forwarding of messages

Naked Security

shutterstock_1136443607-compressor

March 24, 2020

Russia’s FSB wanted its own IoT botnet

Naked Security

shutterstock_1644424099-compressor

March 24, 2020

Feds shut down bogus COVID-19 vaccine site

Naked Security