Focus Scroll Background

Sophos Blog

RSS

PHP advisory October 2026 feature image

Proof-of-concept exploit released for PHP vulnerabilities (CVE-2026-109618, CVE-2026-109619)

BRONZE SANDCASTLE deploys modified Meterpreter shells

The China-based threat group uses DLL sideloading in these attacks

Gabor Szappanos

ConnectWise Cloud Backup application abused in cross-tenant token sweep

Automated sign-ins used the vendor's Entra application identity to request Microsoft Graph tokens across consenting tenants

Beyond the mailbox: Graph reconnaissance and ServiceNow user enumeration in a modern identity intrusion

No novelty required to be effective

shutterstock_797829763-(1)-compressor

March 11, 2020

Microsoft leaves critical bug unpatched on Patch Tuesday

Naked Security

shutterstock_744392413-compressor

March 11, 2020

FBI arrests alleged owner of Deer.io, top market for stolen accounts

Naked Security

shutterstock_1245351790-compressor

March 11, 2020

Trial for accused CIA leaker ends in hung jury

Naked Security

shutterstock_1313269073-compressor

March 11, 2020

Brave browser to block web fingerprinting with randomisation

Naked Security

shutterstock_1515090200-compressor

March 10, 2020

Watch out for Office 365 and G Suite scams, FBI warns businesses

Naked Security

shutterstock_531657871-compressor

March 10, 2020

Google data puts innocent man at the scene of a crime

Naked Security

shutterstock_1051372523-compressor

March 10, 2020

Ex-Inspector General indicted for stealing data on 250k govt colleagues

Naked Security

shutterstock_1530697085-compressor

March 10, 2020

Phone carriers may soon be forced to adopt anti-robocall tech

Naked Security

March 10, 2020

Trust is dead, long live zero trust!

Products & Services