Focus Scroll Background

Sophos Blog

RSS

PHP advisory October 2026 feature image

Proof-of-concept exploit released for PHP vulnerabilities (CVE-2026-109618, CVE-2026-109619)

BRONZE SANDCASTLE deploys modified Meterpreter shells

The China-based threat group uses DLL sideloading in these attacks

Gabor Szappanos

ConnectWise Cloud Backup application abused in cross-tenant token sweep

Automated sign-ins used the vendor's Entra application identity to request Microsoft Graph tokens across consenting tenants

Beyond the mailbox: Graph reconnaissance and ServiceNow user enumeration in a modern identity intrusion

No novelty required to be effective

ledger_1260547333-compressor

March 6, 2020

Chrome extension cons cryptocurrency users out of hardware wallet key

Naked Security

shutterstock_634584890-compressor

March 6, 2020

Cathay Pacific fined over crooks slurping its database for over 4 years

Naked Security

shutterstock_538171813-compressor

March 6, 2020

Boots yanks loyalty card payouts after 150K accounts get stuffed

Naked Security

Coronavirus warning spreads computer virus

March 5, 2020

Coronavirus warning spreads computer virus

Naked Security

shutterstock_1428033530-compressor

March 5, 2020

Facebook: No, we are not killing Libra

Naked Security

XGBanner

March 5, 2020

Intercept X and XG Firewall – the perfect pair

Products & Services

shutterstock_1210283029-compressor

March 5, 2020

Ethical hackers swarm Pentagon websites

Naked Security

shutterstock_488632870-compressor

March 5, 2020

Google launches FuzzBench service to benchmark fuzzing tools

Naked Security

wordswithf

March 5, 2020

Zynga faces class action suit over massive Words With Friends hack

Naked Security