Focus Scroll Background

Sophos Blog

RSS

PHP advisory October 2026 feature image

Proof-of-concept exploit released for PHP vulnerabilities (CVE-2026-109618, CVE-2026-109619)

BRONZE SANDCASTLE deploys modified Meterpreter shells

The China-based threat group uses DLL sideloading in these attacks

Gabor Szappanos

ConnectWise Cloud Backup application abused in cross-tenant token sweep

Automated sign-ins used the vendor's Entra application identity to request Microsoft Graph tokens across consenting tenants

Beyond the mailbox: Graph reconnaissance and ServiceNow user enumeration in a modern identity intrusion

No novelty required to be effective

GoodRX

March 3, 2020

GoodRx stops sharing personal medical data with Google, Facebook

Naked Security

shutterstock_1445681333-compressor

March 3, 2020

Nvidia patches severe flaws affecting GeForce, Quadro NVS and Tesla

Naked Security

shutterstock_350982164-(1)-compressor

March 3, 2020

XSS plugin vulnerabilities plague WordPress users

Naked Security

shutterstock_1140050111-compressor

March 2, 2020

Siri and Google Assistant hacked in new ultrasonic attack

Naked Security

shutterstock_1619931007-compressor

March 2, 2020

Let’s Encrypt issues one billionth free certificate

Naked Security

shutterstock_740167675-compressor

March 2, 2020

Ironpie robot vacuum can suck up your privacy

Naked Security

Fresh phish! Stripe scam baked and delivered in under an hour

March 2, 2020

Fresh phish! Stripe scam baked and delivered in under an hour

Naked Security

shutterstock_1366066370-compressor

March 2, 2020

Facebook sues data analytics firm OneAudience over malicious SDK

Naked Security

sophos-thoma-bravo-announcement-post_v2-B

March 2, 2020

Sophos opens new chapter with take-private acquisition

Products & Services