Focus Scroll Background

Sophos Blog

RSS

PHP advisory October 2026 feature image

Proof-of-concept exploit released for PHP vulnerabilities (CVE-2026-109618, CVE-2026-109619)

BRONZE SANDCASTLE deploys modified Meterpreter shells

The China-based threat group uses DLL sideloading in these attacks

Gabor Szappanos

ConnectWise Cloud Backup application abused in cross-tenant token sweep

Automated sign-ins used the vendor's Entra application identity to request Microsoft Graph tokens across consenting tenants

Beyond the mailbox: Graph reconnaissance and ServiceNow user enumeration in a modern identity intrusion

No novelty required to be effective

shutterstock_1405837688-compressor

January 28, 2020

Cisco patches bugs in security admin center and Webex

Naked Security

shutterstock_699112630-compressor

January 28, 2020

Mozilla bans Firefox extensions for executing remote code

Naked Security

shutterstock_729070279-compressor

January 27, 2020

Cardplanet mastermind pleads guilty to credit card fraud

Naked Security

shutterstock_1454550503-compressor

January 27, 2020

Tinder to get panic button, catfish-fighting facial recognition

Naked Security

shutterstock_346794716-compressor

January 27, 2020

Instagram CEO’s homes were targetted by SWATters

Naked Security

shutterstock_398974516-compressor

January 27, 2020

New York wants to ban taxpayer-funded ransomware payments

Naked Security

shutterstock_1020925765 (2)

January 24, 2020

Google finds privacy holes in Safari’s ITP anti-tracking system

Naked Security

ICANN

January 24, 2020

Protestors petition equity firm over .org buyout

Naked Security

shutterstock_299447138-compressor

January 24, 2020

9th Methbot suspect arrested in massive clickfraud ring

Naked Security