Focus Scroll Background

Sophos Blog

RSS

PHP advisory October 2026 feature image

Proof-of-concept exploit released for PHP vulnerabilities (CVE-2026-109618, CVE-2026-109619)

BRONZE SANDCASTLE deploys modified Meterpreter shells

The China-based threat group uses DLL sideloading in these attacks

Gabor Szappanos

ConnectWise Cloud Backup application abused in cross-tenant token sweep

Automated sign-ins used the vendor's Entra application identity to request Microsoft Graph tokens across consenting tenants

Beyond the mailbox: Graph reconnaissance and ServiceNow user enumeration in a modern identity intrusion

No novelty required to be effective

shutterstock_636016883-compressor

January 24, 2020

Privacy watchdog throws wider net to protect children online

Naked Security

A cloud with a silver lining

January 23, 2020

Looking for silver linings in the CVE-2020-0601 crypto vulnerability

Naked Security

shutterstock_1399561367-compressor

January 23, 2020

UN report alleges that Saudi crown prince hacked Jeff Bezos’s phone

Naked Security

shutterstock_227607664-compressor

January 23, 2020

Apple allegedly made nice with FBI by dropping iCloud encryption plan

Naked Security

shutterstock_1128215831-compressor

January 23, 2020

Sonos’s tone-deaf legacy product policy angers customers

Naked Security

Curveball

January 22, 2020

CVE-2020-0601 Q&A

SophosLabs Uncut

shutterstock_733556548-compressor

January 22, 2020

Ubisoft sues DDoS-for-hire operators for ruining game play

Naked Security

NIST

January 22, 2020

NIST’s new privacy rules – what you need to know

Naked Security

shutterstock_1062742397-compressor

January 22, 2020

Regus spills data of 900 staff on Trello board set to ‘public’

Naked Security