Focus Scroll Background

Sophos Blog

RSS

PHP advisory October 2026 feature image

Proof-of-concept exploit released for PHP vulnerabilities (CVE-2026-109618, CVE-2026-109619)

BRONZE SANDCASTLE deploys modified Meterpreter shells

The China-based threat group uses DLL sideloading in these attacks

Gabor Szappanos

ConnectWise Cloud Backup application abused in cross-tenant token sweep

Automated sign-ins used the vendor's Entra application identity to request Microsoft Graph tokens across consenting tenants

Beyond the mailbox: Graph reconnaissance and ServiceNow user enumeration in a modern identity intrusion

No novelty required to be effective

Serious Security: The decade-ending “Y2K bug” that wasn’t

December 23, 2019

Serious Security: The decade-ending “Y2K bug” that wasn’t

Naked Security

shutterstock_776180275-compressor

December 23, 2019

Man jailed for $122 million scam that fooled Google and Facebook

Naked Security

Snatch featured

December 9, 2019

Snatch ransomware reboots PCs into Safe Mode to bypass protection

SophosLabs Uncut

shutterstock_1465631834

September 30, 2019

Social media manipulation as a political tool is spreading

Naked Security

The GandCrab Connection

September 24, 2019

REvil: The GandCrab Connection

Research

September 24, 2019

OEM update – Sophos and Arcserve form global tech alliance

Products & Services

COBALT DICKENS Goes Back to School…Again

September 11, 2019

COBALT DICKENS Goes Back to School…Again

Research

shutterstock_1177771696

September 5, 2019

Scammers deepfake CEO’s voice to talk underling into $243,000 transfer

Naked Security

LYCEUM takes center stage in Middle East campaign

August 27, 2019

LYCEUM Takes Center Stage in Middle East Campaign

Research