Focus Scroll Background

Sophos Blog

RSS

PHP advisory October 2026 feature image

Proof-of-concept exploit released for PHP vulnerabilities (CVE-2026-109618, CVE-2026-109619)

BRONZE SANDCASTLE deploys modified Meterpreter shells

The China-based threat group uses DLL sideloading in these attacks

Gabor Szappanos

ConnectWise Cloud Backup application abused in cross-tenant token sweep

Automated sign-ins used the vendor's Entra application identity to request Microsoft Graph tokens across consenting tenants

Beyond the mailbox: Graph reconnaissance and ServiceNow user enumeration in a modern identity intrusion

No novelty required to be effective

Back to School: COBALT DICKENS Targets Universities

August 24, 2018

Back to School: COBALT DICKENS Targets Universities

Research

20 years ago today! What we can learn from the CIH virus…

April 26, 2018

20 years ago today! What we can learn from the CIH virus…

Naked Security

shutterstock_790521382

February 19, 2018

Hackers sentenced for SQL injections that cost $300 million

Naked Security

SamSam: Converting Opportunity into Profit

February 15, 2018

SamSam: Converting Opportunity into Profit

Research

New Open-Source IDS Tools

November 16, 2017

New Open-Source IDS Tools

Research

Untitled design (8)

October 3, 2017

How a Twitter troll was slain

Naked Security

Untitled design(10)

September 21, 2017

Man vs machine: comparing artificial and biological neural networks

Products & Services

NotPetya Campaign: What We Know About the Latest Global Ransomware Attack

June 28, 2017

NotPetya Campaign: What We Know About the Latest Global Ransomware Attack

Research

June 27, 2017

Chinese Threat Group Targeted High-profile Turkish Organizations

Research