Focus Scroll Background

Sophos Blog

RSS

A photograph of a large wave rising on the left-hand side

The breachpocalypse is here

It's just hard to measure

Ross McKerchar

Proof-of-concept exploit released for PHP vulnerabilities (CVE-2026-109618, CVE-2026-109619)

BRONZE SANDCASTLE deploys modified Meterpreter shells

The China-based threat group uses DLL sideloading in these attacks

Gabor Szappanos

ConnectWise Cloud Backup application abused in cross-tenant token sweep

Automated sign-ins used the vendor's Entra application identity to request Microsoft Graph tokens across consenting tenants

A Rustock-ing Stuffer

January 8, 2007

A Rustock-ing Stuffer

Research