Security Operations Archives - Page 3 of 8

Don’t get Mad, get wise

by unitedimaging on August 13, 2024

The “Mad Liberator” ransomware group leverages social-engineering moves to watch out for Contact us today for more information about SOPHOS cyber security solutions

Sophos MDR hunt tracks Mimic ransomware campaign against organizations in India

by unitedimaging on August 7, 2024

STAC6451 threat cluster targets Internet-exposed Microsoft SQL servers for initial access Contact us today for more information about SOPHOS cyber security solutions

Best security practices for ESXi environments

by unitedimaging on August 7, 2024

Ten recommendations for defenders when natively run EDR isn’t an option Contact us today for more information about SOPHOS cyber security solutions

Unlocking cyber insurance savings to fund MDR

by unitedimaging on July 24, 2024

Redirecting risk reduction spend from cyber insurance to MDR services is a win-win, resulting in better protection and lower cost coverage. Contact us today for more information about SOPHOS cyber […]

Cysurance announces discounted cyber insurance program for Sophos customers in Australia

by unitedimaging on July 9, 2024

Expanding our successful partnership from the United States to Australia. Contact us today for more information about SOPHOS cyber security solutions

MITRE Engenuity ATT&CK Evaluations for Managed Services (menuPass + ALPHV BlackCat)

by unitedimaging on June 18, 2024

Our view on the latest round of the MITRE Engenuity ATT&CK Evaluations for Managed Services. Contact us today for more information about SOPHOS cyber security solutions

RD Web Access abuse: Fighting back

by unitedimaging on June 12, 2024

Investigation insights and recommendations from a recent welter of incident-response cases Contact us today for more information about SOPHOS cyber security solutions

Operation Crimson Palace: A Technical Deep Dive

by unitedimaging on June 5, 2024

Sophos Managed Detection and Response initiated a threat hunt across all customers after the detection of abuse of a vulnerable legitimate VMware executable (vmnat.exe) to perform dynamic link library (DLL) […]

Extracting data from encrypted virtual disks: six methods

by unitedimaging on May 13, 2024

For incident responders, a variety of techniques for information retrieval from locked-up VMs Contact us today for more information about SOPHOS cyber security solutions

Sophos named a Leader in the 2024 IDC MarketScape for Worldwide Managed Detection and Response (MDR)

by unitedimaging on April 30, 2024

The IDC MarketScape evaluates the capabilities and business strategies of managed detection and response service providers worldwide. Contact us today for more information about SOPHOS cyber security solutions

The State of Ransomware 2024

by unitedimaging on April 30, 2024

Our fifth annual report reveals how ransomware experiences have changed over the last year, plus brand-new insights into the business impact of an attack. Contact us today for more information […]

Malware campaign attempts abuse of defender binaries

by unitedimaging on April 26, 2024

Command-and-control wares try to sneak onto systems disguised as various vendors; payloads vary, but Sophos customers are protected Contact us today for more information about SOPHOS cyber security solutions

Introducing Sophos Managed Risk, Powered by Tenable

by unitedimaging on April 3, 2024

Sophos Managed Risk combines vulnerability management technology from Tenable with Sophos’ threat expertise as a fully managed service. Contact us today for more information about SOPHOS cyber security solutions

Remote Desktop Protocol: The Series

by unitedimaging on March 20, 2024

What is RDP, why is it a very nearly ubiquitous finding in incident response, and how can investigators run it to ground it when it goes wrong? An Active Adversary […]

Remote Desktop Protocol: Exposed RDP (is dangerous)

by unitedimaging on March 20, 2024

Is it really that risky to expose an RDP port to the internet? What if you change the default port? What if it’s just for a little while? The data […]

Remote Desktop Protocol: How to Use Time Zone Bias

by unitedimaging on March 20, 2024

Where in the world is your attacker? Presenting a less-known but useful event to look for in your logs Contact us today for more information about SOPHOS cyber security solutions