Security Operations Archives - Page 8 of 8

Top Five Reasons to Use MDR Services

by unitedimaging on September 29, 2022

Discover the benefits of adding 24/7 managed detection and response (MDR) to your defenses Contact us today for more information about SOPHOS cyber security solutions

Uber, Rockstar fall to social-engineering attacks; and you?

by unitedimaging on September 22, 2022

Events like this month’s breaches have happened before and will happen again. The task for defenders not directly affected by the Uber and Rockstar attacks, writes Chester Wisniewski, is to […]

Six months on: Looking back at the role of cyberattacks in the Ukraine War

by unitedimaging on September 14, 2022

When Russia invaded Ukraine on February 24th 2022, none of us knew what role cyberattacks might play in a full-scale invasion. Russia had been conducting cyberattacks against Ukraine since it […]

Lockbit, Hive, and BlackCat attack automotive supplier in triple ransomware attack

by unitedimaging on August 10, 2022

After gaining access via RDP, all three threat actors encrypted files, in an investigation complicated by event log clearing and backups. 3 attackers, 2 weeks – 1 entry point. Contact […]

Multiple attackers increase pressure on victims, complicate incident response

by unitedimaging on August 9, 2022

Sophos’ latest Active Adversary report explores the issue of organizations being hit multiple times by attackers Contact us today for more information about SOPHOS cyber security solutions

Behind the Research: The Making of “OODA: X-Ops Takes on Burgeoning SQL Server Attacks”

by unitedimaging on July 20, 2022

Today, we released new Sophos research into a series of Microsoft SQL Server attacks. We also released a new piece outlining our vision of how security operations can and will […]

OODA: X-Ops Takes On Burgeoning SQL Server Attacks

by unitedimaging on July 20, 2022

How do the pieces of Sophos X-Ops fit together? A combined effort makes tidy work of a threat actor’s big play Contact us today for more information about SOPHOS cyber […]

Rapid Response: The Ngrok Incident Guide

by unitedimaging on July 14, 2022

Ngrok is a legitimate remote-access tool. It is regularly abused by attackers, who use its capabilities and reputation to maneuver while bypassing network protections. This incident guide shows Security Operations […]

Confluence exploits used to drop ransomware on vulnerable servers

by unitedimaging on June 16, 2022

Automated attacks are now widely exploiting the Atlassian vulnerability Contact us today for more information about SOPHOS cyber security solutions

Telerik UI exploitation leads to cryptominer, Cobalt Strike infections

by unitedimaging on June 15, 2022

Attacker targets bugs in a popular web application graphical interface development tool Contact us today for more information about SOPHOS cyber security solutions

Move fast, unbreak things: About the Sophos Active Adversary Playbook 2022

by unitedimaging on June 7, 2022

Our latest report shows that the most pleasant way to learn from Rapid Response mayhem is to read about how it worked out for someone else Contact us today for […]