Sophos X-Ops Archives - Page 5 of 6

Sophos 2023 Threat Report: the continued evolution of “Crime-as-a-Service”

by unitedimaging on November 17, 2022

Maturing marketplaces, capabilities-for-hire continue to proliferate professional tools, techniques and practices across the threat spectrum. Contact us today for more information about SOPHOS cyber security solutions

Microsoft patches 62 vulnerabilities, including Kerberos, and Mark of the Web, and Exchange…sort of

by unitedimaging on November 8, 2022

Still no fix for ProxyNotShell, but two MOTW bypasses get squashed Contact us today for more information about SOPHOS cyber security solutions

Family Tree: DLL-Sideloading Cases May Be Related

by unitedimaging on November 3, 2022

A threat actor’s repeated use of DLL-hijack execution flow makes for interesting attack results, including omnivorous file ingestion; we break down five cases and find commonalities Contact us today for […]

For Cybersecurity Awareness Month, how about better cybersecurity advice?

by unitedimaging on October 13, 2022

Let us be frank: The same old warnings to users aren’t cutting it, and it’s the technologists’ fault. Chester Wisniewski lays out a wiser way. Contact us today for more […]

Are threat actors turning to archives and disk images as macro usage dwindles?

by unitedimaging on October 12, 2022

Following Microsoft’s announcement that macros from the internet will be disabled by default, threat actors are using alternative file types for malware delivery. This shift brings both challenges and opportunities […]

Remove All The Callbacks – BlackByte Ransomware Disables EDR Via RTCore64.sys Abuse

by unitedimaging on October 4, 2022

A fresh exploration of the malware uncovers a new tactic for bypassing security products by abusing a known driver vulnerability Contact us today for more information about SOPHOS cyber security […]

Six months on: Looking back at the role of cyberattacks in the Ukraine War

by unitedimaging on September 14, 2022

When Russia invaded Ukraine on February 24th 2022, none of us knew what role cyberattacks might play in a full-scale invasion. Russia had been conducting cyberattacks against Ukraine since it […]

A lighter Patch Tuesday, but one heavy with remote code execution bugs

by unitedimaging on September 13, 2022

There are fewer bugs in September’s update than in previous months, with RCE vulns making up the bulk of the addressed CVEs Contact us today for more information about SOPHOS […]

Cookie stealing: the new perimeter bypass

by unitedimaging on August 18, 2022

As organizations move to cloud services and multifactor authentication, cookies tied to identity and authentication give attackers a new path to compromise. Contact us today for more information about SOPHOS […]

Lockbit, Hive, and BlackCat attack automotive supplier in triple ransomware attack

by unitedimaging on August 10, 2022

After gaining access via RDP, all three threat actors encrypted files, in an investigation complicated by event log clearing and backups. 3 attackers, 2 weeks – 1 entry point. Contact […]

Multiple attackers increase pressure on victims, complicate incident response

by unitedimaging on August 9, 2022

Sophos’ latest Active Adversary report explores the issue of organizations being hit multiple times by attackers Contact us today for more information about SOPHOS cyber security solutions

SophosAI presentations at Black Hat, BSides LV and DEF CON AI Village

by unitedimaging on August 8, 2022

Six presentations in Las Vegas this week cover multiple cybersecurity applications of machine learning Contact us today for more information about SOPHOS cyber security solutions

Genesis Brings Polish to Stolen-Credential Marketplaces

by unitedimaging on August 4, 2022

Four years on, Genesis Marketplace remains the go-to underground market for easy access to other people’s data Contact us today for more information about SOPHOS cyber security solutions

Behind the Research: The Making of “OODA: X-Ops Takes on Burgeoning SQL Server Attacks”

by unitedimaging on July 20, 2022

Today, we released new Sophos research into a series of Microsoft SQL Server attacks. We also released a new piece outlining our vision of how security operations can and will […]

OODA: X-Ops Takes On Burgeoning SQL Server Attacks

by unitedimaging on July 20, 2022

How do the pieces of Sophos X-Ops fit together? A combined effort makes tidy work of a threat actor’s big play Contact us today for more information about SOPHOS cyber […]

Building the AI-Assisted SOC: Sophos’ Five-Year Perspective

by unitedimaging on July 20, 2022

Looking ahead to the Security Operation Center of the future, forged from developments in XDR, AI innovation, and programmable security posture and powered by the AI-UX value circuit Contact us […]