SophosLabs Uncut Archives - United Imaging

BlackCat ransomware attacks not merely a byproduct of bad luck

by unitedimaging on July 14, 2022

Older hardware and outdated operating systems contribute to attacks Contact us today for more information about SOPHOS cyber security solutions

July Patch Tuesday is Rich in Azure, Windows Issues

by unitedimaging on July 12, 2022

Windows-facing issues make up the bulk of the 85 CVEs addressed, with one vulnerability under active exploit in the wild Contact us today for more information about SOPHOS cyber security […]

Confluence exploits used to drop ransomware on vulnerable servers

by unitedimaging on June 16, 2022

Automated attacks are now widely exploiting the Atlassian vulnerability Contact us today for more information about SOPHOS cyber security solutions

Sophos uncovers how APT groups carried out highly targeted attack

by unitedimaging on June 15, 2022

Two groups with common task targeted network security devices in two-stage attacks, dropping remote access tools. Contact us today for more information about SOPHOS cyber security solutions

Telerik UI exploitation leads to cryptominer, Cobalt Strike infections

by unitedimaging on June 15, 2022

Attacker targets bugs in a popular web application graphical interface development tool Contact us today for more information about SOPHOS cyber security solutions

Lighter Patch Tuesday for June remains rich in LDAP vulns

by unitedimaging on June 14, 2022

The second-lightest set of updates so far in 2022 goes heavy on RCEs, brings along four Intel patches for company Contact us today for more information about SOPHOS cyber security […]

Move fast, unbreak things: About the Sophos Active Adversary Playbook 2022

by unitedimaging on June 7, 2022

Our latest report shows that the most pleasant way to learn from Rapid Response mayhem is to read about how it worked out for someone else Contact us today for […]

Chain of Fools and Curveball. Microsoft update CVE-2020-0601 Q&A

by unitedimaging on January 22, 2020

This past Tuesday, Microsoft released its normal, monthly updates to Windows and other Microsoft products. Among the fixes included in this month’s release was one that resolves a security vulnerability […]

MyKings botnet spreads headaches, cryptominers, and Forshare malware

by unitedimaging on December 18, 2019

There’s a pretty good chance everyone who reads this story will have had some degree of interaction with a botnet we call MyKings (and others call DarkCloud or Smominru), whether […]

A Lighter-than-normal Patch Tuesday for December, 2019

by unitedimaging on December 10, 2019

In this month’s security updates, Microsoft is fixing 36 vulnerabilities: 7 of them are considered critical, 27 important, and 1 moderate. One of them is not categorized but, based on […]

Baldr vs The World: A SophosLabs report

by unitedimaging on August 6, 2019

(This blog post is a condensed summary of the report Baldr vs The World. – ed.) The videos touting cheat utilities for games like Apex Legends and Counter Strike: Go […]

A new Equation Editor exploit goes commercial, as maldoc attacks using it spike

by unitedimaging on July 18, 2019

There is a distinct point of maturation in the life cycle of an Office exploit: the point where it becomes generally available for the crimeware groups. Before that point the […]

‘Oto Gonderici’ Excel formula injections target Turkish victims

by unitedimaging on July 11, 2019

SophosLabs has been tracking the activities of a threat actor implicated in a large number of malicious spam attacks targeting large organizations based in Turkey since last fall. The attacks […]

16 critical vulnerabilities, some being exploited, fixed in July, 2019 Windows updates

by unitedimaging on July 9, 2019

Microsoft released their monthly security updates for July today. This month’s fixes address 77 vulnerabilities that affect Windows and a range of software that runs on Windows, mainly Internet Explorer, […]

CVE-2019-0888: Use-After-Free in Windows ActiveX Data Objects (ADO)

by unitedimaging on July 9, 2019

The SophosLabs Offensive Security Research team discovered a security vulnerability in the ActiveX Data Objects (ADO) component of Windows. Microsoft resolved the issue in the June 2019 edition of Patch […]