Threat Research Archives - Page 10 of 11

Are threat actors turning to archives and disk images as macro usage dwindles?

by unitedimaging on October 12, 2022

Following Microsoft’s announcement that macros from the internet will be disabled by default, threat actors are using alternative file types for malware delivery. This shift brings both challenges and opportunities […]

You can’t always get what you want on Patch Tuesday

by unitedimaging on October 11, 2022

No joy for Exchange admins looking to seal off two widely reported Server vulns Contact us today for more information about SOPHOS cyber security solutions

Remove All The Callbacks – BlackByte Ransomware Disables EDR Via RTCore64.sys Abuse

by unitedimaging on October 4, 2022

A fresh exploration of the malware uncovers a new tactic for bypassing security products by abusing a known driver vulnerability Contact us today for more information about SOPHOS cyber security […]

Two Exchange Server vulns veer dangerously close to ProxyShell

by unitedimaging on October 3, 2022

A chained pair of vulnerabilities, plus PowerShell, affects the Microsoft messaging platform well in advance of Patch Tuesday; Sophos customers are protected Contact us today for more information about SOPHOS […]

A lighter Patch Tuesday, but one heavy with remote code execution bugs

by unitedimaging on September 13, 2022

There are fewer bugs in September’s update than in previous months, with RCE vulns making up the bulk of the addressed CVEs Contact us today for more information about SOPHOS […]

Cookie stealing: the new perimeter bypass

by unitedimaging on August 18, 2022

As organizations move to cloud services and multifactor authentication, cookies tied to identity and authentication give attackers a new path to compromise. Contact us today for more information about SOPHOS […]

Microsoft squares away 121-CVE Patch Tuesday for August

by unitedimaging on August 10, 2022

Another tough month for Azure admins; meanwhile, Windows takes a long road to a Dogwalk Contact us today for more information about SOPHOS cyber security solutions

Multiple attackers increase pressure on victims, complicate incident response

by unitedimaging on August 9, 2022

Sophos’ latest Active Adversary report explores the issue of organizations being hit multiple times by attackers Contact us today for more information about SOPHOS cyber security solutions

Genesis Brings Polish to Stolen-Credential Marketplaces

by unitedimaging on August 4, 2022

Four years on, Genesis Marketplace remains the go-to underground market for easy access to other people’s data Contact us today for more information about SOPHOS cyber security solutions

Behind the Research: The Making of “OODA: X-Ops Takes on Burgeoning SQL Server Attacks”

by unitedimaging on July 20, 2022

Today, we released new Sophos research into a series of Microsoft SQL Server attacks. We also released a new piece outlining our vision of how security operations can and will […]

OODA: X-Ops Takes On Burgeoning SQL Server Attacks

by unitedimaging on July 20, 2022

How do the pieces of Sophos X-Ops fit together? A combined effort makes tidy work of a threat actor’s big play Contact us today for more information about SOPHOS cyber […]

Sophos X-Ops FAQ

by unitedimaging on July 20, 2022

What exactly is Sophos X-Ops? Sophos X-Ops is a new, cross-operational (X-Ops) team linking SophosLabs, Sophos SecOps and Sophos AI, three established teams of cybersecurity experts at Sophos, to help […]

BlackCat ransomware attacks not merely a byproduct of bad luck

by unitedimaging on July 14, 2022

Older hardware and outdated operating systems contribute to attacks Contact us today for more information about SOPHOS cyber security solutions

July Patch Tuesday is Rich in Azure, Windows Issues

by unitedimaging on July 12, 2022

Windows-facing issues make up the bulk of the 85 CVEs addressed, with one vulnerability under active exploit in the wild Contact us today for more information about SOPHOS cyber security […]

Active Adversary Playbook 2022 Insights: Web Shells

by unitedimaging on June 22, 2022

Public proofs-of-concept of web shell exploits coincide with major spikes in attacks. Contact us today for more information about SOPHOS cyber security solutions

Confluence exploits used to drop ransomware on vulnerable servers

by unitedimaging on June 16, 2022

Automated attacks are now widely exploiting the Atlassian vulnerability Contact us today for more information about SOPHOS cyber security solutions