Threat Research Archives - Page 3 of 10

Attack tool update impairs Windows computers

by unitedimaging on August 27, 2024

An EDR killer Sophos X-Ops has tracked for three years continues to bedevil organizations targeted by ransomware gangs. Contact us today for more information about SOPHOS cyber security solutions

Qilin ransomware caught stealing credentials stored in Google Chrome

by unitedimaging on August 22, 2024

Familiar ransomware develops an appetite for passwords to third-party sites Contact us today for more information about SOPHOS cyber security solutions

Content updates and product architecture: Sophos Endpoint

by unitedimaging on August 15, 2024

Sophos X-Ops takes a look at the content updates in Intercept X, and how we validate and release them Contact us today for more information about SOPHOS cyber security solutions

August Patch Tuesday goes big

by unitedimaging on August 15, 2024

Monthly security release hauls out 85 CVEs… and that’s before the advisories Contact us today for more information about SOPHOS cyber security solutions

Ransomware attackers introduce new EDR killer to their arsenal

by unitedimaging on August 14, 2024

Sophos discovers the threat actors behind RansomHub ransomware using EDRKillShifter in attacks Contact us today for more information about SOPHOS cyber security solutions

Don’t get Mad, get wise

by unitedimaging on August 13, 2024

The “Mad Liberator” ransomware group leverages social-engineering moves to watch out for Contact us today for more information about SOPHOS cyber security solutions

The cybersecurity kids aren’t all right

by unitedimaging on August 12, 2024

A new Sophos-commissioned survey finds burnout, fatigue, cynicism riding high in the workforce Contact us today for more information about SOPHOS cyber security solutions

Best security practices for ESXi environments

by unitedimaging on August 7, 2024

Ten recommendations for defenders when natively run EDR isn’t an option Contact us today for more information about SOPHOS cyber security solutions

Turning the screws: The pressure tactics of ransomware gangs

by unitedimaging on August 6, 2024

Sophos X-Ops examines the increasingly aggressive tactics ransomware gangs use to coerce their targets Contact us today for more information about SOPHOS cyber security solutions

Driving lessons: The kernel drivers in Sophos Intercept X Advanced

by unitedimaging on August 1, 2024

Operating in kernel-space is necessary, but risky – here’s how we do it in Sophos Intercept X Advanced Contact us today for more information about SOPHOS cyber security solutions

July Patch Tuesday Unleashes a Torrent of Updates

by unitedimaging on July 9, 2024

Microsoft fixes 138 bugs in Windows and other products this month Contact us today for more information about SOPHOS cyber security solutions

Phishing, BEC attackers target candidates in local election, among others

by unitedimaging on June 13, 2024

An escalating series of email-borne attacks were sent to candidates, including the author Contact us today for more information about SOPHOS cyber security solutions

RD Web Access abuse: Fighting back

by unitedimaging on June 12, 2024

Investigation insights and recommendations from a recent welter of incident-response cases Contact us today for more information about SOPHOS cyber security solutions

June Patch Tuesday squares up with 49 patches

by unitedimaging on June 11, 2024

Just one critical-severity issue addressed, but don’t sleep on an industry-wide DNS issue Contact us today for more information about SOPHOS cyber security solutions

Operation Crimson Palace: Sophos threat hunting unveils multiple clusters of Chinese state-sponsored activity targeting Southeast Asian government

by unitedimaging on June 5, 2024

Threat clusters targeted a government agency for cyberespionage in a campaign that had precursors dating back to early 2022. Contact us today for more information about SOPHOS cyber security solutions

Operation Crimson Palace: A Technical Deep Dive

by unitedimaging on June 5, 2024

Sophos Managed Detection and Response initiated a threat hunt across all customers after the detection of abuse of a vulnerable legitimate VMware executable (vmnat.exe) to perform dynamic link library (DLL) […]