Cybersecurity

Sednit abuses XSS flaws to hit gov’t entities, defense companies

Operation RoundPress targets webmail software to steal secrets from email accounts belonging...

Welcoming the Malaysian Government to Have I Been Pwned

Today, we welcome the 40th government onboarded to Have I Been Pwned's...

Microsoft primes 71 fixes for May Patch Tuesday – Sophos News

Microsoft on Tuesday released 71 patches affecting 14 product families. Six of the addressed issues, five involving remote code execution and one permitting information...

China-Linked APTs Exploit SAP CVE-2025-31324 to Breach 581 Critical Systems Worldwide

May 13, 2025Ravie LakshmananVulnerability / Threat Intelligence A recently disclosed critical security flaw impacting SAP NetWeaver is being exploited by multiple China-nexus nation-state actors to...

Lumma Stealer, coming and going – Sophos News

In September 2024, a threat hunt across Sophos Managed Detection and Response’s telemetry uncovered a Lumma Stealer campaign using fake CAPTCHA sites that instructed...

Kaspersky ransomware report for 2024

Global ransomware trends and numbers With the International Anti-Ransomware Day just around the corner on May 12, Kaspersky explores the ever-changing ransomware threat landscape and...

Steganography Challenge: My Solution – SANS Internet Storm Center

When I tried to solve "Steganography Challenge" with the same method as I used in "Steganography Analysis With pngdump.py: Bitstreams", I couldn't recover the...

LockBit Ransomware Gang Breached, Secrets Exposed

Oh dear, what a shame, never mind. Yes, it's hard to feel too much sympathy when a group of cybercriminals who have themselves extorted millions...

MalwareTech – Darknet Diaries

Full Transcript MalwareTech was an anonymous security researcher, until he accidentally stopped WannaCry, one of the largest ransomware attacks in history....

Here’s what to look out for

Have you received a text message about an unpaid road toll? Make...

Troy Hunt: Passkeys for Normal People

Let me start by very simply explaining the problem we're trying to...

Finding Minhook in a sideloading attack – and Sweden too – Sophos News

Late in 2023 and during the first half of 2024, we monitored an attack campaign targeting several of our customers in multiple locations. Though...

Recent articles