Sophos named a Leader in 2023 Gartner®️ Magic Quadrant™️ for Endpoint Protection Platforms
Credit to Author: Sally Adam| Date: Fri, 12 Jan 2024 16:00:15 +0000
For the 14th consecutive report, Sophos has been recognized as a Leader.
Read moreEDR
Microsoft Revokes Malicious Drivers in Patch Tuesday Culling
Credit to Author: Andrew Brandt| Date: Tue, 11 Jul 2023 17:20:38 +0000
In December 2022, Microsoft published their monthly Windows Update packages that included an advisory about malicious drivers, signed by Microsoft and other code-signing authorities, that Sophos X-Ops (and others) observed threat actors abusing during attacks. Today, Microsoft issued Security Advisory ADV230001 as part of their July Windows Update that addresses Sophos’ discovery of more than […]
Read more‘AuKill’ EDR killer malware abuses Process Explorer driver
Credit to Author: Andrew Brandt| Date: Wed, 19 Apr 2023 10:00:43 +0000
Driver based attacks against security products are on the rise
Read moreDefenders vs. Adversaries: The Two-Speed Cybersecurity 2023 Race
Credit to Author: Sally Adam| Date: Tue, 04 Apr 2023 09:45:12 +0000
Slowed by multiple headwinds, defenders are falling behind while adversaries continue to accelerate. Organizations need to speed up the defender flywheel to enable them to pull ahead.
Read morePlay ransomware group claims to have stolen hotel chain data
Categories: News Tags: H-Hotel Tags: Play ransomware Tags: ransomware Tags: extortion Tags: threat Tags: breach Tags: EDR A ransomware group claims to have stolen data from the H-Hotel chain, and is now threatening to leak it if the ransom is not paid |
The post Play ransomware group claims to have stolen hotel chain data appeared first on Malwarebytes Labs.
Read moreRemove All The Callbacks – BlackByte Ransomware Disables EDR Via RTCore64.sys Abuse
Credit to Author: Angela Gunn| Date: Tue, 04 Oct 2022 11:00:33 +0000
A fresh exploration of the malware uncovers a new tactic for bypassing security products by abusing a known driver vulnerability
Read moreCISA and FBI issue alert about Zeppelin ransomware
Categories: News Categories: Ransomware Tags: Zeppelin Tags: ransomware Tags: RDP Tags: Sonicwall Tags: phishing Tags: malvertising Tags: backups Tags: authentication Tags: mfa Tags: patching Tags: EDR The FBI and CISA have issued a joint Cybersecurity Advisory (CSA) to raise awareness about Zeppelin ransomware |
The post CISA and FBI issue alert about Zeppelin ransomware appeared first on Malwarebytes Labs.
Read moreRansomware protection with Malwarebytes EDR: Your FAQs, answered!
Credit to Author: Bill Cozens| Date: Thu, 04 Aug 2022 13:19:33 +0000
Malwarebytes security experts answer some of your most frequently asked questions about ransomware and how our EDR can help.
The post Ransomware protection with Malwarebytes EDR: Your FAQs, answered! appeared first on Malwarebytes Labs.
Read moreSimplifying the fight against ransomware: An expert explains
Credit to Author: Bill Cozens| Date: Wed, 27 Jul 2022 11:56:55 +0000
Fighting against ransomware can be difficult—especially if your organization has limited IT resources to begin with. But Adam Kujawa, security evangelist and director of Malwarebytes Labs, has a few tips for overburdened IT folks looking to simplify their fight against ransomware. In this post, we’ll break down Kujawa’s observations about ransomware and three tips on…
The post Simplifying the fight against ransomware: An expert explains appeared first on Malwarebytes Labs.
Read more