BlackCat ransomware attacks not merely a byproduct of bad luck
Credit to Author: Andrew Brandt| Date: Thu, 14 Jul 2022 11:05:03 +0000
Older hardware and outdated operating systems contribute to attacks
Read moreSophosLabs Uncut
Rapid Response: The Ngrok Incident Guide
Credit to Author: Angela Gunn| Date: Thu, 14 Jul 2022 08:01:51 +0000
Ngrok is a legitimate remote-access tool. It is regularly abused by attackers, who use its capabilities and reputation to maneuver while bypassing network protections. This incident guide shows Security Operations Centers (SOCs) and response teams how to detect and respond to the suspicious presence or use of ngrok on the network.
Read moreJuly Patch Tuesday is Rich in Azure, Windows Issues
Credit to Author: Angela Gunn| Date: Wed, 13 Jul 2022 03:20:43 +0000
Windows-facing issues make up the bulk of the 85 CVEs addressed, with one vulnerability under active exploit in the wild
Read moreConfluence exploits used to drop ransomware on vulnerable servers
Credit to Author: Andrew Brandt| Date: Thu, 16 Jun 2022 11:00:03 +0000
Automated attacks are now widely exploiting the Atlassian vulnerability
Read moreSophos uncovers how APT groups carried out highly targeted attack
Credit to Author: Andrew Brandt| Date: Wed, 15 Jun 2022 21:16:52 +0000
Two groups with common task targeted network security devices in two-stage attacks, dropping remote access tools.
Read moreTelerik UI exploitation leads to cryptominer, Cobalt Strike infections
Credit to Author: Matt Wixey| Date: Wed, 15 Jun 2022 11:00:05 +0000
Attacker targets bugs in a popular web application graphical interface development tool
Read moreLighter Patch Tuesday for June remains rich in LDAP vulns
Credit to Author: Angela Gunn| Date: Tue, 14 Jun 2022 18:24:12 +0000
The second-lightest set of updates so far in 2022 goes heavy on RCEs, brings along four Intel patches for company
Read more‘Follina’ Word doc taps previously unknown Microsoft Office vulnerability
Credit to Author: Andrew Brandt| Date: Tue, 31 May 2022 00:41:42 +0000
MSDT.exe misuse in May makes for Memorial Day Monday mayhem
Read moreMove fast, unbreak things: About the Sophos Active Adversary Playbook 2022
Credit to Author: Angela Gunn| Date: Tue, 07 Jun 2022 11:16:50 +0000
Our latest report shows that the most pleasant way to learn from Rapid Response mayhem is to read about how it worked out for someone else
Read moreAnalyzing CVE-2022-0778: When Square Root Results in a Denial of Service
Credit to Author: hardikshah| Date: Wed, 01 Jun 2022 14:31:06 +0000
How could a humble SSL certificate entirely gridlock a system? Walk with us through the math
Read more