From Microsoft to you, 33 packages
Credit to Author: Angela Gunn| Date: Tue, 12 Dec 2023 22:12:08 +0000
The lightest December Patch Tuesday in years still brings a few lumps of coal for infosec stockings
Read morethreat research
Cybercriminals can’t agree on GPTs
Credit to Author: Matt Wixey| Date: Tue, 28 Nov 2023 11:00:13 +0000
Despite concern over illicit applications of ChatGPT and similar models, Sophos X-Ops’ exploration of cybercrime forums suggests many threat actors are still skeptical – and wrestling with the same issues and problems as the rest of us
Read moreA November rain of patches from Microsoft
Credit to Author: Angela Gunn| Date: Thu, 16 Nov 2023 18:08:02 +0000
A collection of 57 CVEs for twelve product families is literally only half of the story this month
Read moreThe Song Remains the Same: The 2023 Active Adversary Report for Security Practitioners
Credit to Author: Angela Gunn| Date: Tue, 14 Nov 2023 11:00:10 +0000
The remarkable decline in attacker dwell time is now well-documented, but what does that mean for those doing the hands-on work of infosecurity?
Read moreSame threats, different ransomware
Credit to Author: gallagherseanm| Date: Sat, 11 Nov 2023 02:47:12 +0000
A threat cluster’s switch from Vice Society to Rhysida
Read moreMemory scanning leaves attackers nowhere to hide
Credit to Author: Matt Wixey| Date: Thu, 09 Nov 2023 13:46:19 +0000
Sophos X-Ops takes an in-depth look at memory scanning and why it matters
Read moreIdentifying Group Policy attacks
Credit to Author: Angela Gunn| Date: Wed, 08 Nov 2023 17:19:24 +0000
A threat hunt looks at three attacker changes to a compromised Active Directory, and explains how to both understand and overcome them
Read moreInvestigating data exfiltration…
Credit to Author: Angela Gunn| Date: Fri, 03 Nov 2023 17:09:16 +0000
…and introducing Sophos X-Ops’ new video channel, which provides viewers (and readers too) with a little something extra
Read moreStep-by-step through the Money Message ransomware
Credit to Author: Angela Gunn| Date: Tue, 31 Oct 2023 19:56:34 +0000
Money Message is an insidious ransomware family known for resisting detection and remediation in various ways. We walk through a recent case
Read moreRansomware actor exploits unsupported ColdFusion servers—but comes away empty-handed
Credit to Author: rajeshnataraj| Date: Thu, 19 Oct 2023 11:00:35 +0000
Multiple LockBit knock-off attacks in September targeting obsolete software foiled, exposing tactics and tools.
Read more