threat research – Page 16 – PossibleThreat Articles

Microsoft squares away 121-CVE Patch Tuesday for August

August 10, 2022 0 Comments dogwalk, follina, Microsoft, Patch Tuesday, threat research

Credit to Author: Angela Gunn| Date: Wed, 10 Aug 2022 12:31:41 +0000

Another tough month for Azure admins; meanwhile, Windows takes a long road to a Dogwalk

Multiple attackers increase pressure on victims, complicate incident response

August 9, 2022 0 Comments active adversary playbook, blackcat, conti, cryptominers, featured, hive, iabs, karakurt, lockbit, Ransomware, security operations, sophos x-ops, threat research

Credit to Author: Matt Wixey| Date: Tue, 09 Aug 2022 11:00:04 +0000

Sophos’ latest Active Adversary report explores the issue of organizations being hit multiple times by attackers

Security Sophos

Genesis Brings Polish to Stolen-Credential Marketplaces

August 4, 2022 0 Comments cybercriminals, genesis, iabs, Ransomware, sophos x-ops, threat research

Credit to Author: Yusuf Polat| Date: Thu, 04 Aug 2022 11:00:02 +0000

Four years on, Genesis Marketplace remains the go-to underground market for easy access to other people’s data

Security Sophos

Behind the Research: The Making of “OODA: X-Ops Takes on Burgeoning SQL Server Attacks”

July 20, 2022 0 Comments behind the research, security operations, sophos x-ops, threat research

Credit to Author: Christopher Budd| Date: Wed, 20 Jul 2022 11:00:25 +0000

Today, we released new Sophos research into a series of Microsoft SQL Server attacks. We also released a new piece outlining our vision of how security operations can and will be enhanced and improved by machine learning and artificial intelligence: “Building the AI-Driven SOC: Sophos’ 5-Year Perspective.” Finally, today we announced the launch of Sophos […]

Security Sophos

OODA: X-Ops Takes On Burgeoning SQL Server Attacks

July 20, 2022 0 Comments featured, managed threat response, mtr•rapid response, security operations, sophos rapid response, sophos x-ops, threat research

Credit to Author: Angela Gunn| Date: Wed, 20 Jul 2022 11:00:14 +0000

How do the pieces of Sophos X-Ops fit together? A combined effort makes tidy work of a threat actor’s big play

Security Sophos

Sophos X-Ops FAQ

July 20, 2022 0 Comments sophos x-ops, threat research

Credit to Author: Christopher Budd| Date: Wed, 20 Jul 2022 11:00:05 +0000

What exactly is Sophos X-Ops? Sophos X-Ops is a new, cross-operational (X-Ops) team linking SophosLabs, Sophos SecOps and Sophos AI, three established teams of cybersecurity experts at Sophos, to help organizations better defend against constantly changing and increasingly complex cyberattacks. The unit leverages the predictive, real-time, real-world, and deeply researched threat intelligence from each distinct […]

Security Sophos

BlackCat ransomware attacks not merely a byproduct of bad luck

July 14, 2022 0 Comments blackcat, citrix, esxi, featured, SophosLabs Uncut, threat research, vmware, vpn

Credit to Author: Andrew Brandt| Date: Thu, 14 Jul 2022 11:05:03 +0000

Older hardware and outdated operating systems contribute to attacks

Security Sophos

Rapid Response: The Ngrok Incident Guide

July 14, 2022 0 Comments Incident Response, mtr•rapid response, ngrok, SophosLabs Uncut, threat research

Credit to Author: Angela Gunn| Date: Thu, 14 Jul 2022 08:01:51 +0000

Ngrok is a legitimate remote-access tool. It is regularly abused by attackers, who use its capabilities and reputation to maneuver while bypassing network protections. This incident guide shows Security Operations Centers (SOCs) and response teams how to detect and respond to the suspicious presence or use of ngrok on the network.

Security Sophos