Using AI to stop tech support scams in Chrome
Posted by Jasika Bawa, Andy Lim, and Xinghui Lu, Google Chrome Security Tech support scams are an increasingly prevalent form...
Month: May 2025
Putting the dampener on tamperers
Once a threat actor is on an endpoint, EDR solutions are often the only obstacle between them and their objective...
NICKEL TAPESTRY expands fraudulent worker operations
With this post, the X-Ops blog is thrilled to present research from our Sophos siblings newly joining us from Secureworks,...
Indirect prompt injection attacks target common LLM data sources
While the shortest distance between two points is a straight line, a straight-line attack on a large language model isn’t...
The Myth of Multiscanning: More Isn’t Always Better
May 8, 2025 Cybersecurity often feels like more is better. More tools. More safeguards. More engines scanning every file that...
From Managing Vulnerabilities to Managing Exposure: The Critical Shift You Can’t Ignore
Vulnerability management remains core to reducing cyber risk — but as the attack surface grows, teams need a risk-driven strategy...
Taming the Machine: Putting Security at the Core of Generative AI
AI advancements, particularly Large Language Models (LLMs) and other generative model types, unlock opportunities to develop applications faster through task...
The Subscription Society
In the quaint town of Everyville, USA, Sarah starts her day with a familiar routine. She wakes up in her...
Cisco fixed a critical flaw in its IOS XE Wireless Controller
Cisco fixed a critical flaw in its IOS XE Wireless Controller Pierluigi Paganini May 08, 2025 Cisco addressed a flaw...
U.S. CISA adds GoVision device flaws to its Known Exploited Vulnerabilities catalog
U.S. CISA adds GoVision device flaws to its Known Exploited Vulnerabilities catalog Pierluigi Paganini May 08, 2025 U.S. Cybersecurity and...
Abuse takes its “toll” on .top: But who is paying the price?
Despite ICANN issuing a formal notice to .top citing a breach of contract for failing to address DNS abuse, the...
Apple plans a life after Google
Google could lose a third of its business if the courts force it to relinquish its default search deal for...
Qilin Leads April 2025 Ransomware Spike with 45 Breaches Using NETXLOADER Malware
Threat actors with ties to the Qilin ransomware family have leveraged malware known as SmokeLoader along with a previously undocumented...
Security Tools Alone Don’t Protect You — Control Effectiveness Does
61% of security leaders reported suffering a breach due to failed or misconfigured controls over the past 12 months. This...
MirrorFace Targets Japan and Taiwan with ROAMINGMOUSE and Upgraded ANEL Malware
The nation-state threat actor known as MirrorFace has been observed deploying malware dubbed ROAMINGMOUSE as part of a cyber espionage...
