How SCIM Works: The REST API Powering Modern Identity Provisioning
Introduction: The Identity Crisis You Don’t Know You’re Having Imagine this scenario: Your company just acquired a promising startup, adding...
Year: 2025
The LockBit ransomware site was breached, database dump was leaked online
The LockBit ransomware site was breached, database dump was leaked online Pierluigi Paganini May 08, 2025 Lockbit ransomware group has...
LockBit Ransomware Hacked: Database and Victim Chats Leaked
Image courtesy of crypto.news A group claiming to be from Prague has hacked LockBit’s dark web panel, leaking sensitive data...
Model Context Protocol Adoption and C# SDK Integration in Java
Adoption of the Model Context Protocol Within the Java Ecosystem The Model Context Protocol (MCP) is gaining traction in the...
Dev Proxy v0.27: New API Modeling and AI Features Released
The Microsoft Dev Proxy team has announced the release of version 0.27, enhancing developer experience through new features and improvements....
SMBs Know They’re At Risk, but Most Aren’t Embracing AI
Small and midsize businesses are becoming more popular targets for ransomware gangs and other bad actors and say they are...
A Q&A with Head of Security Solutions at Abraxas
May 8, 2025 How Abraxas Transformed Their MSSP Operations with Swimlane Security Automation One of my favorite parts of my...
38,000+ FreeDrain Subdomains Found Exploiting SEO to Steal Crypto Wallet Seed Phrases
Cybersecurity researchers have exposed what they say is an "industrial-scale, global cryptocurrency phishing operation" engineered to steal digital assets from...
Using AI to stop tech support scams in Chrome
Posted by Jasika Bawa, Andy Lim, and Xinghui Lu, Google Chrome Security Tech support scams are an increasingly prevalent form...
Putting the dampener on tamperers
Once a threat actor is on an endpoint, EDR solutions are often the only obstacle between them and their objective...
NICKEL TAPESTRY expands fraudulent worker operations
With this post, the X-Ops blog is thrilled to present research from our Sophos siblings newly joining us from Secureworks,...
Indirect prompt injection attacks target common LLM data sources
While the shortest distance between two points is a straight line, a straight-line attack on a large language model isn’t...
The Myth of Multiscanning: More Isn’t Always Better
May 8, 2025 Cybersecurity often feels like more is better. More tools. More safeguards. More engines scanning every file that...
From Managing Vulnerabilities to Managing Exposure: The Critical Shift You Can’t Ignore
Vulnerability management remains core to reducing cyber risk — but as the attack surface grows, teams need a risk-driven strategy...
Taming the Machine: Putting Security at the Core of Generative AI
AI advancements, particularly Large Language Models (LLMs) and other generative model types, unlock opportunities to develop applications faster through task...
