When the Browser Becomes the Battleground for AI and Last-Mile Attacks
For years we treated the browser as just another application. That era is over. As Vivek Ramachandran points out,...
Year: 2025
New Fluent Bit Flaws Expose Cloud to RCE and Stealthy Infrastructure Intrusions
Nov 24, 2025Ravie LakshmananVulnerability / Container Security Cybersecurity researchers have discovered five vulnerabilities in Fluent Bit, an open-source and lightweight...
Second Sha1-Hulud Wave Affects 25,000+ Repositories via npm Preinstall Credential Theft
Nov 24, 2025Ravie LakshmananCloud Security / Vulnerability Multiple security vendors are sounding the alarm about a second wave of attacks...
⚡ Weekly Recap: Fortinet Exploit, Chrome 0-Day, BadIIS Malware, Record DDoS, SaaS Breach & More
Nov 24, 2025Ravie LakshmananCybersecurity / Hacking News This week saw a lot of new cyber trouble. Hackers hit Fortinet and...
Introducing Sophos DNS Protection for Endpoints
We released Sophos DNS Protection for networks last year, and it is now close to serving its 600 billionth query....
Modernizing trust: How UADY transformed campus security with Sophos
At the Autonomous University of Yucatán (UADY), technology has long been central to supporting academic excellence. As the university expanded...
The Sophos Central UAE region is now live!
We’re excited to share that the Sophos Central UAE Region is now live! Hosted on Amazon Web Services (AWS) within...
AI attack agents are accelerators, not autonomous weapons: the Anthropic attack
AI attack agents are accelerators, not autonomous weapons: the Anthropic attack Pierluigi Paganini November 24, 2025 Why today’s AI attack...
Scattered Spider alleged members deny TfL charges
Scattered Spider alleged members deny TfL charges Pierluigi Paganini November 24, 2025 Two UK teens linked to Scattered Spider pleaded...
Operation Endgame disrupts Rhadamanthys information-stealing malware
International cybercrime-fighting agencies, co-ordinated by Europol, took down over 1000 servers and seized 20 domains earlier this month as part...
Securing GenAI in Enterprises: Lessons from the Field
There’s a significant gap between the potential value of AI and the measurable value that enterprises have only recently...
Chinese DeepSeek-R1 AI Generates Insecure Code When Prompts Mention Tibet or Uyghurs
New research from CrowdStrike has revealed that DeepSeek's artificial intelligence (AI) reasoning model DeepSeek-R1 produces more security vulnerabilities in response...
ShadowPad Malware Actively Exploits WSUS Vulnerability for Full System Access
Nov 24, 2025Ravie LakshmananMalware / Vulnerability A recently patched security flaw in Microsoft Windows Server Update Services (WSUS) has been...
How has cloud flipped the regular security narrative?
When infrastructure itself becomes the target In early 2024, a breach involving Snowflake, Inc. sent a quiet shockwave through boardrooms...
Countering the Digital Threat – NATO 2025
Countering the Digital Threat – NATO 2025 I am incredibly honored and proud to announce that I have been formally...
