Top 7 Strategies for Securing Customer Data While Expanding Your Business Internationally
According to IBM’s Cost of a Data Breach Report 2025, the global average cost of a data breach is...
AndyC
Andy Curtis is an award-winning security consultant, researcher and public speaker. He has been working in the computer security industry since the early 1990s, having been employed by state and federal government, leading healthcare and banking providers across three continents. He has given talks about computer security for some of the world’s largest companies, worked with law enforcement agencies on investigations into hacking groups, and is a regular voice on TV and radio explaining IT security threats.
Shai-Hulud 2.0: over 14,000 secrets exposed
TL;DR: A new wave of the Shai-Hulud supply chain attack targeting NPM packages, dubbed “The Second Coming” by the...
When the Browser Becomes the Battleground for AI and Last-Mile Attacks
For years we treated the browser as just another application. That era is over. As Vivek Ramachandran points out,...
New Fluent Bit Flaws Expose Cloud to RCE and Stealthy Infrastructure Intrusions
Nov 24, 2025Ravie LakshmananVulnerability / Container Security Cybersecurity researchers have discovered five vulnerabilities in Fluent Bit, an open-source and lightweight...
Second Sha1-Hulud Wave Affects 25,000+ Repositories via npm Preinstall Credential Theft
Nov 24, 2025Ravie LakshmananCloud Security / Vulnerability Multiple security vendors are sounding the alarm about a second wave of attacks...
⚡ Weekly Recap: Fortinet Exploit, Chrome 0-Day, BadIIS Malware, Record DDoS, SaaS Breach & More
Nov 24, 2025Ravie LakshmananCybersecurity / Hacking News This week saw a lot of new cyber trouble. Hackers hit Fortinet and...
Introducing Sophos DNS Protection for Endpoints
We released Sophos DNS Protection for networks last year, and it is now close to serving its 600 billionth query....
Modernizing trust: How UADY transformed campus security with Sophos
At the Autonomous University of Yucatán (UADY), technology has long been central to supporting academic excellence. As the university expanded...
The Sophos Central UAE region is now live!
We’re excited to share that the Sophos Central UAE Region is now live! Hosted on Amazon Web Services (AWS) within...
AI attack agents are accelerators, not autonomous weapons: the Anthropic attack
AI attack agents are accelerators, not autonomous weapons: the Anthropic attack Pierluigi Paganini November 24, 2025 Why today’s AI attack...
Scattered Spider alleged members deny TfL charges
Scattered Spider alleged members deny TfL charges Pierluigi Paganini November 24, 2025 Two UK teens linked to Scattered Spider pleaded...
Operation Endgame disrupts Rhadamanthys information-stealing malware
International cybercrime-fighting agencies, co-ordinated by Europol, took down over 1000 servers and seized 20 domains earlier this month as part...
Securing GenAI in Enterprises: Lessons from the Field
There’s a significant gap between the potential value of AI and the measurable value that enterprises have only recently...
Chinese DeepSeek-R1 AI Generates Insecure Code When Prompts Mention Tibet or Uyghurs
New research from CrowdStrike has revealed that DeepSeek's artificial intelligence (AI) reasoning model DeepSeek-R1 produces more security vulnerabilities in response...
ShadowPad Malware Actively Exploits WSUS Vulnerability for Full System Access
Nov 24, 2025Ravie LakshmananMalware / Vulnerability A recently patched security flaw in Microsoft Windows Server Update Services (WSUS) has been...
