Abuse of alternative runtime environments Deno-tes defender headaches
In early 2026, Sophos MDR investigated multiple intrusion cases involving a threat activity cluster that consistently abused Deno, a legitimate...
2026
ClickFix campaign abuses Deno runtime for infostealer delivery
Counter Threat Unit™ (CTU) researchers investigated a June 2026 campaign in which threat actors used the Deno JavaScript runtime as...
Sophos Working with OpenAI on security from AI, with AI, and for AI
The Sophos AI Security 2026 report, released last month, just showed us the current state of AI-enhanced cyberattacks: Timelines are...
15 AI Security Lessons From Black Hat and Ai4 2026
On July 29, 2026, Kiteworks published the 2026 Data Security and Compliance Risk: Annual Survey Report, a survey of 459...
N-able N-central exploitation results in RMM tool deployment
On August 1, 2026, N-able released an advisory disclosing active exploitation of a vulnerability affecting the N-central remote monitoring and...
Interlock ransomware gang creates volatile situation
In March 2026, the Sophos Emergency Incident Response (EIR) team investigated an incident in which we observed the use of...
Proofpoint Launches OEM Program to Help Security Providers Embed Trusted Threat Intelligence and Detection Capabilities
SUNNYVALE, Calif., and Black Hat USA 2026, LAS VEGAS - August 4, 2026 – Proofpoint, Inc., a global leader in human- and agent-centric cybersecurity, today announced the launch of the Proofpoint OEM Program, making a...
The 5 Best VPN Extensions for Chrome
Chrome is one of the most popular web browsers in the world. As of early 2026, it has an estimated...
More Than 45,000 Software Flaws Reported as AI Reshapes Cybersecurity
The number of software vulnerabilities being uncovered in 2026 is on pace to roughly double the total recorded in 2025,...
13M+ Emails Sent in Tech Support Scam Targeting Users, Organizations in Japan
Over roughly three months (February 26 – May 31, 2026), we confirmed 4,721 fake alert sites but only 11 distinct...
GitHub Cuts Public Bug Bounty Payouts, Moves Top Rewards to VIP Tier
Beginning July 27, 2026, GitHub will cut public bug bounty payouts by at least half at every severity level. Critical...
GoldenEyeDog Subgroup Linked to DigiCert Breach and Code-Signing Certificate Theft
Cybersecurity researchers have attributed the April 2026 DigiCert security incident to a threat activity cluster dubbed CylindricalCanine. Expel, which shared...
GoldenEyeDog Subgroup Linked to DigiCert Breach and Code-Signing Certificate Theft
Cybersecurity researchers have attributed the April 2026 DigiCert security incident to a threat activity cluster dubbed CylindricalCanine. Expel, which shared...
Microsoft Fixes Record 570 Security Flaws in Biggest Patch Tuesday Ever
The bug apocalypse has officially descended upon Redmond. Microsoft’s July 2026 Patch Tuesday fixes a record 570 security vulnerabilities, including...
Sophos named a 2026 Gartner® Peer Insights™ Customers’ Choice for Email Security
Sophos has been named a 2026 Gartner® Peer Insights™ Customers’ Choice in the 2026 Gartner® Peer Insights™ Voice of the...
