Interlock ransomware gang creates volatile situation
In March 2026, the Sophos Emergency Incident Response (EIR) team investigated an incident in which we observed the use of...
response
Ukraine warns fake CAPTCHAs are being used to make you hack yourself
Ukraine's computer emergency response team, CERT-UA, has warned that Russian hackers are using fake CAPTCHA checks to trick people into...
Salesforce Disables Klue App Integration After OAuth Token Abuse Exposes Customer Data
Salesforce has revealed that it disabled the Klue Battlecards app integration within its platform in response to a security incident...
Why AMOS matters: The macOS malware stealing data at scale
Sophos Managed Detection and Response (MDR) teams recently responded to a customer incident involving an infostealer infection on a macOS...
CERT-In Recommends 12-Hour Patching for Internet-Facing Flaws Amid AI-Assisted Attacks
The Indian Computer Emergency Response Team (CERT-In) has issued new guidelines requiring organizations to patch critical security vulnerabilities in internet-exposed...
Building a Cyber Incident Response Team: The CISO’s Guide
Last Updated: 16 May 2026 Building a Cyber Incident Response Team: The CISO’s Guide A cyber incident response team (CIRT)...
The Alert Firehose Finally Meets Its Match
Ask a cybersecurity pro about Network Detection and Response (NDR) and you might still hear "Noisy," "Too much data." But...
Why AMOS matters: The macOS malware stealing data at scale
Sophos Managed Detection and Response (MDR) teams recently responded to a customer incident involving an infostealer infection on a macOS...
Day Zero Readiness: The Operational Gaps That Break Incident Response
Having an incident response retainer, or even a pre-approved external incident response firm, is not the same as being ready...
UAC-0247 Targets Ukrainian Clinics and Government in Data-Theft Malware Campaign
Ravie LakshmananApr 16, 2026Malware / Threat Intelligence The Computer Emergencies Response Team of Ukraine (CERT-UA) has disclosed details of a new campaign...
Incident Response Planning for Business Continuity
When a cyber incident strikes, organisations without a tested incident response plan face a brutal reality: every minute of uncertainty...
Digital Forensics and Incident Response (DFIR): A CISO’s Guide
Digital Forensics and Incident Response (DFIR) is the discipline that combines the technical investigation of cyber incidents with the structured...
Building a Cyber Incident Response Team: The CISO’s Guide
A cyber incident response team (CIRT) is your organisation’s first line of defence when a security incident occurs. Building an...
CERT-UA Impersonation Campaign Spread AGEWHEEZE Malware to 1 Million Emails
Ravie LakshmananApr 01, 2026Email Security / Artificial Intelligence The Computer Emergency Response Team of Ukraine (CERT-UA) has disclosed details of...
Incident responders, s’il vous plait: Invites lead to odd malware events
Sophos’ Managed Detection and Response (MDR) teams reported on a phishing campaign late last year that attempted to trick users...
