January Patch Tuesday sets new all-time high with 159-CVE rate
On Tuesday, Microsoft officially revealed a significant number of 159 patches spanning across 13 different product categories. Microsoft has highlighted...
threat—research
January Patch Tuesday Smashes Single-Month Record with 159-CVE
Microsoft has released a total of 159 patches across 13 product families on Tuesday. Of these, Microsoft has marked nine...
Analyzing patch prioritization: Exploring frameworks and solutions – Part 2: Alternative frameworks
In the preceding segment of this sequence, we delved into the intricacies of CVSS and its operational methodology, concluding that...
Optimizing updating: An in-depth look into frameworks and instruments – Part 1: CVSS
In August 2022, Sophos X-Ops released a white paper discussing multiple attackers – wherein, opponents target the same entities repeatedly....
Phishing platform Rockstar 2FA trips, and “FlowerStorm” picks up the pieces
Editor’s note: Sophos MDR’s Johua Rawles, Mark Parsons, Jordon Olness, and Colin Cowie contributed to this report. One of the...
The Nip from Within: The Sophos Live Opponent Report
It’s common knowledge that 2024 has been a turbulent year on various fronts. In our second Live Opponent Report of...
Being Authentic: Sophos and the 2024 MITRE ATT&CK Trials: Corporate
Annually, multiple security solution providers – such as Sophos – enroll for MITRE’s ATT&CK Trials: Corporate, a comprehensive cyber breach...
December Patch Tuesday has arrived with 71 new updates
Microsoft has just released 71 patches across 10 product families. A total of 17 Critical severity issues, all related to...
Sophos Managed Detection and Response (MDR) thwarts and monitors actions from likely Iranian state actor called “MuddyWater”
Observations made by Sophos MDR reveal a recent campaign employing targeted phishing tactics to lure victims into downloading a valid...
November Patch Tuesday brings a plethora of updates
On Tuesday, Microsoft rolled out 89 patches impacting 14 different product families. Among these fixes, two critical issues within the...
A new ransomware named “Frag” emerges with the exploit of VEEAM vulnerability
Recent reports from Sophos X-Ops highlighted multiple MDR incidents involving the exploitation of a vulnerability found in Veeam backup servers....
In Australia, enthusiasts of Bengal cats are being targeted in a sophisticated campaign orchestrated by the Google-driven Gootloader
Previously utilized by the malefactors associated with REVil ransomware and Gootkit banking trojan, GootLoader, along with its primary payload, has...
The emerging challenge: The rise of the “quishing” menace
Constantly, security experts are vigilant for evolving threat methodologies. A recent investigation by the Sophos X-Ops unit delved into phishing...
The October Patch Tuesday has brought in 117 CVEs
Microsoft has rolled out 117 patches across 15 product families this Tuesday. The company has identified three critical issues affecting...
Standing on the Windows platform, anticipating transformation
During the recent week, Sophos engaged in Microsoft's gathering on Windows Endpoint Security Ecosystem Summit. Reflecting on the recent CrowdStrike...
