Microsoft is rolling out new Windows 11 Insider Preview builds that improve security and performance during batch file or CMD script execution. […]
Currently browsing: General
Cisco SD-WAN vulnerabilities (CVE-2026-20127, CVE-2022-20775) in active exploitation
Categories: Threat Research Tags: advisory, vulnerability, SD-WAN ]]>
Nowhere, man: The 2026 Active Adversary Report
AI headline hype didn’t deliver a sea change for practical defense — but one below-the-radar development should Categories: Security Operations, […]
The OpenClaw experiment is a warning shot for enterprise AI security
Agentic AI promises a lot – but it also introduces more risk. Sophos’ CISO explores the challenges and how to […]
February’s Patch Tuesday assumes battle stations
Just 58 CVEs to spar with in February, but plenty are already under attack Categories: Threat Research, X-ops Tags: Patch […]
Threat Intelligence Executive Report – Volume 2025, Number 6
This issue of the Counter Threat Unit’s high-level bimonthly report discusses noteworthy updates in the threat landscape during September and […]
Malicious use of virtual machine infrastructure
Bulletproof hosting providers are abusing the legitimate ISPsystem infrastructure to supply virtual machines to cybercriminals Categories: Threat Research Tags: virtual […]
Microsoft Office vulnerability (CVE-2026-21509) in active exploitation
Categories: Threat Research Tags: Microsoft Office, vulnerability, advisory ]]>
TamperedChef serves bad ads, with infostealers as the main course
Sophos X-Ops explores a malvertising campaign that leverages Google Ads to distribute an infostealer Categories: Threat Research Tags: TamperedChef, EvilAI, […]
Laughter in the dark: Tales of absurdity from the cyber frontline and what they taught us
From a quintuple-encryption ransomware attack to zany dark web schemes and AI fails, Sophos X-Ops looks back at some of […]
Recent Posts
-
VU#624941: LibreChat RAG API contains a log-injection vulnerability -
VU#907705: Graphql-upload-minimal has a prototype pollution vulnerability.
-
VU#665416: SGLang (sglang) is vulnerable to code execution attacks via unsafe pickle deserialization
-
VU#976247: Retraction of “Antivirus and Endpoint Detection and Response Archive Scanning Engines may not properly scan malformed ZIP archives”
-
Is Your Data Safe? The Privacy and Security Risks of Using AI You Need to Know