Protecting Your Cyber World With Real World Solutions

Contact Us Page

Trending
Current
CSO
Did you Know?

A familiar playbook with a twist: 3AM ransomware actors dropped virtual machine with vishing and Quick Assist

Another adversary picks up the email bombing / vishing Storm-1811 playbook, doing thorough reconnaissance to target specific employees with fake help desk call—this time, over the phone. [...]

Sophos Partners with Capsule on New Cyber Insurance Program

The partnership rewards real-world, observable security controls, while removing the traditional barriers to insurance coverage. [...]

Sophos MDR: New analyst response actions for Microsoft 365

Powerful new capabilities enable Sophos MDR analysts to respond to M365 attacks on your behalf. [...]

Beyond the kill chain: What cybercriminals do with their money (Part 5)

In the last of our five-part series, Sophos X-Ops explores the implications and opportunities arising from threat actors’ involvement in real-world industries and crimes [...]

Beyond the kill chain: What cybercriminals do with their money (Part 4)

In the fourth of our five-part series, Sophos X-Ops explores threat actors’ real-world criminal business interests [...]

Beyond the kill chain: What cybercriminals do with their money (Part 3)

In the third of our five-part series, Sophos X-Ops explores the more legally and ethically dubious business interests of financially motivated threat actors [...]

Student Loan Breach Exposes 2.5M Records

2.5 million people were affected, in a breach that could spell more trouble down the line. [...]

Watering Hole Attacks Push ScanBox Keylogger

Researchers uncover a watering hole attack likely carried out by APT TA423, which attempts to plant the ScanBox JavaScript-based reconnaissance tool. [...]

Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms

Over 130 companies tangled in sprawling phishing campaign that spoofed a multi-factor authentication system. [...]

Ransomware Attacks are on the Rise

Lockbit is by far this summer’s most prolific ransomware group, trailed by two offshoots of the Conti group. [...]

Cybercriminals Are Selling Access to Chinese Surveillance Cameras

Tens of thousands of cameras have failed to patch a critical, 11-month-old CVE, leaving thousands of organizations exposed. [...]

Twitter Whistleblower Complaint: The TL;DR Version

Twitter is blasted for security and privacy lapses by the company’s former head of security who alleges the social media giant’s actions amount to a national security risk. [...]

Poor DNS hygiene is leading to domain hijacking: Report

Threat actors continue to find ways of hijacking domains thanks to poor DNS record-keeping and misconfigurations by administrators, a hole that CSOs have to plug or risk financial or reputational damage to their organizations. The latest example of the risk came in a report today from Infoblox on a threat actor it calls Hazy Hawk, which it says took over the subdomains of the US Centers for Disease Control and Prevention (CDC) in February and used them to host dozens of URLs that pointed to porn videos. This person or gang has been finding gaps in DNS records since at… [...]

CSO30 Australia Awards 2025: Nominations now open

Nominations are officially open for the 2025 CSO30 Australia Awards, celebrating the country’s most effective and inspiring cybersecurity leaders. This year’s CSO30 Awards will once again be held alongside the CIO50 Awards, bringing together the nation’s top technology and security executives in a single flagship event on 23 September in Sydney. Part of Foundry’s prestigious global awards program, the CSO30 recognises senior cybersecurity professionals who are driving innovation, enhancing resilience, and shaping the future of security across industries. In 2025, honourees will be assessed across two core pillars: business value and leadership. The judging panel will evaluate cybersecurity innovations from… [...]

8 KI-Sicherheitsrisiken, die Unternehmen übersehen

In ihrem Wettlauf um Produktivitätssteigerungen durch generative KI übersehen die meisten Unternehmen die damit verbundenen Sicherheitsrisiken.Summit Art Creations – Shutterstock.com Laut einer Studie des Weltwirtschaftsforums, die in Zusammenarbeit mit Accenture durchgeführt wurde, versäumen es 63 Prozent der Unternehmen, die Sicherheit von KI-Tools vor deren Einsatz zu überprüfen. Dadurch gehen sie eine Reihe von Risiken für ihr Unternehmen ein. Dies gilt sowohl für handelsübliche KI-Lösungen als auch für interne Implementierungen, die in Zusammenarbeit mit Softwareentwicklungsteams erstellt wurden. So zeigt der Tricentis 2025 Quality Transformation Report, dass Organisationen überwiegend auf die Verbesserung der Liefergeschwindigkeit (45 Prozent) und weniger auf die Verbesserung der… [...]

You’ve already been targeted: Why patch management is mission-critical

Security is evolving because attackers already have. The rise in threats facing IT teams today is not random. It reflects how profitable cybercrime has become. While the global illicit drug trade is estimated at up to 652 billion dollars a year, cybercrime costs the world an estimated 9.5 trillion dollars in 2024. If cybercrime were a country, it would be the third-largest economy on the planet, behind only the United States and China. This growth is not driven only by high-profile attacks. It is driven by scale. Cybercriminals are no longer focused on big targets alone. They want reach. Everyone… [...]

Skitnet malware: The new ransomware favorite

Ransomware operators are now actively using a modular malware, Skitnet, sold on underground forums including RAMP since April 2024. According to cybersecurity firm Prodaft, the multi-stage malware is being used for stealing sensitive data post-compromise and establishing continued remote access. “Skitnet (a.k.a Bossnet) is a multi-stage malware developed by LARVA-306 that leverages multiple programming languages and stealth techniques to execute its payload and maintain persistent access to infected systems,” said Prodaft researchers in a report. First identified in 2024, the malware was recently leveraged by BlackBasta in Microsoft Teams-themed phishing attacks, PRODAFT said in a LinkedIn post. Dedicated plugins for… [...]

4 ways to safeguard CISO communications from legal liabilities

In 2019, Russian threat actors began targeting Texas-based business software provider SolarWinds. What started as a dry run to inject malware into SolarWinds’ networks evolved into the boldest software supply chain hack ever, ultimately spreading malicious backdoors to SolarWinds’ blue-chip business customers and marking a miserable milestone in cybersecurity history. The widespread damage caused by the incident caught the attention of US federal authorities, including the US Securities and Exchange Commission (SEC), which launched an investigation into the publicly traded company. In October 2023, the SEC filed charges against SolarWinds and, in unprecedented action, its CISO, Timothy G. Brown, for… [...]

North Korean hackers posing as IT workers steal over $1B in cyberattack

North Korean hackers posing as IT workers steal over $1B in cyberattack l33tdawg Fri, 11/29/2024 - 10:31 [...]

OpenAI is at war with its own Sora video testers following brief public leak

OpenAI is at war with its own Sora video testers following brief public leak l33tdawg Fri, 11/29/2024 - 10:31 [...]

Found on VirusTotal: The world’s first UEFI bootkit for Linux

Found on VirusTotal: The world’s first UEFI bootkit for Linux l33tdawg Fri, 11/29/2024 - 10:31 [...]

CISA Director Jen Easterly, in Place Since 2021, to Step Down

CISA Director Jen Easterly, in Place Since 2021, to Step Down l33tdawg Tue, 11/19/2024 - 03:02 [...]

Korea extradites Russian, Vietnamese suspects linked to $16M ransomware scheme

Korea extradites Russian, Vietnamese suspects linked to $16M ransomware scheme l33tdawg Tue, 11/19/2024 - 03:02 [...]

WhatsApp: NSO Group Operates Pegasus Spyware for Customers

WhatsApp: NSO Group Operates Pegasus Spyware for Customers l33tdawg Tue, 11/19/2024 - 03:02 [...]