Protecting Your Cyber World With Real World Solutions

Contact Us Page

Trending
Current
CSO
Did you Know?

Despite concern over illicit applications of ChatGPT and similar models, Sophos X-Ops’ exploration of cybercrime forums suggests many threat actors are still skeptical – and wrestling with the same issues and problems as the rest of us [...]

The Dark Side of AI: Large-Scale Scam Campaigns Made Possible by Generative AI

Generative artificial intelligence technologies such as OpenAI’s ChatGPT and DALL-E have created a great deal of disruption across much of our digital lives. Creating credible text, images and even audio, these AI tools can be used for both good and ill. That includes their application in the cybersecurity space. While Sophos AI has been working […] [...]

Introducing Sophos DNS Protection

Early access is expected to run through January 2024, so get started today. [...]

Top 10 tips to protect your privacy and safety during the online shopping season and beyond

Digital pick pockets are ready to pounce so use these Sophos security practices on Cyber Monday – and every other day too. [...]

Sophos XDR: Extending Sophos Endpoint protection with threat detection and response

Giving you the tools to detect and respond to suspicious activity before adversaries can impact your systems. [...]

Sophos XDR: Major solution enhancements now available

Integration expansion enables IT teams to further extend the use of their existing tools to defend against active adversaries. [...]

Student Loan Breach Exposes 2.5M Records

2.5 million people were affected, in a breach that could spell more trouble down the line. [...]

Watering Hole Attacks Push ScanBox Keylogger

Researchers uncover a watering hole attack likely carried out by APT TA423, which attempts to plant the ScanBox JavaScript-based reconnaissance tool. [...]

Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms

Over 130 companies tangled in sprawling phishing campaign that spoofed a multi-factor authentication system. [...]

Ransomware Attacks are on the Rise

Lockbit is by far this summer’s most prolific ransomware group, trailed by two offshoots of the Conti group. [...]

Cybercriminals Are Selling Access to Chinese Surveillance Cameras

Tens of thousands of cameras have failed to patch a critical, 11-month-old CVE, leaving thousands of organizations exposed. [...]

Twitter Whistleblower Complaint: The TL;DR Version

Twitter is blasted for security and privacy lapses by the company’s former head of security who alleges the social media giant’s actions amount to a national security risk. [...]

Apple patches info-stealing, zero day bugs in iPads and Macs

Apple has released patches for a couple of security issues found within its Webkit web browser engine that the iPhone maker believes have had zero day exploitations. Tracking them as CVE-2023-42916, and CVE-2023-42917, Apple said these vulnerabilities can be exploited while processing web content to leak sensitive information and execute arbitrary codes, respectively. "Apple is aware of report(s) that the issue(s) may have been exploited against versions of iOS before iOS 16.7.1," Apple said in the software release note. To address the bugs, Apple has released patched updates for iOS, iPadOS, macOS, and Safari web browser. Flaws allow info stealing… [...]

The CSO guide to top security conferences

There is nothing like attending a face-to-face event for career networking and knowledge gathering, and we don't have to tell you how helpful it can be to get a hands-on demo of a new tool or to have your questions answered by experts. Fortunately, plenty of great conferences are coming up in the months ahead. If keeping abreast of security trends and evolving threats is critical to your job -- and we know it is -- then attending some top-notch security conferences is on your must-do list for 2023 and 2024. From major events to those that are more narrowly… [...]

Conti-linked ransomware takes in $107 million in ransoms: Report

Black Basta, a ransomware campaign thought to be the brainchild of people linked to the infamous Conti malware gang, has been paid more than $100 million in the past year and a half, infecting 329 known victims. According to a report published this week by blockchain analytics firm Elliptic, the Black Basta ransomware has attacked targets in a pattern similar to that of the Conti gang, both in terms of regionality and industry. Nearly two-thirds of Black Basta's attacks have been against US companies, and, like Conti, manufacturing, engineering and construction and wholesale/retail businesses have been the most common targets.… [...]

Okta confirms recent hack affected all customers within the affected system

Identity and access management company, Okta, has revealed last month's security incident within its support case management system has affected all users, contrary to earlier reports of it compromising the data of only one percent of users. In a November 21 update on the incident, David Bradbury, chief security officer at Okta confirmed that a subsequent review of earlier analysis yielded new findings. "Okta Security has continued to review our initial analysis shared on November 3, re-examining the actions that the threat actor performed," said Bradbury in a statement. "Today we are sharing new information that potentially impacts the security of our… [...]

Top cybersecurity product news of the week

Piiano launches code analyzer November 29: Piiano has launched code analyzer Flows. The tool is designed to continuously analyze source code during the development process and to track when, where and how sensitive data is being used and stored. Piiano claims the tool finds potential data leaks inside source code and ensures that sensitive information is protected before the code reaches production. A trial, limited version of Flows will be available for free until the end of 2023. After that the pricing model will depend on the number of scans and number of code repositories. Skyhawk adds AI-based, autonomous purple… [...]

How to maintain a solid cybersecurity posture during a natural disaster

It's common knowledge that natural disasters are increasingly threatening more and more of the world and in places that were once thought of as safe from the ravages of nature. According to the US National Oceanic and Atmospheric Administration, there were 25 billion-dollar-plus climate-related disasters in the US alone in the first 10 months of 2023, a record for the first 10 months of any year. While that's concerning for everyone, the specter of catastrophic events is not typically a big concern for cybersecurity personnel — after all, there's enough to worry about with recent spikes in ransomware, nation-state attacks,… [...]

Thousands of routers and cameras vulnerable to new 0-day attacks by hostile botnet

Thousands of routers and cameras vulnerable to new 0-day attacks by hostile botnet l33tdawg Mon, 11/27/2023 - 07:53 [...]

Nvidia’s GeForce GPUs are selling well, but its AI GPU sales are ridiculous

Nvidia’s GeForce GPUs are selling well, but its AI GPU sales are ridiculous l33tdawg Mon, 11/27/2023 - 07:53 [...]

Sam Altman’s Second Coming Sparks New Fears of the AI Apocalypse

Sam Altman’s Second Coming Sparks New Fears of the AI Apocalypse l33tdawg Mon, 11/27/2023 - 07:53 [...]

A Spy Agency Leaked People's Data Online—Then the Data Was Stolen

A Spy Agency Leaked People's Data Online—Then the Data Was Stolen l33tdawg Mon, 11/20/2023 - 01:17 [...]

280 million e-bikes are slashing oil demand far more than electric vehicles

280 million e-bikes are slashing oil demand far more than electric vehicles l33tdawg Mon, 11/20/2023 - 01:16 [...]

OpenAI board attempts to hit “Ctrl-Z” in talks with Altman to return as CEO

OpenAI board attempts to hit “Ctrl-Z” in talks with Altman to return as CEO l33tdawg Mon, 11/20/2023 - 01:16 [...]