Protecting Your Cyber World With Real World Solutions

Meet Our Team

Eric Glover (Founder and CEO)

Bio Coming Soon

Trending
Current
CSO
Did you Know?

Debates over the effectiveness of phishing simulations are widespread. Sophos X-Ops looks at the arguments for and against – and our own phishing philosophy [...]

BRONZE BUTLER exploits Japanese asset management software vulnerability

The threat group targeted a LANSCOPE zero-day vulnerability (CVE-2025-61932) [...]

Build a prevention-first defense: The Sophos Cybersecurity Toolkit

Explore the Cybersecurity toolkit and start building your prevention-first strategy today. [...]

Windows Server Update Services (WSUS) vulnerability abused to harvest sensitive data

Exploitation of CVE-2025-59287 began after public disclosure and the release of proof-of-concept code [...]

Sophos Firewall v22: Health Check

Securing your firewall is much easier with the new Health Check feature. [...]

Locking it down: A new technique to prevent LLM jailbreaks

Following on from our preview, here’s the full rundown on LLM salting: a novel countermeasure against LLM jailbreaks, developed by AI researchers at Sophos X-Ops [...]

Student Loan Breach Exposes 2.5M Records

2.5 million people were affected, in a breach that could spell more trouble down the line. [...]

Watering Hole Attacks Push ScanBox Keylogger

Researchers uncover a watering hole attack likely carried out by APT TA423, which attempts to plant the ScanBox JavaScript-based reconnaissance tool. [...]

Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms

Over 130 companies tangled in sprawling phishing campaign that spoofed a multi-factor authentication system. [...]

Ransomware Attacks are on the Rise

Lockbit is by far this summer’s most prolific ransomware group, trailed by two offshoots of the Conti group. [...]

Cybercriminals Are Selling Access to Chinese Surveillance Cameras

Tens of thousands of cameras have failed to patch a critical, 11-month-old CVE, leaving thousands of organizations exposed. [...]

Twitter Whistleblower Complaint: The TL;DR Version

Twitter is blasted for security and privacy lapses by the company’s former head of security who alleges the social media giant’s actions amount to a national security risk. [...]

Claude AI vulnerability exposes enterprise data through code interpreter exploit

A newly disclosed vulnerability in Anthropic’s Claude AI assistant has revealed how attackers can weaponize the platform’s code interpreter feature to silently exfiltrate enterprise data, bypassing even the default security settings designed to prevent such attacks. Security researcher Johann Rehberger demonstrated that Claude’s code interpreter can be manipulated through indirect prompt injection to steal sensitive information, including chat histories, uploaded documents, and data accessed through integrated services. The attack leveraged Claude’s own API infrastructure to send stolen data directly to attacker-controlled accounts. The exploit took advantage of a critical oversight in Claude’s network access controls. While the platform’s default “Package… [...]

OpenAI launches Aardvark to detect and patch hidden bugs in code

OpenAI has unveiled Aardvark, a GPT-5-powered autonomous agent designed to act like a human security researcher capable of scanning, understanding, and patching code with the reasoning skills of a professional vulnerability analyst. Announced on Thursday and currently available in private beta, Aardvark is being positioned as a major leap toward AI-driven software security. Unlike conventional scanners that mechanically flag suspicious code, Aardvark attempts to analyze how and why code behaves the way it does. “OpenAI Aardvark is different as it mimics a human security researcher,” said Pareekh Jain, CEO at EIIRTrend. “It uses LLM-powered reasoning to understand code semantics and… [...]

The unified linkage model: A new lens for understanding cyber risk

When Okta’s support credentials were stolen in 2023, the breach didn’t stop at the identity provider. It rippled outward — through SaaS integrations, internal legacy applications and downstream development pipelines. Okta’s systems were not directly exploited. Instead, the attack propagated through the quiet linkages that bound those systems together. Most security programs don’t model those linkages. The unified linkage model (ULM) shows why that is a problem. Cybersecurity teams are faced with a considerable volume of data, including asset inventories, vulnerability scans, threat intelligence feeds, SBOMs, configuration alerts and risk dashboards. However, major incidents continue to take organizations by surprise.… [...]

Agentic AI: What now, what next?

Download the November 2025 issue of the Enterprise Spotlight from the editors of CIO, Computerworld, CSO, InfoWorld, and Network World. aria-label="Embed of NOVEMBER SPOTLIGHT 02.">NOVEMBER SPOTLIGHT 02Download [...]

Bug-Bounty-Programm trifft KI – ein zweischneidiges Schwert

KI-gestütztes Bug Hunting verspricht viele Vorteile. Ob sich diese auch in der Praxis verwirklichen, ist eine andere Sache.DC Studio | shutterstock.com Künstliche Intelligenz (KI) wird zunehmend auch zum Treiber von Bug-Bounty-Programmen. Sicherheitsexperten greifen auf Large Language Models (LLMs) zurück, um: die Suche nach Schwachstellen zu automatisieren, Reverse Engineering von APIs zu bewerkstelligen, und Code-Basen schneller denn je zu durchleuchten. Allerdings gehen diese Effizienz- und Geschwindigkeitsgewinne in der Praxis mit neuen Problemen einher. Die Bug-Bounty-Filterblase “Wir haben beobachtet, dass KI als Echokammer und Verstärker für Personen fungiert, die glauben, etwas entdeckt zu haben. Das führt in eine Abwärtsspirale der Bestätigungsverzerrung”, erklärt… [...]

Aembit Introduces Identity and Access Management for Agentic AI

Aembit today announced the launch of Aembit Identity and Access Management (IAM) for Agentic AI, a set of capabilities that help organizations safely provide and enforce access policies for AI agents as they move into production. The release introduces Blended Identity, which defines how AI agents act on behalf of verified users, and the MCP Identity Gateway, which ensures secure access to enterprise resources based on identity, access policy, and runtime attributes. The new offering extends the Aembit Workload IAM Platform to address one of the most pressing operational questions in artificial intelligence and modern IT: how to control what… [...]

North Korean hackers posing as IT workers steal over $1B in cyberattack

North Korean hackers posing as IT workers steal over $1B in cyberattack l33tdawg Fri, 11/29/2024 - 10:31 [...]

OpenAI is at war with its own Sora video testers following brief public leak

OpenAI is at war with its own Sora video testers following brief public leak l33tdawg Fri, 11/29/2024 - 10:31 [...]

Found on VirusTotal: The world’s first UEFI bootkit for Linux

Found on VirusTotal: The world’s first UEFI bootkit for Linux l33tdawg Fri, 11/29/2024 - 10:31 [...]

CISA Director Jen Easterly, in Place Since 2021, to Step Down

CISA Director Jen Easterly, in Place Since 2021, to Step Down l33tdawg Tue, 11/19/2024 - 03:02 [...]

Korea extradites Russian, Vietnamese suspects linked to $16M ransomware scheme

Korea extradites Russian, Vietnamese suspects linked to $16M ransomware scheme l33tdawg Tue, 11/19/2024 - 03:02 [...]

WhatsApp: NSO Group Operates Pegasus Spyware for Customers

WhatsApp: NSO Group Operates Pegasus Spyware for Customers l33tdawg Tue, 11/19/2024 - 03:02 [...]