Protecting Your Cyber World With Real World Solutions

Meet Our Team

Eric Glover (Founder and CEO)

Bio Coming Soon

Trending
Current
CSO
Did you Know?

Case Study: How Advance2000 keeps 10K+ users secure with Sophos

Sophos MDR is all but mandatory to keep this New York-based MSP’s customers secure. [...]

Introducing Sophos Advisory Services

See how your networks, systems, and employees stand up to simulated attacks before an adversary strikes. [...]

Report: Addressing cybersecurity burnout in 2025

The consequences of this burnout are far-reaching, affecting productivity, incident response times, and employee retention. [...]

Is your SIEM still serving You? Why it might be time to rethink your security stack

Security teams are under increasing pressure to detect and respond to threats in real time, especially as the median dwell time for ransomware attacks has dropped from weeks to a few days. Yet many organizations still rely on legacy Security Information and Event Management (SIEM) and Security Orchestration, Automation, and Response (SOAR) tools. These tools […] [...]

Sophos named a Leader in the IDC MarketScape™: Worldwide Extended Detection and Response (XDR) Software 2025

A milestone that reflects our progress. [...]

HeartCrypt’s wholesale impersonation effort

How the notorious Packer-as-a-Service operation built itself into a hydra [...]

Student Loan Breach Exposes 2.5M Records

2.5 million people were affected, in a breach that could spell more trouble down the line. [...]

Watering Hole Attacks Push ScanBox Keylogger

Researchers uncover a watering hole attack likely carried out by APT TA423, which attempts to plant the ScanBox JavaScript-based reconnaissance tool. [...]

Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms

Over 130 companies tangled in sprawling phishing campaign that spoofed a multi-factor authentication system. [...]

Ransomware Attacks are on the Rise

Lockbit is by far this summer’s most prolific ransomware group, trailed by two offshoots of the Conti group. [...]

Cybercriminals Are Selling Access to Chinese Surveillance Cameras

Tens of thousands of cameras have failed to patch a critical, 11-month-old CVE, leaving thousands of organizations exposed. [...]

Twitter Whistleblower Complaint: The TL;DR Version

Twitter is blasted for security and privacy lapses by the company’s former head of security who alleges the social media giant’s actions amount to a national security risk. [...]

Computer mice can eavesdrop on private conversations, researchers discover

High-end computer mice can be used to eavesdrop on the voice conversations of nearby PC users, researchers from the University of California, Irvine, have shown in a new proof-of-concept demonstration. Given the catchy name ‘Mic-E-Mouse’ (Microphone-Emulating Mouse), the ingenious technique outlined in Invisible Ears at Your Fingertips: Acoustic Eavesdropping via Mouse Sensors is based on the discovery that some optical mice pick up incredibly small sound vibrations reaching them through the desk surfaces on which they are being used. These vibrations could then be captured by different types of software on PC, Mac or Linux computers, including non-privileged ‘user space’… [...]

Open-source monitor turns into an off-the-shelf attack beacon

China-affiliated hackers have quietly turned a once-benign open-source network monitoring tool into a remote access beacon. According to new findings from cybersecurity firm Huntress, the attackers used log poisoning and a web shell to install Nezha, a legitimate remote monitoring/management tool (RMM), as a foothold to deploy Ghost RAT for deeper persistence. “To our knowledge, this is the first public reporting of Nezha being used to facilitate web compromises,” Huntress researchers Jai Minton, James Northey, and Alden Schmidt, said in a blog post shared with CSO ahead of its publication on Wednesday. “Analysis of the intrusion revealed the threat actor… [...]

Salesforce AI agents set to assist enterprises with security and compliance

Salesforce has announced two new AI agents operating on its Agentforce platform: one agent that monitors activity, detects anomalies, and accelerates investigations and remediations in the Salesforce Security Center; and one that streamlines compliance tasks in the Privacy Center. “The things that our customers are already doing today, we’re just helping them to do that more efficiently, effectively, more quickly,” says Marla Hay, Salesforce SVP of product management for security, privacy, and data protection. “And we’re helping them to really think about how they want to take on that agentic transformation in a way that feels secure, safe and compliant.”… [...]

Autonomous AI hacking and the future of cybersecurity

AI agents are now hacking computers. They’re getting better at all phases of cyberattacks, faster than most of us expected. They can chain together different aspects of a cyber operation, and hack autonomously, at computer speeds and scale. This is going to change everything. Over the summer, hackers proved the concept, industry institutionalized it, and criminals operationalized it. In June, AI company XBOW took the top spot on HackerOne’s US leaderboard after submitting over 1,000 new vulnerabilities in just a few months. In August, the seven teams competing in DARPA’s AI Cyber Challenge collectively found 54 new vulnerabilities in a… [...]

Security-KPIs und -KRIs: So messen Sie Cybersicherheit

Cybersicherheit zu messen, ist kein Kinderspiel. Foto: Ultraskrip – shutterstock.comEine wichtige Säule jedes ausgereiften Cyberrisk-Programms ist die Fähigkeit, die Performance der IT-Security und registrierte Bedrohungen zu messen, zu analysieren und zu melden. Die Cybersecurity zu messen, ist allerdings kein leichtes Unterfangen: Einerseits, weil sich viele Führungskräfte ohne entsprechenden Background schwer tun, IT-Risiken zu verstehen. Andererseits verstricken sich Sicherheitsprofis auch zu oft in technische Details, die die Stakeholder verwirren und auf den falschen Weg führen. Das ideale Szenario: Security-Experten messen und reporten die Cybersicherheit auf eine Art und Weise, die für Führungskräfte leicht verständlich und nützlich ist – was zu umsetzbaren… [...]

10.0-severity RCE flaw puts 60,000 Redis instances at risk

The popular Redis in-memory data store received a patch for a critical vulnerability that leads to remote code execution on the server hosting the database. While the flaw requires authentication to exploit, many Redis instances don’t have authentication configured and around 60,000 of them are exposed to the internet in this configuration. “Given that Redis is used in an estimated 75% of cloud environments, the potential impact is extensive,” researchers from Wiz who found the flaw said in a report. “Organizations are strongly urged to patch instances immediately by prioritizing those that are exposed to the internet.” The vulnerability, identified… [...]

North Korean hackers posing as IT workers steal over $1B in cyberattack

North Korean hackers posing as IT workers steal over $1B in cyberattack l33tdawg Fri, 11/29/2024 - 10:31 [...]

OpenAI is at war with its own Sora video testers following brief public leak

OpenAI is at war with its own Sora video testers following brief public leak l33tdawg Fri, 11/29/2024 - 10:31 [...]

Found on VirusTotal: The world’s first UEFI bootkit for Linux

Found on VirusTotal: The world’s first UEFI bootkit for Linux l33tdawg Fri, 11/29/2024 - 10:31 [...]

CISA Director Jen Easterly, in Place Since 2021, to Step Down

CISA Director Jen Easterly, in Place Since 2021, to Step Down l33tdawg Tue, 11/19/2024 - 03:02 [...]

Korea extradites Russian, Vietnamese suspects linked to $16M ransomware scheme

Korea extradites Russian, Vietnamese suspects linked to $16M ransomware scheme l33tdawg Tue, 11/19/2024 - 03:02 [...]

WhatsApp: NSO Group Operates Pegasus Spyware for Customers

WhatsApp: NSO Group Operates Pegasus Spyware for Customers l33tdawg Tue, 11/19/2024 - 03:02 [...]