Protecting Your Cyber World With Real World Solutions

Our Services

Coming Soon …..

Trending
Current
CSO
Did you Know?

Cybersecurity Awareness Month: A timely reminder to review your security posture

Explore four pressing cybersecurity challenges organizations face in 2024 and how to overcome them [...]

Sophos Firewall v21: Streamlined management

How to make the most of the new features in Sophos Firewall v21. [...]

Political Manipulation with Massive AI Model-driven Misinformation and Microtargeting

Applying generative AI, bad actors could tailor disinformation campaigns to affect election outcomes on a massive scale with relatively little effort. [...]

SophosAI at Virus Bulletin ’24: Using multimodal AI as a “sixth sense” for cyber defense

Sophos' Younghoo Lee will present his research on the use of AI to analyze both text and image data to classify spam, phishing, and unsafe web content in Dublin. [...]

Sophos announced as inaugural sponsor of The Hacking Games

Investing in the cybersecurity experts of tomorrow. [...]

The power of the platform: Sophos is uniquely recognized in the G2 Fall 2024 Reports

Sophos continues to be the only vendor named a Leader in Endpoint, Firewall, MDR, XDR and EDR in the latest reports from G2 [...]

Student Loan Breach Exposes 2.5M Records

2.5 million people were affected, in a breach that could spell more trouble down the line. [...]

Watering Hole Attacks Push ScanBox Keylogger

Researchers uncover a watering hole attack likely carried out by APT TA423, which attempts to plant the ScanBox JavaScript-based reconnaissance tool. [...]

Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms

Over 130 companies tangled in sprawling phishing campaign that spoofed a multi-factor authentication system. [...]

Ransomware Attacks are on the Rise

Lockbit is by far this summer’s most prolific ransomware group, trailed by two offshoots of the Conti group. [...]

Cybercriminals Are Selling Access to Chinese Surveillance Cameras

Tens of thousands of cameras have failed to patch a critical, 11-month-old CVE, leaving thousands of organizations exposed. [...]

Twitter Whistleblower Complaint: The TL;DR Version

Twitter is blasted for security and privacy lapses by the company’s former head of security who alleges the social media giant’s actions amount to a national security risk. [...]

How the increasing demand for cyber insurance is changing the role of the CISO

Demand for cyber insurance is up, and market observers expect the number of standalone cyber insurance policies will continue to rise. German multinational insurance company Munich Re has valued the global cyber insurance market at $14 billion in 2023 and estimated that it will hit $20 billion-plus in 2025 and exceed $29 billion in 2027. The rise of standalone cyber insurance, something that has been years in the making, is putting new responsibilities on CISOs as security officers are being asked to evaluate cyber risk and quantify it as part of the insurance selection process. They’re being asked to help… [...]

Malware attack on State Data Center in India puts some citizen services at a standstill

India’s hill state of Uttarakhand’s entire IT infrastructure came to a standstill on Friday after malware was detected on systems at the State Data Center. The shutdown impacted several critical services, including government websites, the Chief Minister’s helpline, and land registration services. Officials, suspecting a cyberattack, launched an investigation into the breach, while IT Secretary Nitesh Jha ordered the shutdown of all services to mitigate potential damage. Key systems, such as the State Wide Area Network (SWAN) and Secure Internet Service, went offline, affecting day-to-day operations across the state. “During routine scanning on Gandhi Jayanti [October 2], malware was discovered… [...]

Chief risk storyteller: How CISOs are developing yet another skill

Mastering the art of risk storytelling is essential for CISOs not just for engagement, but for driving meaningful action across the organization. The right story should emphasize cybersecurity risks with the end-goal of grabbing attention that leads to action. “What gets talked about gets prioritized, so we want to be talking about cybersecurity,” says Bethany De Lude, CISO with the Carlyle Group. This isn’t just any old yarn about technical controls. It’s understanding how the business works, mapping the security program to strategic objectives and developing a sophisticated story that uses risk vocabulary in the language of the audience. It’s… [...]

How ‘perfctl’ malware infected Linux servers undetected for years

Security researchers warn that a malware campaign dubbed perfctl has targeted millions of Linux servers over the past three to four years by attempting to exploit around 20,000 misconfigurations that expose credentials or insecure admin interfaces. Equipped with a backdoor, perfectl gives attackers wide latitude in the actions they can commit. It seems to be primarily used for resource theft. Its main payloads include a Monero cryptocurrency miner and proxyjacking software that enables others to use a system’s bandwidth. “We discovered numerous incident reports in community forums, all describing indicators of compromise linked to this malware,” researchers from Aqua Security… [...]

Hackers steal sensitive customer data from thousands of online stores that use Adobe tools

Distinct groups of cybercriminals have been exploiting the CosmicSting flaw in Adobe’s Commerce and Magento software to steal customers’ payment information. According to research by Sansec, miscreants have used the flaw, also tracked as CVE-2024-34102, to hack at least 5% of all Adobe Commerce and Magento stores this summer, breaking into thousands of brands using the e-commerce solution, including a clutch of household names. “Seven distinct groups are using CosmicSting attacks to plant malicious code on victim stores,” Sansec said in a blog post. “Among the victims are Ray Ban, National Geographic, Cisco, Whirlpool, and Segway.” Last week, Adobe advised… [...]

DOJ seizes 41 Russian-controlled domains in cyber-espionage crackdown

The US Department of Justice (DOJ) has seized 41 internet domains used by Russian intelligence agents and their allies for cyberattacks on the US. This marks a major move to block state-sponsored cybercriminals from stealing sensitive information. “These Russian domains were being used to trick Americans into giving up their personal data,” Deputy Attorney General Lisa Monaco said in a statement. “The Russian government ran this scheme to steal Americans’ sensitive information, using seemingly legitimate email accounts to trick victims into revealing account credentials.” The seized domains were used by a hacker group linked to an operational unit within Center… [...]

China's APT40 gang is ready to attack vulns within hours or days of public release

China's APT40 gang is ready to attack vulns within hours or days of public release l33tdawg Tue, 07/09/2024 - 02:53 [...]

AI-Powered Super Soldiers Are More Than Just a Pipe Dream

AI-Powered Super Soldiers Are More Than Just a Pipe Dream l33tdawg Tue, 07/09/2024 - 02:53 [...]

The president ordered a board to probe a massive Russian cyberattack. It never did.

The president ordered a board to probe a massive Russian cyberattack. It never did. l33tdawg Tue, 07/09/2024 - 02:53 [...]

Massive car dealer ransom attack is mostly over after 2 weeks of work-arounds

Massive car dealer ransom attack is mostly over after 2 weeks of work-arounds l33tdawg Tue, 07/09/2024 - 02:53 [...]

“RegreSSHion” vulnerability in OpenSSH gives attackers root on Linux

“RegreSSHion” vulnerability in OpenSSH gives attackers root on Linux l33tdawg Wed, 07/03/2024 - 02:38 [...]

Two of the German military’s new spy satellites appear to have failed in orbit

Two of the German military’s new spy satellites appear to have failed in orbit l33tdawg Wed, 07/03/2024 - 02:38 [...]