SophosLabs Offensive Security

Content by SophosLabs Offensive Security

SophosLabs Uncut

Threat Research

CVE-2021-28310

Patch Tuesday

Microsoft’s April update patches 114 bugs—half of which allow remote code execution

April 13, 2021

SophosLabs Uncut

Threat Research

Exchange

Server

SophosLabs Offensive Security releases post-exploitation tool for Exchange

March 9, 2021

SophosLabs Uncut

Threat Research

2021-03

DirectX

DNS Server

Exchange

Exchange Server

Hafnium

HEVC

Internet Explorer

Patch Tuesday

Web shells

webshell

win32k

Windows Update

Critical updates dominate March, 2021 Patch Tuesday releases

March 9, 2021

SophosLabs Uncut

Threat Research

2021-02

CVE-2021-1732

CVE-2021-24074

CVE-2021-24078

CVE-2021-24086

CVE-2021-24094

Patch Tuesday

tcpip.sys

Frag out: four remote attack bugs fixed in Microsoft’s February Patch Tuesday

February 9, 2021

SophosLabs Uncut

2020-12

CVE-2020-17144

Exchange vulnerability

Patch Tuesday

PoC

proof-of-concept

Windows

Critical fixes to Exchange, Excel in the final Patch Tuesday release of 2020

December 8, 2020

SophosLabs Uncut

CVE-2020-16982

CVE-2020-16988

CVE-2020-16998

CVE-2020-17010

CVE-2020-17038

CVE-2020-17053

CVE-2020-17057

CVE-2020-17061

CVE-2020-17087

Microsoft Windows

Patch Tuesday

November Patch Tuesday fixes close 112 holes—including one already being exploited

November 10, 2020

SophosLabs Uncut

2020-10

CVE-2020-16891

CVE-2020-16898

CVE-2020-16911

CVE-2020-16915

CVE-2020-16923

CVE-2020-16947

CVE-2020-16951

CVE-2020-16952

CVE-2020-16966

Microsoft

Patch Tuesday

Top reason to apply October, 2020’s Microsoft patches: Ping of Death Redux

October 13, 2020

SophosLabs Uncut

CVE-2020-1036

CVE-2020-1337

CVE-2020-1380

CVE-2020-1584

CVE-2020-1587

EoP

Patch Tuesday

print spooler

RCE

The 1337est Print Spooler bug fixed in August, 2020’s Patch Tuesday

August 11, 2020

SophosLabs Uncut

Technical analysis: CVE-2020-15654 and a history of Firefox “Browser Lock” bugs

August 3, 2020