October 31, 2024

Digital Detritus: The engine of Pacific Rim and a call to the industry for action

Decades of obsolete and unpatched hardware and software endanger us all

Security Operations

October 31, 2024

Pacific Rim timeline: Information for defenders from a braid of interlocking attack campaigns

Sophos X-Ops unveils five-year investigation tracking China-based groups targeting perimeter devices

Security Operations

September 10, 2024

Crimson Palace returns: New Tools, Tactics, and Targets 

Chinese cyberespionage campaign renews efforts in multiple organizations in Southeast Asia, blending tactics and expanding efforts 

Security OperationsThreat Research

August 22, 2024

Qilin ransomware caught stealing credentials stored in Google Chrome

Familiar ransomware develops an appetite for passwords to third-party sites

Security OperationsThreat Research

August 13, 2024

Don’t get Mad, get wise

The “Mad Liberator” ransomware group leverages social-engineering moves to watch out for

Security OperationsThreat Research

August 07, 2024

Sophos MDR hunt tracks Mimic ransomware campaign against organizations in India

STAC6451 threat cluster targets Internet-exposed Microsoft SQL servers for initial access

Security Operations

August 07, 2024

Best security practices for ESXi environments

Ten recommendations for defenders when natively run EDR isn’t an option

Security OperationsThreat Research

June 12, 2024

RD Web Access abuse: Fighting back

Investigation insights and recommendations from a recent welter of incident-response cases

Security OperationsThreat Research

June 05, 2024

Operation Crimson Palace: A Technical Deep Dive

Security OperationsThreat Research