Liquidity mining scams add another layer to cryptocurrency crime

June 07, 2022

Move fast, unbreak things: About the Sophos Active Adversary Playbook 2022

Our latest report shows that the most pleasant way to learn from Rapid Response mayhem is to read about how it worked out for someone else

Security OperationsSophosLabs UncutThreat Research

June 01, 2022

Analyzing CVE-2022-0778: When Square Root Results in a Denial of Service

How could a humble SSL certificate entirely gridlock a system? Walk with us through the math

Sophos SecOpsSophosLabs UncutThreat Research

May 04, 2022

Attacking Emotet’s Control Flow Flattening

Sweeping aside one obfuscation technique in a notorious strain of malware

SophosLabs Uncut

April 12, 2022

RPC Vulnerability Stands Out in a Field of 128 in April

This month’s Patch Tuesday is more about quantity than severity, with one flashback-inducing exception

SophosLabs UncutThreat Research

March 08, 2022

Microsoft patches 71 vulnerabilities including RDP Client, Exchange Server, Intune

Just two Critical-class vulnerabilities, but Windows Update doesn’t handle every package this month

SophosLabs UncutThreat Research

February 28, 2022

Conti and Karma actors attack healthcare provider at same time through ProxyShell exploits

An unpatched Microsoft Exchange Server let both ransomware actors in; Karma just stole data, while Conti encrypted.

SophosLabs UncutThreat Research

February 23, 2022

Dridex bots deliver Entropy ransomware in recent attacks

Some code used in the ransomware bear a resemblance to code used in Dridex malware, hinting at a common origin

SophosLabs UncutThreat Research

February 09, 2022

Microsoft Fixes 52 Vulnerabilities in February, 2022 Patches

Active Directory, Visual Studio, and Microsoft Dynamics & Power BI business packages also got updates

SophosLabs UncutThreat Research

January 11, 2022

First Patch Tuesday of 2022 repairs 102 bugs

Critical bugs fixed in Exchange, Office, and graphics subsystems--plus a few unexpected products

SophosLabs UncutThreat Research