Big Office bug squashed for September 2021’s Patch Tuesday

August 25, 2021

How PetitPotam hijacks the Windows API, and what you can do about it

The PetitPotam attack method is rapidly gaining attention from security researchers and threat actors

SophosLabs UncutThreat Research

August 10, 2021

Microsoft pushes fixes for 44 more vulnerabilities in August Patch Tuesday update

A publicly-disclosed remote Print Spooler exploit, and bugs in JScript and NFS, lead the list of the most concerning CVEs.

SophosLabs UncutThreat Research

August 03, 2021

Trash Panda as a Service: Raccoon Stealer steals cookies, cryptocoins, and more

Cookie and credential stealing malware-as-a-service delivered by dropper-as-a-service now packs a “clipper” to steal crypto-transactions, and can drop other malware.

SophosLabs UncutThreat Research

July 22, 2021

Malware increasingly targets Discord for abuse

Criminals abuse a successful chat service to host, spread, and control malware targeting their users.

SophosLabs UncutThreat Research

July 13, 2021

Panoply of critical patches in July updates require quick action

More than 40 remote code execution bugs get squished – and not a moment too soon

SophosLabs UncutThreat Research

July 04, 2021

Independence Day: REvil uses supply chain exploit to attack hundreds of businesses

Friday afternoon ransomware rampage exploited Kaseya update system to spread (and conceal) itself.

SophosLabs UncutThreat Research

June 17, 2021

Vigilante malware rats out software pirates while blocking ThePirateBay

A collection of malware samples revives a decade-old HOSTS modification trick to block hundreds of websites

SophosLabs UncutThreat Research

June 11, 2021

Relentless REvil, revealed: RaaS as variable as the criminals who use it

No two criminal groups deploy the ransomware-as-a-service, also known as Sodinokibi, in exactly the same way

SophosLabs UncutThreat Research

June 08, 2021

Six in-the-wild exploits patched in Microsoft’s June security fix release

Security fixes address five critical vulnerabilities, including scripting and Defender bugs—and one actively exploited flaw in MSHTML.

SophosLabs UncutThreat Research