December 30, 2024

Prioritizing patching: A deep dive into frameworks and tools – Part 2: Alternative frameworks

In the second of a two-part series on tools and frameworks designed to help with remediation prioritization, we explore some alternatives to CVSS

Threat Research

July 12, 2022

July Patch Tuesday is Rich in Azure, Windows Issues

Windows-facing issues make up the bulk of the 85 CVEs addressed, with one vulnerability under active exploit in the wild

Threat Research

April 12, 2022

RPC Vulnerability Stands Out in a Field of 128 in April

This month’s Patch Tuesday is more about quantity than severity, with one flashback-inducing exception

Threat Research

March 29, 2022

Reconstructing PowerShell scripts from multiple Windows event logs

On the trail of malicious PowerShell artifacts too large to be contained in a single log? Help is on the way.

Security Operations

March 08, 2022

Microsoft patches 71 vulnerabilities including RDP Client, Exchange Server, Intune

Just two Critical-class vulnerabilities, but Windows Update doesn’t handle every package this month

Threat Research

February 02, 2022

Log4Shell: How the Attackers’ Faces Have Changed Over Time

Following an article on January 24, 2022 of Log4Shell scanning and attack detections since the bug was reported, Sophos addresses reader questions about who’s behind it all

Security Operations

January 24, 2022

Log4Shell: No Mass Abuse, But No Respite, What Happened?

Sophos reviews the scanning and attack detections for Log4Shell to see what's really going on

Security Operations

October 28, 2021

The Top 10 Ways Ransomware Operators Ramp Up the Pressure to Pay

Ransomware operators don't just target systems and data, they target people in their ever-increasing efforts to get the victim to pay

Security Operations

November 27, 2017

Introducing the new SophosLabs homepage

Discover the latest threat research, read our reports and try to outsmart an AI machine on the new-look SophosLabs page

Threat Research