January 24, 2022

Log4Shell: No Mass Abuse, But No Respite, What Happened?

Sophos reviews the scanning and attack detections for Log4Shell to see what's really going on

Security Operations

August 23, 2021

ProxyShell vulnerabilities in Microsoft Exchange: What to do

The vulnerabilities lie in the Microsoft Client Access Service (CAS), which is commonly exposed to the public internet. This exposure has led to widespread exploitation by threat actors.

Security Operations

July 22, 2021

HiveNightmare aka SeriousSAM vulnerability : what to do

Security Operations

July 01, 2021

PrintNightmare vulnerability: what to do

Products & Services

May 06, 2021

Using Sophos EDR to identify endpoints impacted by Dell kernel driver vulnerability CVE-2021-21551

Use this query to identify which endpoints have the file associated with CVE-2021-21551, and which do not.

Products & Services

January 13, 2021

Sophos is a CVE numbering authority

Products & Services

June 09, 2020

Microsoft pushes fixes for 128 security bugs in June, 2020 Patch Tuesday

SophosLabs UncutThreat Research

April 14, 2020

Microsoft delivers fixes for 110 bugs in April, 2020 Patch Tuesday

SophosLabs UncutThreat Research

January 14, 2020

January 2020 Patch Tuesday delivers fixes for 50 bugs

This month’s big security news from Microsoft is the end of support for Windows 7, and a patch of a cryptographic library

SophosLabs UncutThreat Research