March 09, 2023

A border-hopping PlugX USB worm takes its act on the road

Borne aloft by DLL sideloading, a far-flung infection touches ten time zones

Threat Research

December 01, 2022

The CHRISTMA EXEC network worm – 35 years and counting!

"Uh-oh, this viruses-and-worms scene could turn out quite troublesome." If only we'd been wrong...

Naked Security

January 12, 2022

Wormable Windows HTTP hole – what you need to know

One bug in the January 2022 Patch Tuesday list is getting lots of attention: "HTTP Protocol Stack Remote Code Execution Vulnerability".

Naked Security

July 15, 2021

The Code Red worm 20 years on – what have we learned?

"It was 20 years ago today..." that we learned a few lessons that are well worth revisiting!

Naked Security

December 08, 2020

20 years of cyberthreats that shaped information security

Sophos senior security advisor, John Shier, explores the defining threats from the last two decades and their legacy

Malware

July 15, 2020

Patch now! SIGRED – the wormable hole in your Windows servers

The bug can definitely crash your Windows DNS servers, and it could end up being used for much worse than that. Please patch now!

Naked Security

June 24, 2020

Glupteba malware hides in plain sight

A worm focused on concealment and stealth may keep malware payloads hidden from view

SophosLabs Uncut

July 26, 2019

BlueKeep guides make imminent public exploit more likely

A public exploit for Microsoft's BlueKeep vulnerability is just days away. In fact, for those with deep pockets, it's already here.

Naked Security

May 30, 2019

A million devices still vulnerable to ‘wormable’ RDP hole

An internet-wide scan has revealed almost one million devices vulnerable to CVE-2019-0708.

Naked Security