Critical Apache HTTP/2 Flaw (CVE-2026-23918) Enables DoS and Potential RCE on May 5, 2026 Posted by The Hacker News
DAEMON Tools Supply Chain Attack Compromises Official Installers with Malware on May 5, 2026 Posted by The Hacker News
China-Linked UAT-8302 Targets Governments Using Shared APT Malware Across Regions on May 5, 2026 Posted by The Hacker News
The Back Door Attackers Know About — and Most Security Teams Still Haven’t Closed on May 5, 2026 Posted by The Hacker News
Posted in ATT&CK Game of clones: Sophos and the MITRE ATT&CK Enterprise 2025 Evaluations on December 15, 2025 Matt Wixey
Posted in AI Sophos AI at Black Hat USA ’25: Anomaly detection betrayed us, so we gave it a new job on August 7, 2025 Matt Wixey
Posted in featured Small world: The revitalization of small AI models for cybersecurity on July 23, 2025 Matt Wixey
Posted in featured SharePoint ‘ToolShell’ vulnerabilities being exploited in the wild on July 21, 2025 Matt Wixey
Posted in anomaly detection SophosAI at Black Hat USA ’25: Anomaly detection betrayed us, so we gave it a new job on July 14, 2025 Matt Wixey
Posted in asyncrat The strange tale of ischhfd83: When cybercriminals eat their own on June 4, 2025 Matt Wixey
Posted in beyond the kill chain Beyond the kill chain: What cybercriminals do with their money (Part 5) on May 15, 2025 Matt Wixey
Posted in beyond the kill chain Beyond the kill chain: What cybercriminals do with their money (Part 4) on May 15, 2025 Matt Wixey
Posted in beyond the kill chain Beyond the kill chain: What cybercriminals do with their money (Part 3) on May 15, 2025 Matt Wixey