WeaselBiscuit Stealer Spreads via 13 npm Packages to Harvest Chrome Extension Storage on September 18, 2026 Posted by The Hacker News
Claimed Bug Bounty Hunter Likely Used LLM to Build PhantomRaven npm Stealer on September 18, 2026 Posted by The Hacker News
RatHat Android Malware Abuses ADB to Retain Shell Access After Uninstall on September 17, 2026 Posted by The Hacker News
Posted in ATT&CK Game of clones: Sophos and the MITRE ATT&CK Enterprise 2025 Evaluations on December 15, 2025 Matt Wixey
Posted in AI Sophos AI at Black Hat USA ’25: Anomaly detection betrayed us, so we gave it a new job on August 7, 2025 Matt Wixey
Posted in featured Small world: The revitalization of small AI models for cybersecurity on July 23, 2025 Matt Wixey
Posted in featured SharePoint ‘ToolShell’ vulnerabilities being exploited in the wild on July 21, 2025 Matt Wixey
Posted in anomaly detection SophosAI at Black Hat USA ’25: Anomaly detection betrayed us, so we gave it a new job on July 14, 2025 Matt Wixey
Posted in asyncrat The strange tale of ischhfd83: When cybercriminals eat their own on June 4, 2025 Matt Wixey
Posted in beyond the kill chain Beyond the kill chain: What cybercriminals do with their money (Part 5) on May 15, 2025 Matt Wixey
Posted in beyond the kill chain Beyond the kill chain: What cybercriminals do with their money (Part 4) on May 15, 2025 Matt Wixey
Posted in beyond the kill chain Beyond the kill chain: What cybercriminals do with their money (Part 3) on May 15, 2025 Matt Wixey
