Sophos Security News
Latest blog posts and insights from Sophos
-
Proof-of-concept exploit released for PHP vulnerabilities (CVE-2026-109618, CVE-2026-109619)
-
Web App Owners – You’re on Notice. Your Low-Hanging Fruit Just Got Lower
Recent incident response investigations reveal how AI-assisted attackers are chaining web application vulnerabilities, credential theft, privilege escalation, and lateral movement into autonomous intrusion workflows.
-
BRONZE SANDCASTLE deploys modified Meterpreter shells
The China-based threat group uses DLL sideloading in these attacks
-
Why Incident Response Demand Will Grow Faster than Expected
A perspective on AI-enabled attacker scale, defender capacity, and the growing need for experienced responders.
-
Beyond the mailbox: Graph reconnaissance and ServiceNow user enumeration in a modern identity intrusion
No novelty required to be effective