Cybersecurity

How We (Almost) Found Chromium’s Bug via Crash Reports to Report URI

Tracking down bugs in software is a pain that all of us...

BRONZE BUTLER exploits Japanese asset management software vulnerability – Sophos News

In mid-2025, Counter Threat Unit™ (CTU) researchers observed a sophisticated BRONZE BUTLER campaign that exploited a zero-day vulnerability in Motex LANSCOPE Endpoint Manager to...

GPT-5 Agent That Finds and Fixes Code Flaws Automatically

Oct 31, 2025Ravie LakshmananArtificial Intelligence / Code Security OpenAI has announced the launch of an "agentic security researcher" that's powered by its GPT-5 large...

Cybercrime on Main Street 2025 – Sophos News

Small businesses are a prime target for cybercrime, as we highlighted in our last annual report. Many of the criminal threats we covered in...

BlueNoroff’s latest campaigns: GhostCall and GhostHire

Introduction Primarily focused on financial gain since its appearance, BlueNoroff (aka. Sapphire Sleet, APT38, Alluring Pisces, Stardust Chollima, and TA444) has adopted new infiltration strategies...

A phishing with invisible characters in the subject line

While reviewing malicious messages that were delivered to our handler inbox over the past few days, I noticed that the “subject” of one phishing...

How to hack a prison, and the hidden threat of online checkouts • Graham Cluley

A literal insider threat: we head to a Romanian prison where “self-service” web kiosks allowed inmates...

MG – Darknet Diaries

Full Transcript In this episode we talk with MG (https://x.com/MG), the brilliant (and notorious) hacker and hardware engineer behind the OMG...

Are cybercriminals hacking your systems – or just logging in?

As bad actors often simply waltz through companies’ digital front doors with...

Inside the Synthient Threat Data

Where is your data on the internet? I mean, outside the places...

Threat Intelligence Executive Report – Volume 2025, Number 5 – Sophos News

The Counter Threat Unit™ (CTU) research team analyzes security threats to help organizations protect their systems. Based on observations in July and August, CTU™...

Iran-Linked MuddyWater Targets 100+ Organisations in Global Espionage Campaign

Oct 22, 2025Ravie LakshmananMalware / Cyber Espionage The Iranian nation-state group known as MuddyWater has been attributed to a new campaign that has leveraged a...

Recent articles