Sophos

Ransomware tactics in manufacturing are evolving from data encryption to data theft and extortion, directly exploiting the high cost of…

Cybersecurity threat groups are increasingly using the commercial **Shanya packer service** to encrypt and obfuscate ransomware payloads, making them difficult…

Sophos Intelix threat intelligence is now integrated with Microsoft Security Copilot and Microsoft 365 Copilot, providing real-time access to Sophos'…

The retail sector is seeing a decline in data encryption during ransomware attacks, but attackers are increasingly using extortion-only tactics…

A critical remote code execution vulnerability (CVE-2025-59287) in Windows Server Update Services (WSUS) is being actively exploited, allowing attackers to…

Sophos has launched an Identity Threat Detection and Response (ITDR) solution to combat the rapid rise in identity-based attacks, integrating…

Malicious actors are misusing the Velociraptor digital forensics tool to deploy LockBit and Babuk ransomware, with the Chinese threat group…

Legitimate open-source tools Velociraptor and Nezha are being weaponized by threat actors to maintain access, evade detection, and deploy ransomware…

Educational institutions are improving ransomware defenses, with 97% successfully recovering encrypted data and average ransom payments dropping significantly. Despite progress,…

A sophisticated malware campaign uses SVG files to hide malicious scripts, bypassing antivirus detection by embedding phishing portals that deliver…

ScreenConnect administrators are targeted by a phishing campaign using fake security alerts to steal login credentials and bypass multi-factor authentication,…

A new advanced tool is being used by multiple ransomware groups to bypass endpoint security by exploiting vulnerable drivers and…

Ransomware attacks in the UK are more severe than globally, with 70% of affected organizations experiencing data encryption and paying…

Businesses are reducing ransomware costs through negotiation, with over half cutting median payments by 50% despite initial demands dropping only…

16 billion login credentials were exposed online, posing risks for major platforms like Facebook, Apple, and Google, with urgent calls…