#sophos

共收录 31 条相关情报。

← 返回所有主题

威胁情报2026-10-30 发布INFO

Malicious Claude Code extension distributed through Cursor marketplace

Categories: Threat Research Tags: advisory, Cursor

来源摘录 · Sophos

#malware #ransomware #sophos

威胁情报2026-10-29 发布INFO

AI used in Aur0ra ransomware testing and execution

The GOLD OGRE threat group has used AI extensively to develop tools and to orchestrate and execute ransomware operations

来源摘录 · Sophos

#malware #ransomware #sophos

威胁情报2026-10-28 发布INFO

Node2Shell (CVE-2026-111497) in active exploitation

CVE-2026-111497

Categories: Threat ResearchTags: advisory, vulnerability, Node2Shell, Brotli

历史摘要 · 未重新核验 · Sophos

#malware #ransomware #sophos

威胁情报2026-10-21 发布INFO

Proof-of-concept exploit released for PHP vulnerabilities (CVE-2026-109618, CVE-2026-109619)

CVE-2026-109618 · CVE-2026-109619

Categories: Threat ResearchTags: advisory, vulnerability, php

历史摘要 · 未重新核验 · Sophos

#sophos #malware #ransomware

威胁情报2026-10-20 发布INFO

BRONZE SANDCASTLE deploys modified Meterpreter shells

The China-based threat group uses DLL sideloading in these attacksCategories: Threat ResearchTags: BRONZE SANDCASTLE, Me

历史摘要 · 未重新核验 · Sophos

#malware #sophos #ransomware

威胁情报2026-10-19 发布INFO

Graph reconnaissance and ServiceNow user enumeration in a modern identity intrusion

No novelty required to be effectiveCategories: Threat Research, X-ops, Sophos SecOpsTags: incident response

历史摘要 · 未重新核验 · Sophos

#sophos #ransomware #malware

威胁情报2026-10-19 发布INFO

ConnectWise Cloud Backup application abused in cross-tenant token sweep

Automated sign-ins used the vendor's Entra application identity to request Microsoft Graph tokens across consenting tena

历史摘要 · 未重新核验 · Sophos

#sophos #ransomware #malware

威胁情报2026-10-13 发布INFO

building intent-based access control without reading minds

This article was first published on LinkedIn.Categories: AI Research, Threat ResearchTags: AI, AI RESEARCH, Threat Resea

历史摘要 · 未重新核验 · Sophos

#malware #sophos #ransomware

威胁情报2026-10-05 发布INFO

Citrix NetScaler vulnerability (CVE-2026-88779) in active exploitation

CVE-2026-88779

Categories: Threat ResearchTags: advisory, vulnerability, Citrix

历史摘要 · 未重新核验 · Sophos

#malware #sophos #ransomware

威胁情报2026-09-28 发布INFO

Citrix NetScaler vulnerabilities (CVE-2026-88771, CVE-2026-88772) in active exploitation

CVE-2026-88771 · CVE-2026-88772

Categories: Threat ResearchTags: advisory, vulnerability, Citrix

历史摘要 · 未重新核验 · Sophos

#ransomware #sophos #malware

威胁情报2026-09-16 发布INFO

September Patch Tuesday haul includes 973 CVEs

Windows takes 718 fixes… but what if it was actually a slow month?Categories: Threat ResearchTags: Patch Tuesday, x-ops,

历史摘要 · 未重新核验 · Sophos

#ransomware #sophos #malware

威胁情报2026-09-15 发布INFO

Cisco Secure Email Gateway vulnerability (CVE-2026-76461) in active exploitation

CVE-2026-76461

Categories: Threat ResearchTags: advisory, vulnerability, Cisco

历史摘要 · 未重新核验 · Sophos

#sophos #malware #ransomware

威胁情报2026-09-15 发布INFO

ai research messageboards

This article was first published on LinkedIn.Categories: AI Research, Threat ResearchTags: AI, AI Cybersecurity, Threat

历史摘要 · 未重新核验 · Sophos

#sophos #malware #ransomware

威胁情报2026-09-11 发布INFO

“Eye” spy: Cyclops Blink returns with extended capabilities

Sophos 威胁研究团队发布分析博客，指出模块化恶意软件平台 Cyclops Blink 以"升级版"形态回归，其能力较此前版本有所扩展，本轮观察到的攻击目标为 Cisco Firewall Management Center（FMC，防

历史摘要 · 未重新核验 · Sophos

#ransomware #sophos #malware #clop

威胁情报2026-09-07 发布INFO

Dissecting a PHP web server rootkit

Sophos X-Ops takes a deep dive into an insidious piece of malwareCategories: Threat ResearchTags: rootkit, php, webshell

历史摘要 · 未重新核验 · Sophos

#ransomware #sophos #malware

威胁情报2026-09-02 发布INFO

SonicWall 83548 83549

Categories: Threat ResearchTags: advisory, vulnerability, SonicWall

历史摘要 · 未重新核验 · Sophos

#sophos #malware #ransomware

威胁情报2026-09-01 发布INFO

Ungentlemanly behavior: Insights into a ransomware operation

Analysis of 15 intrusions revealed tradecraft used by GOLD SHERWOOD affiliatesCategories: Threat ResearchTags: ransomwar

历史摘要 · 未重新核验 · Sophos

#malware #ransomware #sophos

威胁情报2026-08-19 发布INFO

Fake AI, real malware: Attackers impersonating AI brands

A year of MDR casework shows attackers repeatedly exploiting demand for AI toolsCategories: Threat ResearchTags: AI, mal

历史摘要 · 未重新核验 · Sophos

#ransomware #malware #sophos

威胁情报2026-08-04 发布INFO

N-able N-central exploitation results in RMM tool deployment

CVE-2026-18577

After compromising systems via CVE-2026-18577, threat actors use the additional RMM tools and network tunnels to establi

历史摘要 · 未重新核验 · Sophos

#ransomware #malware #sophos

威胁情报2026-08-04 发布INFO

2608-volatility-interlock

Multiple legitimate DFIR tools abused by GOLD EMBRACE double-extortion specialistsCategories: Threat Research

历史摘要 · 未重新核验 · Sophos

#ransomware #malware #sophos