Sophos Firewall v22 is now available
Secure by Design.
Secure by Design.
A threat actor known as ShadyPanda has been linked to a seven-year-long browser extension campaign that has amassed over 4.3 million installations over time. Five of these extensions started off as legitimate programs before malicious changes were introduced in mid-2024, according to a report from Koi Security, attracting 300,000 installs. These extensions have since been…
As global power realigns and economies falter, the rise in cybercrime is no longer hypothetical — it’s inevitable.
While Ukraine remains Russia’s major target for cyberattacks, TAG-110 is part of a strategy to preserve “a post-Soviet sphere of influence” by embedding itself in other countries’ infrastructures.
What is the Attack? A large-scale cyberattack against medical technology company Stryker resulted in widespread system outages. The attack was driven by a destructive wiper campaign attributed to Iran-linked threat actors, including the hacktivist group Handala. Following the incident, CISA issued an alert highlighting the compromise of endpoint management infrastructure- specifically platforms such as Microsoft…
A new threat vector exploits how modern browsers save HTML files, bypassing Mark of the Web and giving attackers another social-engineering attack for delivering malware.
The lesson from the breach is not just about what went wrong — but what could have gone right.