In the fourth of our five-part series, Sophos X-Ops explores threat actors’ real-world criminal business interests
In the fourth of our five-part series, Sophos X-Ops explores threat actors’ real-world criminal business interests
For the first time in a long while, the federal government and the software sector alike finally have the tools and resources needed to do security well — consistently and cost-effectively.
Researchers at Oasis Security say the problem has to do with OneDrive File Picker having overly broad permissions.
Threat actors are exploiting a vulnerability in Ivanti Connect Secure first disclosed by the vendor in January.
The China-linked cyber espionage group tracked as Lotus Panda has been attributed to a campaign that compromised multiple organizations in an unnamed Southeast Asian country between August 2024 and February 2025. “Targets included a government ministry, an air traffic control organization, a telecoms operator, and a construction company,” the Symantec Threat Hunter Team said in…
The $168 million judgment against NSO Group underscores how citizens put little store in the spyware industry’s justifications for circumventing security — but will it matter?