Sophos – Computer Security Articles

New Lemon Duck variants exploiting Microsoft Exchange Server

May 7, 2021 admin 0 Comments China Chopper, cobalt strike, cryptomining, cve-2020-14882, Exchange, lemon duck, oracle weblogic server, proxylogon, SophosLabs, SophosLabs Uncut, Web Shell

Credit to Author: rajeshnataraj| Date: Fri, 07 May 2021 12:30:35 +0000

In March, Microsoft published a set of critical fixes to Exchange Server following the discovery of ProxyLogon–an exploit that was stolen or leaked from researchers within hours of its disclosure to Microsoft. The exploit is now widely available to cybercriminals, and unpatched and vulnerable Microsoft Exchange Servers continue to attract many threat actors to install cryptocurrency-miners, […]<img src=”http://feeds.feedburner.com/~r/sophos/dgdY/~4/f5mbGzsxNSo” height=”1″ width=”1″ alt=””/>

Security Sophos

MTR in Real Time: Pirates pave way for Ryuk ransomware

May 6, 2021 admin 0 Comments mtr, ransomware, rapid response, RDP, ryuk, security operations, sophos mtr

Credit to Author: Tilly Travers| Date: Thu, 06 May 2021 13:00:21 +0000

Sophos’ Rapid Response team was recently brought in to contain and neutralize an attack involving Ryuk ransomware. The target was a European biomolecular research institute involved in COVID-19 related research as well as other activities related to the life sciences. The institute has close partnerships with local universities and works with students on various programs. […]<img src=”http://feeds.feedburner.com/~r/sophos/dgdY/~4/6pSQ_YkCBSQ” height=”1″ width=”1″ alt=””/>

Security Sophos

Using Sophos EDR to identify endpoints impacted by Dell kernel driver vulnerability CVE-2021-21551

May 6, 2021 admin 0 Comments Corporate, exploit, Server Protection, sophos edr, Sophos Intercept X, Vulnerability

Credit to Author: Anthony Merry| Date: Thu, 06 May 2021 09:09:24 +0000

Use this query to identify which endpoints are impacted by the Dell kernel driver vulnerability CVE-2021-21551, and which are not.<img src=”http://feeds.feedburner.com/~r/sophos/dgdY/~4/SxHmhU9-42Q” height=”1″ width=”1″ alt=””/>

Security Sophos

Introducing Sophos XDR and enhanced EDR

May 5, 2021 admin 0 Comments EDR, sophos edr, Sophos Products, sophos xdr, XDR

Credit to Author: Alex Gardner| Date: Wed, 05 May 2021 13:00:47 +0000

This release brings powerful XDR capabilities as well as significant enhancements to EDR functionality.<img src=”http://feeds.feedburner.com/~r/sophos/dgdY/~4/abO9ip4mUNg” height=”1″ width=”1″ alt=””/>

Security Sophos

Intervention halts a ProxyLogon-enabled attack

May 5, 2021 admin 0 Comments adrecon, chisel, cobalt strike, Exchange, Mimikatz, mtr, proxylogon, ransomware, RDP, remote utilities, SophosLabs Uncut

Credit to Author: Andrew Brandt| Date: Wed, 05 May 2021 12:30:36 +0000

A late charge by a cavalry of reinforcements prevented the attackers from causing greater harm<img src=”http://feeds.feedburner.com/~r/sophos/dgdY/~4/nsaemm7G8Nk” height=”1″ width=”1″ alt=””/>

Security Sophos

Introducing the Sophos Adaptive Cybersecurity Ecosystem

May 5, 2021 admin 0 Comments Corporate, sophos ace, sophos adaptive cybersecurity ecosystem, Synchronized Security

Credit to Author: Sally Adam| Date: Wed, 05 May 2021 12:30:19 +0000

Leveraging automation and human operators in a virtuous circle that constantly improves.<img src=”http://feeds.feedburner.com/~r/sophos/dgdY/~4/ZxBdaGcPy8o” height=”1″ width=”1″ alt=””/>

Security Sophos

How curiosity builds better products: a day in the life of a Senior Hardware Engineer

May 4, 2021 admin 0 Comments Corporate, sophos firewall, XG Firewall, xgs series, xstream

Credit to Author: harrietstone| Date: Tue, 04 May 2021 07:46:15 +0000

The way the Sophos Firewall team works together is one of the things I enjoy most about working at Sophos. Our new XGS Series appliances involve some very complex engineering. Delivering them has taken a great depth of knowledge—and I’m grateful to be a part of this extremely talented team of people. The hardware team […]<img src=”http://feeds.feedburner.com/~r/sophos/dgdY/~4/E36JnZondXA” height=”1″ width=”1″ alt=””/>

Security Sophos

Minimizing the risk of supply chain attacks – best practice guidelines

April 28, 2021 admin EDR, mtr, report, Security Tips, Sophos Products, Supply chain, supply-chain security

Credit to Author: Doug Aamoth| Date: Wed, 28 Apr 2021 10:00:29 +0000

The recent cyberattack on IT-monitoring company SolarWinds pushed supply chain weaknesses into the spotlight by highlighting just how unprepared many organizations are when it comes to defending against supply chain attacks. These attacks often happen because they don’t know where to start or don’t believe themselves important or high-profile enough to be targeted. In our […]<img src=”http://feeds.feedburner.com/~r/sophos/dgdY/~4/21_LQ5JquEQ” height=”1″ width=”1″ alt=””/>

← Previous