 | Abuse of alternative runtime environments Deno-tes defender headaches | 2026-08-11 | True | | True | | |
| ClickFix campaign abuses Deno runtime for infostealer delivery | 2026-08-11 | True | | True | | |
| When AI doesn’t know the target is real | 2026-07-31 | True | | True | | |
| Secure by Design in practice: a year of progress on Sophos Firewall | 2026-07-29 | True | | True | | |
| When the "attacker" is an AI agent | 2026-07-23 | True | | True | | |
| July Patch Tuesday only feels endless | 2026-07-21 | True | | True | | |
| In code we trust? Why the most trusted software receives the least scrutiny. | 2026-07-20 | True | | True | | |
| "Exploit mitigation" stalled around 2008. The attacks didn't. | 2026-07-06 | True | | True | | |
| AI in the underground: Curiosity, claims, and concerns | 2026-06-17 | True | | True | | |
| A needle in a stack of needles: Hunting infostealers with AI | 2026-06-16 | True | | True | | |
| June Patch Tuesday smashes past 500-CVE mark | 2026-06-11 | True | | True | | |
| Bug bounties in the Mythos era | 2026-06-11 | True | | True | | |
| You do surprise me.exe: An unexpected executable in Hola Browser | 2026-06-04 | True | | True | | |
| You do surprise me.exe: An unexpected executable in Hola Browser | 2026-06-04 | True | | True | | |
| Pointing a Cursor at evading detection | 2026-06-02 | True | | True | | |
| Pointing a Cursor at evading detection | 2026-06-02 | True | | True | | |
| Canvas attack aftermath: What risks come next | 2026-05-28 | True | | True | | |
| Canvas attack aftermath: What risks come next? | 2026-05-28 | True | | True | | |
| GitHub internal repositories breached | 2026-05-27 | True | | True | | |
| GitHub internal repositories breached | 2026-05-20 | True | | True | | |
| WantToCry ransomware remotely encrypts files | 2026-05-19 | True | | True | | |
| WantToCry ransomware remotely encrypts files | 2026-05-19 | True | | True | | |
| Why AMOS matters: The macOS malware stealing data at scale | 2026-05-14 | True | | True | | |
| May’s Patch Tuesday hauls out 132 CVEs | 2026-05-13 | True | | True | | |
| May’s Patch Tuesday hauls out 132 CVEs | 2026-05-13 | True | | True | | |
| Sophos Endpoint in action: Blocking a novel supply chain attack | 2026-05-12 | True | | True | | |
| The State of Identity Security 2026: Identity is the new perimeter | 2026-05-12 | True | | True | | |
| Why AMOS matters: The macOS malware stealing data at scale | 2026-05-11 | True | | True | | |
| Ransomware: AI changes the writer. It doesn't change the math. | 2026-05-11 | True | | True | | |
| Donuts and Beagles: Fake Claude site spreads backdoor | 2026-05-07 | True | | True | | |
| Proof-of-concept exploit available for Linux 'Copy Fail' vulnerability (CVE-2026-31431) | 2026-05-01 | True | | True | | |
| AI just became the world's most dangerous exploit writer. Here's why Sophos Endpoint is built to stop it. | 2026-05-01 | True | | True | | |
| AI finds the vulnerabilities, but exploiting them is a different problem. | 2026-05-01 | True | | True | | |
| 'Mini Shai-Hulud' supply chain attack targets SAP npm packages | 2026-04-29 | True | | True | | |
| Supply chain attacks hit Checkmarx and Bitwarden developer tools | 2026-04-24 | True | | True | | |
| Microsoft addresses 163 CVEs, 88 advisories for April Patch Tuesday | 2026-04-17 | True | | True | | |
| QEMU abused to evade detection and enable ransomware delivery | 2026-04-16 | True | | True | | |
| The vulnerability flood is here. Here’s what it means – and how to prepare | 2026-04-09 | True | | True | | |
| Adobe Reader zero-day vulnerability in active exploitation | 2026-04-09 | True | | True | | |
| Axios npm package compromised to deploy malware | 2026-03-31 | True | | True | | |
| Incident responders, s'il vous plait: Invites lead to odd malware events | 2026-03-30 | True | | True | | |
| Oracle vulnerability (CVE-2026-21992) impacts core products | 2026-03-23 | True | | True | | |
| NICKEL ALLEY strategy: Fake it ‘til you make it | 2026-03-23 | True | | True | | |
| Android devices ship with firmware-level malware | 2026-03-19 | True | | True | | |
| Initial access techniques used by Iran-based threat actors | 2026-03-13 | True | | True | | |
| March Patch Tuesday visits 15 product families | 2026-03-13 | True | | True | | |
| Evil evolution: ClickFix and macOS infostealers | 2026-03-11 | True | | True | | |
| Hacktivist campaigns increase as United States, Iran, and Israel conflict intensifies | 2026-03-03 | True | | True | | |
| Cyber Advisory: Increased Cyber Risk Amid U.S.–Israel–Iran Escalation | 2026-03-01 | True | | True | | |
| Cisco SD-WAN vulnerabilities (CVE-2026-20127, CVE-2022-20775) in active exploitation | 2026-02-26 | True | | True | | |
