Blog

Providing Solutions

What’s coming next for network security

We’ve already had a busy year of network security product releases.  New hardware, software, and cloud management capabilities: XGS Series appliances with dedicated Xstream Flow Processors, powerful protection and performance, and enhanced connectivity Sophos Firewall OS v18.5 MR1 with a ton of new enhancements for security, performance improvements, and helpful features SD-WAN VPN Orchestration in…
Read more

Phishing and malware actors abuse Google Forms for credentials, data exfiltration

Earlier this year as we researched malware use of Transport Layer Security-based communications to conceal command and control traffic and downloads, we found a disproportionate amount of traffic going to Google cloud services. Among the destinations we found in telemetry were a host of Google Forms pages. The abuse of legitimate public cloud services by…
Read more

Hindsight #7: Prepare for the worst

This article is  part of a series that aims to educate cyber security professionals on the lessons learned by breach victims. Each lesson will include simple recommendations, many of which do not require organizations to purchase any tools.

Cring ransomware group exploits ancient ColdFusion server

The rarely-seen ransomware family leveraged commercial remote access tools to move laterally on the network