SharePoint ‘ToolShell’ vulnerabilities being exploited in the wild
Sophos X-Ops sees exploitation across multiple customer estates
Similar Posts
15,000+ Four-Faith Routers Exposed to New Exploit Due to Default Credentials
A high-severity flaw impacting select Four-Faith routers has come under active exploitation in the wild, according to new findings from VulnCheck. The vulnerability, tracked as CVE-2024-12856 (CVSS score: 7.2), has been described as an operating system (OS) command injection bug affecting router models F3x24 and F3x36. The severity of the shortcoming is lower due to…
A Bold New Look for a Bold Future: Sophos’ Reimagined Brand
Bys sAt Sophos, we envision a world where organizations of any size and means have a clear path to superior cybersecurity outcomes. It guides every decision we make from how we design solutions, to how we empower partners – to how we present ourselves as a brand. This is why I am so excited to have…
Draft UK Cyber Security and Resilience Bill Enters UK Parliament
Bys sHunton Andrews Kurth writes: On November 12, 2025, the UK government introduced the draft Cyber Security and Resilience (Network and Information Systems) Bill (the “Bill”) to the UK Parliament. The Bill, which was originally announced in July 2024, proposes amendments to the Network and Information Systems (NIS) Regulations 2018 (the “NIS Regulations”), taking into consideration the European……
The Bite from Inside: The Sophos Active Adversary Report
Bys sA sea change in available data fuels fresh insights from the first half of 2024
RondoDox Botnet Exploits Flaws in TBK DVRs and Four-Faith Routers to Launch DDoS Attacks
Bys sCybersecurity researchers are calling attention to a malware campaign that’s targeting security flaws in TBK digital video recorders (DVRs) and Four-Faith routers to rope the devices into a new botnet called RondoDox. The vulnerabilities in question include CVE-2024-3721, a medium-severity command injection vulnerability affecting TBK DVR-4104 and DVR-4216 DVRs, and CVE-2024-12856, an operating
Vibe-Coded Malicious VS Code Extension Found with Built-In Ransomware Capabilities
Bys sCybersecurity researchers have flagged a malicious Visual Studio Code (VS Code) extension with basic ransomware capabilities that appears to be created with the help of artificial intelligence – in other words, vibe-coded. Secure Annex researcher John Tuckner, who flagged the extension “susvsex,” said it does not attempt to hide its malicious functionality. The extension was…