Sophos Firewall v22 is now available
Secure by Design.
Similar Posts
Vane Viper Generates 1 Trillion DNS Queries to Power Global Malware and Ad Fraud Network
Bys sThe threat actor known as Vane Viper has been outed as a purveyor of malicious ad technology (adtech), while relying on a tangled web of shell companies and opaque ownership structures to deliberately evade responsibility. “Vane Viper has provided core infrastructure in widespread malvertising, ad fraud, and cyberthreat proliferation for at least a decade,” Infoblox…
Grok Build Uploads Entire Git Repositories to xAI Storage, Not Just Files It Reads
Bys sxAI’s Grok Build coding CLI was uploading entire Git repositories, full commit history and all, to a Google Cloud Storage bucket run by xAI, not just the files a coding task needed. A researcher publishing as cereblab, testing version 0.2.93, captured one of those uploads, cloned the git bundle out of the intercepted request, and…
APT28 Uses BEARDSHELL and COVENANT Malware to Spy on Ukrainian Military
Bys sThe Russian state-sponsored hacking group tracked as APT28 has been observed using a pair of implants dubbed BEARDSHELL and COVENANT to facilitate long‑term surveillance of Ukrainian military personnel. The two malware families have been put to use since April 2024, ESET said in a new report shared with The Hacker News. APT28, also tracked as…
Saskatoon man facing extradition for cyberattacks on American institutions
Bys sShane Fraser reports: A Saskatoon man who allegedly conspired to install malware, steal login credentials, and mine cryptocurrency from American educational institutions is facing extradition to the United States. The cyberattack accusations were levelled against Ryan James Roach in Saskatoon Court of King’s Bench, where he was ordered to be taken into custody to await extradition following……
PHP Issues Second Windows Security Update in Five Days to Fix Brotli Code Execution Flaw
Bys sPHP has rebuilt its official Windows packages for PHP 8.2 through 8.5 to fix CVE-2026-111497, a flaw in the Brotli compression library that the packages include. The flaw can let an attacker corrupt memory and potentially run code. PHP says the flaw can be reached through the cURL extension when the extension decompresses HTTP responses…
JFL Lost Up to $800,000 Weekly After Cyberattack, CEO Says No Patient or Staff Data Was Compromised
Bys sJuan F. Luis Hospital CEO Darlene A. Baptiste says no personal data was stolen in the April cyberattack that forced the hospital offline for months, causing major billing delays, financial losses, and a massive system rebuild now nearly complete. Ernice Gilbert reports: The April cyberattack that crippled the Juan F. Luis Hospital’s electronic systems cost the facility……