Game of clones: Sophos and the MITRE ATT&CK Enterprise 2025 Evaluations
Winter is coming – so it must be time for Sophos X-Ops’ report on this year’s MITRE ATT&CK Enterprise Evaluations
Similar Posts
HHS Office for Civil Rights Settles 8th Ransomware Investigation with Elgon Information Systems
Bys sToday, the U.S. Department of Health and Human Services (HHS), Office for Civil Rights (OCR) announced an $80,000 settlement with Elgon Information Systems (Elgon), a Massachusetts company that provides electronic medical record and billing support services to covered entities, under the Health Insurance Portability and Accountability Act of 1996 (HIPAA) Security Rule. OCR enforces the HIPAA Privacy,…
OpenAI Bans Accounts Misusing ChatGPT for Surveillance and Influence Campaigns
Bys sOpenAI on Friday revealed that it banned a set of accounts that used its ChatGPT tool to develop a suspected artificial intelligence (AI)-powered surveillance tool. The social media listening tool is said to likely originate from China and is powered by one of Meta’s Llama models, with the accounts in question using the AI company’s…
Critical Erlang/OTP SSH Vulnerability (CVSS 10.0) Allows Unauthenticated Code Execution
Bys sA critical security vulnerability has been disclosed in the Erlang/Open Telecom Platform (OTP) SSH implementation that could permit an attacker to execute arbitrary code sans any authentication under certain conditions. The vulnerability, tracked as CVE-2025-32433, has been given the maximum CVSS score of 10.0. “The vulnerability allows an attacker with network access to an Erlang/OTP…
Private Industry Notification: Silent Ransom Group Targeting Law Firms
Bys sThe following information is being provided by the FBI, with no guarantees or warranties, for potential use at the sole discretion of recipients to protect against cyber threats. This data is provided to help cyber security professionals and system administrators guard against the persistent malicious actions of cyber actors. This PIN was coordinated with DHS/CISA. …
Sophos excels in the 2024 MITRE ATT&CK® Evaluations: Enterprise
Bys sResults from the latest ATT&CK Evaluations for endpoint detection and response solutions.
Shift left, stay ahead: The case for early threat prevention
Bys s“‘Shift left’ is a very trendy concept over the past few years [in application security]. The weird thing is, prevention is seen as something that’s kind of old school in endpoint security or security operations.”