Sophos tops G2 Fall 2025 Reports: #1 Overall in MDR and Firewall

This is the press release referred to in a recent post: NEW YORK – New York Attorney General Letitia James today announced that her office has secured $500,000 in penalties from OrthopedicsNY, LLP (OrthopedicsNY) for failing to protect patients’ private information. OrthopedicsNY is an orthopedics medicine and surgery practice that operates clinics and surgery centers across……

Clive Palmer’s United Australia Party has informed its members of a data breach, but admits “it is impracticable to notify individuals”.  David Hollingworth reports: A pair of Australian political parties associated with firebrand mining magnate Clive Palmer have confirmed they were the victims of a ransomware attack last month. According to a data breach notice…

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a second security flaw impacting BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) products to the Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation in the wild. The vulnerability in question is CVE-2024-12686 (CVSS score: 6.6), a medium-severity bug that could

Lawrence Abrams reports: The ShinyHunters extortion gang claims it is behind a wave of ongoing voice phishing attacks targeting single sign-on (SSO) accounts at Okta, Microsoft, and Google, enabling threat actors to breach corporate SaaS platforms and steal company data for extortion. In these attacks, threat actors impersonate IT support and call employees, tricking them……

Whether it’s CRMs, project management tools, payment processors, or lead management tools – your workforce is using SaaS applications by the pound. Organizations often rely on traditional CASB solutions for protecting against malicious access and data exfiltration, but these fall short for protecting against shadow SaaS, data damage, and more. A new report, Understanding SaaS…

Cybersecurity researchers have discovered a major web skimming campaign that has been active since January 2022, targeting several major payment networks like American Express, Diners Club, Discover, JCB Co., Ltd., Mastercard, and UnionPay. “Enterprise organizations that are clients of these payment providers are the most likely to be impacted,” Silent Push said in a report…