SophosAI at Black Hat USA ’25: Anomaly detection betrayed us, so we gave it a new job
Sophos’ Ben Gelman and Sean Bergeron will present their research on enhancing command line classification with benign anomalous data at Las Vegas
Lorenzo Franceschi-Bicchierai reports: More than a decade ago, researchers at antivirus company Kaspersky identified suspicious internet traffic of what they thought was a known government-backed group, based on similar targeting and its phishing techniques. Soon, the researchers realized they had found a much more advanced hacking operation that was targeting the Cuban government, among others….
Multiple HTTP/2 implementations have been found susceptible to a new attack technique called MadeYouReset that could be explored to conduct powerful denial-of-service (DoS) attacks. “MadeYouReset bypasses the typical server-imposed limit of 100 concurrent HTTP/2 requests per TCP connection from a client. This limit is intended to mitigate DoS attacks by restricting the number of simultaneous
Attack surfaces are growing faster than security teams can keep up – to stay ahead, you need to know what’s exposed and where attackers are most likely to strike. With cloud adoption dramatically increasing the ease of exposing new systems and services to the internet, prioritizing threats and managing your attack surface from an attacker’s…
Associated Press reports: Danish authorities say in a new assessment published this week that Russia carried out cyberattacks against infrastructure and websites in Denmark in 2024 and 2025, describing new cases which had not previously been reported. Denmark’s Defense Intelligence Service said in a statement Thursday that Moscow was responsible for “destructive and disruptive” cyberattacks……
Leader of Online Swatting Ring Admits to Targeting over 75 Public Officials, Four Religious Institutions, and Multiple Journalists in Nationwide Bomb Threat Spree June 2, 2025. Thomasz Szabo, also known as Plank, Jonah, and Cypher, 26, of Romania, pleaded guilty today to being the leader of a years-long conspiracy that targeted victims across the United…
Google on Tuesday rolled out fixes for six security issues in its Chrome web browser, including one that it said has been exploited in the wild. The high-severity vulnerability in question is CVE-2025-6558 (CVSS score: 8.8), which has been described as an incorrect validation of untrusted input in the browser’s ANGLE and GPU components. “Insufficient…