What happens when a cybersecurity company gets phished?
A Sophos employee was phished, but we countered the threat with an end-to-end defense process
Similar Posts
Nigerian Communication Commission Orders Telecoms to Report Cyber Threats Within 4 Hours
Bys sJessica Adiele reports: Nigeria’s telecommunications regulator, the Nigerian Communications Commission (NCC), has directed telecom operators to notify the commission within four hours of detecting any cyberattack. The directive is contained in the Cyber Resilience Framework for Nigeria’s Communications Sector (CRF-NCS) released in February 2026. The rule will take effect in February 2027 and forms part of the regulator’s broader efforts to……
Hackers Exploit Pandoc CVE-2025-51591 to Target AWS IMDS and Steal EC2 IAM Credentials
Bys sCloud security company Wiz has revealed that it uncovered in-the-wild exploitation of a security flaw in a Linux utility called Pandoc as part of attacks designed to infiltrate Amazon Web Services (AWS) Instance Metadata Service (IMDS). The vulnerability in question is CVE-2025-51591 (CVSS score: 6.5), which refers to a case of Server-Side Request Forgery (SSRF)…
Grupo NGO gains 24/7 security visibility without expanding its IT team
Bys sTags: Case Study, MDR, Retail
Urgent: China-Linked Hackers Exploit New VMware Zero-Day Since October 2024
Bys sA newly patched security flaw impacting Broadcom VMware Tools and VMware Aria Operations has been exploited in the wild as a zero-day since mid-October 2024 by a threat actor called UNC5174, according to NVISO Labs. The vulnerability in question is CVE-2025-41244 (CVSS score: 7.8), a local privilege escalation bug affecting the following versions – VMware…
INC ransomware opsec fail allowed data recovery for 12 US orgs
Bys sBill Toulas reports: An operational security failure allowed researchers to recover data that the INC ransomware gang stole from a dozen U.S. organizations. A deep forensic examination of the artifacts left behind uncovered tooling that had not been used in the investigated attack, but exposed attacker infrastructure that stored data exfiltrated from multiple victims. The……
A hacker, known as Martha Root, takes down a white supremacist dating site live
Bys sA German hacker known as “Martha Root” dressed as a pink Power Ranger deleted a white supremacist dating website live onstage. This happened during the recent CCC conference. Martha had infiltrated the site, ran her own AI chatbot to extract as much information from users as possible, and downloaded every profile. She also uncovered the……