New Ransomware Attacking VMware ESXi Hosts Via SSH Tunneling
New ransomware strains are quietly infiltrating VMware ESXi hosts by setting up SSH tunnels and concealing malicious traffic within legitimate activity.
Read More
Industrial-strength April Patch Tuesday covers 135 CVEs
One actively exploited issue patched; five Critical-severity Office vulns exploitable via Preview Pane
Senators Push for Answers on ICE’s Surveillance Shopping Spree
Senators Mark Warner and Tim Kaine formally asked the inspector general of the Department of Homeland Security (DHS) to investigate and provide details on many of the surveillance technologies being used by Customs and Border Protection (CBP) and Immigration and Customs Enforcement (ICE), according to a copy of the letter shared with 404 Media. The…
‘Honk If You Hate Elon:’ Two Days of Protest at the Tesla Diner
After spending last week with Tesla fans who wanted the world to know that their Tesla purchases had nothing to do with politics, I spent this weekend at the Tesla diner protests, talking to people who disagreed with that stance. On both Saturday and Sunday, organisers from Resist the Coup and Tesla Takedown Santa Monica…
Dozens of CDC Health Databases Have Gone Dark Under Trump: ‘The Consequences Will Be Dire’
🌘 Subscribe to 404 Media to get The Abstract, our newsletter about the most exciting and mind-boggling science news and studies of the week. Researchers are raising alarms over “unexplained pauses” that have interrupted dozens of U.S. federal health surveillance databases covering vaccinations and overdose deaths during the second Trump administration. The breakdown is creating…
DeepSeek Blames Disruption on Cyberattack as Vulnerabilities Emerge
China’s DeepSeek blamed sign-up disruptions on a cyberattack as researchers started finding vulnerabilities in the R1 AI model.
Stopping real-world attacks: Lessons for business leaders from the 2026 cyber frontline
Practical steps to reduce business cyber risk based on analysis of 661 incidents remediated by Sophos X-Ops as detailed in the Sophos Active Adversary Report 2026 Categories: Products & Services Tags: MDR., Identity Security, ITDR, Secure by Design, XDR
Disney Invests $1 Billion in the AI Slopification of Its Brand
The first thing I saw this morning when I opened X was an AI-generated trailer for Avengers: Doomsday. Robert Downey Jr’s Doctor Doom stood in a shapeless void alongside Captain America and Reed Richards. It was obvious slop but it was also close in tone and feel of the last five years of Disney’s Marvel…
Prioritizing patching: A deep dive into frameworks and tools – Part 1: CVSS
In the first of a two-part series exploring tools and frameworks which can help organizations with remediation prioritization, Sophos X-Ops takes a look at the Common Vulnerability Scoring System (CVSS)