The industry turned XDR and SIEM into categories. Sophos turned them into outcomes.
Sophos Next-Gen SIEM, now generally available as part of Sophos Fusion, brings security operations and compliance together through shared context.
Sophos Next-Gen SIEM, now generally available as part of Sophos Fusion, brings security operations and compliance together through shared context.
This article was first published on LinkedIn.
Artifacts and tooling for the new Enterprise MITRE ATT&CK matrix tactics, distilled from the field.
Upgraded modular malware observed in attacks on Cisco Firewall Management Center (FMC) devices
Insights from 226 IT and cybersecurity leaders across the education sector in 17 countries whose organizations were hit by ransomware in the past year.
Sophos joins organizations worldwide in supporting a coordinated and responsible approach to cyber defense.
Sophos is the only vendor recognized as a Leader across all five of these core cybersecurity markets.
A year of MDR casework shows attackers repeatedly exploiting demand for AI tools
421 CVEs, a relatively small set of Edge patches, and two spicy stragglers
Outdated protocols, forgotten configurations, and legacy dependencies continue to create opportunities for attackers in modern environments. This research explores how NetNTLMv1 can still be leveraged today and how improvements in attack tooling are reducing the cost and complexity of exploiting it.
Lures on compromised WordPress sites led to installation of Deno and a Python-based infostealer
Attack TTPs combine fileless execution, wide LOLBin use
Erase is an ambitious word. We chose it because the agentic era of AI creates a genuine opportunity to change the equation.
Following a certification test, Sophos X-Ops found an unexpected guest had hitched a ride
AI accelerated tool development and testing, but humans drove the workflow
The compromise of student data turned a cyber mom into a cyber mama bear
Strong endpoint protection remains critical. But in todayโs AI-driven threat environment, it's most powerful when it's part of a broader, coordinated defense.
A malicious VS Code extension led to cloned private repositories, reportedly offered for sale on a criminal forum
Brute-force attempts against SMB services can be early signs of an attack