Upgraded modular malware observed in attacks on Cisco Firewall Management Center (FMC) devices

Insights from 226 IT and cybersecurity leaders across the education sector in 17 countries whose organizations were hit by ransomware in the past year.

Sophos joins organizations worldwide in supporting a coordinated and responsible approach to cyber defense.

Sophos is the only vendor recognized as a Leader across all five of these core cybersecurity markets.

A year of MDR casework shows attackers repeatedly exploiting demand for AI tools

421 CVEs, a relatively small set of Edge patches, and two spicy stragglers

Outdated protocols, forgotten configurations, and legacy dependencies continue to create opportunities for attackers in modern environments. This research explores how NetNTLMv1 can still be leveraged today and how improvements in attack tooling are reducing the cost and complexity of exploiting it.

Lures on compromised WordPress sites led to installation of Deno and a Python-based infostealer

Attack TTPs combine fileless execution, wide LOLBin use

Erase is an ambitious word. We chose it because the agentic era of AI creates a genuine opportunity to change the equation.

Following a certification test, Sophos X-Ops found an unexpected guest had hitched a ride

AI accelerated tool development and testing, but humans drove the workflow

The compromise of student data turned a cyber mom into a cyber mama bear

Strong endpoint protection remains critical. But in today’s AI-driven threat environment, it's most powerful when it's part of a broader, coordinated defense.

A malicious VS Code extension led to cloned private repositories, reportedly offered for sale on a criminal forum

Brute-force attempts against SMB services can be early signs of an attack

Sophos X-Ops looks at the Atomic macOS Stealer and its capabilities

With advisories, this month’s count approaches 300 – though many are already in place

How the unique anti-exploitation capabilities included with Sophos Endpoint blocked a supply chain attack.

Seven things security teams can start doing today to reduce risk

Categories: Threat Research

Tags: AI, CISO