Login
The Cybersecurity Poverty Line: Why it exists and why Sophos exists to erase it
Erase is an ambitious word. We chose it because the agentic era of AI creates a genuine opportunity to change the equation.
Reading view
You do surprise me.exe: An unexpected executable in Hola Browser
Following a certification test, Sophos X-Ops found an unexpected guest had hitched a ride
Pointing a Cursor at evading detection
AI accelerated tool development and testing, but humans drove the workflow
Canvas attack aftermath: What risks come next?
The compromise of student data turned a cyber mom into a cyber mama bear
Sophos named a Leader in the 2026 Gartner® Magic Quadrant™ for Endpoint Protection for the 17th consecutive report
Strong endpoint protection remains critical. But in today’s AI-driven threat environment, it's most powerful when it's part of a broader, coordinated defense.
GitHub internal repositories breached.
A malicious VS Code extension led to cloned private repositories, reportedly offered for sale on a criminal forum
WantToCry ransomware remotely encrypts files
Brute-force attempts against SMB services can be early signs of an attack
Why AMOS matters: The macOS malware stealing data at scale
Sophos X-Ops looks at the Atomic macOS Stealer and its capabilities
May’s Patch Tuesday hauls out 132 CVEs
With advisories, this month’s count approaches 300 – though many are already in place
Sophos Endpoint in action: Blocking a novel supply chain attack
How the unique anti-exploitation capabilities included with Sophos Endpoint blocked a supply chain attack.
Operating inside the lethal trifecta: Blast radius reduction in AI agent deployments
Seven things security teams can start doing today to reduce risk
Categories: Threat Research
Tags: AI, CISO
QEMU abused to evade detection and enable ransomware delivery
The use of hidden virtual machines (VMs) enables long-term access, credential harvesting, data exfiltration, and PayoutsKing ransomware deployment
Categories: Threat Research
Tags: virtual machine, QEMU, PayoutsKing, GOLD ENCOUNTER, CitrixBleed2
The vulnerability flood is here. Here’s what it means – and how to prepare
We can't control the pace of AI-driven vulnerability discovery, but we can control how fast we respond.
Categories: Sophos Insights
Tags: LLM, AI, Exploit, vulnerability, Active Adversary, Pacific Rim
We let OpenClaw loose on an internal network. Here’s what it found
Following our article on the challenges posed by agentic AI, we gave OpenClaw access to one of our legacy networks
Categories: Threat Research
Tags: OpenClaw, LLM, AI, penetration testing, Red Team, CISO, Sophos X-Ops
Is compliance complexity outpacing IT capacity?
No matter the country, industry, or company size, IT and cybersecurity teams report a heavy regulatory load and worry about staying aligned with requirements
Categories: Products & Services
Tags: CISO, Compliance
Sophos named a 2026 Gartner® Peer Insights™ Customers' Choice for Managed Detection and Response
Third consecutive time being named a Customers’ Choice for MDR
Categories: Products & Services
Tags: Gartner, Gartner Peer Insights, MDR, Sophos MDR, Third-Party Reviews
The Cybersecurity Trust Reality in 2026
New Sophos survey reveals only 5% of IT leaders say they fully trust their cybersecurity vendors
Categories: Products & Services, Sophos Insights
Tags: Trust, Privacy, Trust Center
The High Cost of Low Trust: Our Commitment to Radical Transparency
Only 5% of organizations fully trust their cybersecurity providers. Let’s do better.
Categories: Products & Services, Sophos Insights
Tags: Trust, Trust Center, Privacy
Incident responders, s'il vous plait: Invites lead to odd malware events
A phishing campaign targeting multiple organizations led to RMM installations – but not much else (yet). A threat actor experimenting, or an access-as-a-service attack underway?
Categories: Threat Research
Tags: STAC6405, infostealer, RMM, Phishing
NICKEL ALLEY strategy: Fake it ‘til you make it
Victimizing software developers via fake companies, jobs, and code repositories to steal cryptocurrency
Categories: Threat Research
Tags: NICKEL ALLEY, Contagious Interview, North Korea, clickfix
