Login
March Patch Tuesday visits 15 product families
Eight Critical-severity bugs – none in Windows – appear in 84-CVE haul
Categories: Threat Research
Tags: Patch Tuesday, x-ops, Microsoft, Windows, detection
Reading view
Initial access techniques used by Iran-based threat actors
Analysis of attacks originating from Iran-linked threat groups reveals a preference for certain techniques
Categories: Threat Research
Tags: Iran, initial access
Evil evolution: ClickFix and macOS infostealers
Across three recent campaigns, Sophos X-Ops notes shifts in both lures and malware capabilities, as threat actors leveraging ClickFix techniques increasingly target macOS users with infostealers
Categories: Threat Research
Tags: MacOS, infostealer, clickfix, MacSync, Social engineering
Hacktivist campaigns increase as United States, Iran, and Israel conflict intensifies
Rising tensions have sparked an increase in regional hacktivist activity, but impact has been minimal
Categories: Threat Research
Tags: hacktivism, Iran, israel, Operation Epic Fury
Cyber Advisory: Increased Cyber Risk Amid U.S.–Israel–Iran Escalation
Insights and recommended defensive measures from Sophos X-Ops Counter Threat Unit
Categories: Security Operations
Tags: Sophos CTU, Iran, Operation Epic Fury
Cisco SD-WAN vulnerabilities (CVE-2026-20127, CVE-2022-20775) in active exploitation
Categories: Threat Research
Tags: advisory, vulnerability, SD-WAN
Sophos Workspace Protection is Now Available
We’re excited to announce the highly anticipated release of Sophos Workspace Protection has arrived.
Categories: Products & Services
Tags: Workspace
The Active Adversary Report: Safety in numbers
What a long, strange trip it’s been
Categories: Security Operations
Tags: Active Adversary
Stopping real-world attacks: Lessons for business leaders from the 2026 cyber frontline
Practical steps to reduce business cyber risk based on analysis of 661 incidents remediated by Sophos X-Ops as detailed in the Sophos Active Adversary Report 2026
Categories: Products & Services
Tags: MDR., Identity Security, ITDR, Secure by Design, XDR
Nowhere, man: The 2026 Active Adversary Report
AI headline hype didn’t deliver a sea change for practical defense — but one below-the-radar development should
Categories: Security Operations, Threat Research
Tags: Active Adversary, Active Adversary Report
February’s Patch Tuesday assumes battle stations
Just 58 CVEs to spar with in February, but plenty are already under attack
Categories: Threat Research, X-ops
Tags: Patch Tuesday, Featured, Microsoft, Windows
The OpenClaw experiment is a warning shot for enterprise AI security
Agentic AI promises a lot – but it also introduces more risk. Sophos’ CISO explores the challenges and how to address them
Categories: Threat Research
Tags: AI, LLM, OpenClaw, CISO, risk, Sophos X-Ops
Sophos Firewall Configuration Viewer
Categories: Products & Services
Tags: Firewall
Sophos AI Agents: Accelerating MDR and Powering the Agentic SOC
Agentic intelligence in Sophos MDR: A practical, outcome-focused approach
Categories: Products & Services
Tags: MDR, Sophos MDR, AI
From Security Operations to Security Leadership: Sophos CISO Advantage
Categories: Products & Services, Security Operations
Threat Intelligence Executive Report – Volume 2025, Number 6
This issue of the Counter Threat Unit’s high-level bimonthly report discusses noteworthy updates in the threat landscape during September and October
Categories: Threat Research
Tags: EDR killer, infostealer, Ransomware
Sophos Workspace Protection Enables Safe GenAI Adoption
Easily enable adoption of sanctioned generative AI solutions
Categories: Products & Services
Tags: Workspace
Malicious use of virtual machine infrastructure
Bulletproof hosting providers are abusing the legitimate ISPsystem infrastructure to supply virtual machines to cybercriminals
Categories: Threat Research
Tags: virtual machine, cybercrime, Ransomware, ISPs
Sophos Protected Browser Early Access and FAQ
Categories: Products & Services
Tags: Workspace
High Five: Sophos Named a 2026 Gartner® Peer Insights™ Customers' Choice for Endpoint Protection Platforms
This marks the fifth consecutive time with a Customers' Choice recognition for Sophos in the Endpoint Protection Platforms category.
Categories: Products
Tags: Gartner, Sophos Endpoint, XDR, Third-Party Reviews
