Sophos Blog

RSS

source:https://news.sophos.com/wp-content/uploads/2025/01/shutterstock_1164378040.jpg

Products & Services

AI Cybersecurity

Security Program Strategy

The answer to AI uncertainty is adaptability, not paralysis

AI uncertainty is not a strategic reason to wait; it is a strategic imperative to build adaptable organizations that can innovate confidently, govern risk proportionately, and respond effectively as technology and threats evolve.

Threat Research

Luciferus

underground

Devil’s advocate? Uncensored Luciferus AI service advertised underground

Uncensored refers to a lack of typical guardrails or ethical restrictions, lowering the technical barrier of entry into cybercrime

The Frontlines

DFIR

MITRE ATT&CK

Threat hunting tools

Blue Team

ATT&CK grew a 15th tactic: A practical DFIR field guide to the Stealth / Defense Impairment split

Artifacts and tooling for the new Enterprise MITRE ATT&CK matrix tactics, distilled from the field.

Threat Research

Cyclops Blink

Cisco

Linux

“Eye” spy: Cyclops Blink returns with extended capabilities

Upgraded modular malware observed in attacks on Cisco Firewall Management Center (FMC) devices

November 18, 2021

New ransomware actor uses password-protected archives to bypass encryption protection

Threat Research

featured

November 9, 2021

Winners and losers in the ransomware turf wars

Threat Research

Conti

featured

Maze

Ransomware

ransomware as a service

REvil

Sophos Threat Report

sophos-2022-threat-report-cover-press-image

November 9, 2021

Sophos releases the 2022 Threat Report

Threat Research

featured

Ransomware

Security Operations

Oktober 13, 2021

CryptoRom fake iOS cryptocurrency apps hit US, European victims for at least $1.4 million

Threat Research

Apple

Apple Developer Enterprise Program

Cryptorom

featured

iOS

ios fake app

iPhone malware

ShaZhuPan

super signature

400px-Missile_silo_of_a_SS-24_missile_(2)

Oktober 4, 2021

Atom Silo ransomware actors use Confluence exploit, DLL side-load for stealthy attack

SophosLabs Uncut

Threat Research

Atom Silo

featured

LockFile

Ransomware

September 23, 2021

Phishing and malware actors abuse Google Forms for credentials, data exfiltration

Threat Research

exfiltration

featured

Google Forms

legitimate service abuse

Phishing

TLS

September 14, 2021

Big Office bug squashed for September 2021’s Patch Tuesday

Threat Research

14.8

Apple

CVE-2021-38645

CVE-2021-38647

CVE-2021-38648

CVE-2021-38649

CVE-2021-40444

Exploit

featured

Forcedentry

iOS

Microsoft

Office

OMI

OMIGOD

Patch Tuesday

Troj/DocDl

September 3, 2021

Conti affiliates use ProxyShell Exchange exploit in ransomware attacks

Security Operations

Threat Research

Conti

featured

ProxyShell

September 1, 2021

Fake pirated software sites serve up malware droppers as a service