Sophos Blog

RSS

Threat Research

Luciferus

underground

Devil’s advocate? Uncensored Luciferus AI service advertised underground

Uncensored refers to a lack of typical guardrails or ethical restrictions, lowering the technical barrier of entry into cybercrime

The Frontlines

DFIR

MITRE ATT&CK

Threat hunting tools

Blue Team

ATT&CK grew a 15th tactic: A practical DFIR field guide to the Stealth / Defense Impairment split

Artifacts and tooling for the new Enterprise MITRE ATT&CK matrix tactics, distilled from the field.

Threat Research

Cyclops Blink

Cisco

Linux

“Eye” spy: Cyclops Blink returns with extended capabilities

Upgraded modular malware observed in attacks on Cisco Firewall Management Center (FMC) devices

Threat Research

rootkit

php

webshell

Dissecting a PHP web server rootkit

Sophos X-Ops takes a deep dive into an insidious piece of malware

September 15, 2026

Messageboards are all they need

AI Research

Threat Research

AI Cybersecurity

Threat Research

September 15, 2026

Cisco Secure Email Gateway vulnerability (CVE-2026-76461) in active exploitation

Threat Research

advisory

vulnerability

Cisco

September 11, 2026

“Eye” spy: Cyclops Blink returns with extended capabilities

Threat Research

Cyclops Blink

Cisco

Linux

An illustration, full of sound and fury, signifying nothing

August 17, 2026

A heap of overflow in August’s Patch Tuesday haul

Threat Research

Patch Tuesday

Juli 21, 2026

July Patch Tuesday only feels endless

Threat Research

x-ops

Patch Tuesday

Juni 11, 2026

June Patch Tuesday smashes past 500-CVE mark

Threat Research

x-ops

Patch Tuesday

Mai 19, 2026

WantToCry ransomware remotely encrypts files

Threat Research

Ransomware

WantToCry

SMB

Illustration with many sea lions barking

Mai 13, 2026

May’s Patch Tuesday hauls out 132 CVEs

Threat Research

X-ops

Patch Tuesday

Mai 12, 2026

Operating inside the lethal trifecta: Blast radius reduction in AI agent deployments

Threat Research

CISO

risk