RSS
Security Operations
Active Adversary
The Active Adversary Report: Safety in numbers
What a long, strange trip it’s been
Products & Services
From Security Operations to Security Leadership: Sophos CISO Advantage
Sophos CTU
Iran
Operation Epic Fury
Cyber Advisory: Increased Cyber Risk Amid U.S.–Israel–Iran Escalation
Threat Research
Active Adversary Report
Nowhere, man: The 2026 Active Adversary Report
Featured
Microsoft
Microsoft 365 Copilot
Microsoft Copilot
Microsoft Defender
Microsoft Intelligent Security Association (MISA)
Microsoft Security Copilot
SMB
Sophos Intelix
Sophos MDR
Sophos X-Ops
Cybersecurity for Microsoft Environments
CISO
North Korea
playbook
toolkit
Detecting fraudulent North Korean hires: A CISO playbook
Phishing
simulations
Training
Phake phishing: Phundamental or pholly?
Compromised Credentials
detection
dwell time
impact
incident response
LOLBIN
MFA
Monitoring
RDP
Remote Ransomware
root cause
It takes two: The 2025 Sophos Active Adversary Report
IR
LoLBINs
MDR.
The Bite from Inside: The Sophos Active Adversary Report