Sophos Blog

RSS

source:https://news.sophos.com/wp-content/uploads/2025/01/shutterstock_1164378040.jpg

Products & Services

AI Cybersecurity

Security Program Strategy

The answer to AI uncertainty is adaptability, not paralysis

AI uncertainty is not a strategic reason to wait; it is a strategic imperative to build adaptable organizations that can innovate confidently, govern risk proportionately, and respond effectively as technology and threats evolve.

Threat Research

Luciferus

underground

Devil’s advocate? Uncensored Luciferus AI service advertised underground

Uncensored refers to a lack of typical guardrails or ethical restrictions, lowering the technical barrier of entry into cybercrime

The Frontlines

DFIR

MITRE ATT&CK

Threat hunting tools

Blue Team

ATT&CK grew a 15th tactic: A practical DFIR field guide to the Stealth / Defense Impairment split

Artifacts and tooling for the new Enterprise MITRE ATT&CK matrix tactics, distilled from the field.

Threat Research

Cyclops Blink

Cisco

Linux

“Eye” spy: Cyclops Blink returns with extended capabilities

Upgraded modular malware observed in attacks on Cisco Firewall Management Center (FMC) devices

Email,Alert,And,Message,Sending,/,Receiving,Concept,:,Envelope

January 21, 2025

Sophos MDR tracks two ransomware campaigns using “email bombing,” Microsoft Teams “vishing”

Security Operations

Threat Research

Black Basta

Featured

Fin7

Java malware

legitimate service abuse

Microsoft Office 365

python malware

Quick Assist

remote machine management

Sophos X-Ops

STAC5143

stac5777

Teams

Magic,Wand,And,Top,Hat,Isolated,On,White.,Magician,Trick

January 16, 2025

Gootloader inside out

Threat Research

Featured

Gootkit

Gootloader

HelloDolly

JScript

malicious SEO

malware

obfuscation

php

PHP shell

SEO

WordPress

YARA

January 14, 2025

159-CVE January Patch Tuesday smashes single-month record

Threat Research

CVE-2025-21298

Featured

Microsoft

Microsoft Windows

OLE

Patch Tuesday

RTF

Real,Time,Analytics,Concept.,The,Process,Of,Collecting,Data,As

December 30, 2024

Prioritizing patching: A deep dive into frameworks and tools – Part 2: Alternative frameworks

Threat Research

CVSS

Patch Tuesday

patching

Sophos X-Ops

Threat Research

Business,Operations,And,Management,Concept.,Thinking,Of,A,Strategy,And

December 27, 2024

Prioritizing patching: A deep dive into frameworks and tools – Part 1: CVSS

Threat Research

CVSS

Patch Tuesday

patching

Sophos X-Ops

A,Wooden,Acoustic,Guitar,At,Night.,With,Spotlight,For,Your

December 19, 2024

Phishing platform Rockstar 2FA trips, and “FlowerStorm” picks up the pieces

Security Operations

Threat Research

CloudFlare

Featured

FlowerStorm

legitimate service abuse

Phishing

phishing-as-a-service

Rockstar

Rockstar2FA

Sophos MDR

Sophos X-Ops

December 12, 2024

the Bite from Inside: The Sophos Active Adversary Report

Security Operations

Threat Research

Active Adversary

Active Adversary Report

Featured

incident response

LoLBINs

MDR

RDP

White Grey Virtual reality Headset isolated on white background

December 11, 2024

Keeping it real: Sophos and the 2024 MITRE ATT&CK Evaluations: Enterprise

Threat Research

Featured

MITRE

MITRE ATT&CK

Ransomware

Sophos X-Ops

December 11, 2024

December Patch Tuesday arrives bearing 71 gifts

Threat Research

Featured

Microsoft

Patch Tuesday

RDP

Windows