Sophos Blog

RSS

source:https://news.sophos.com/wp-content/uploads/2025/01/shutterstock_1164378040.jpg

Products & Services

AI Cybersecurity

Security Program Strategy

The answer to AI uncertainty is adaptability, not paralysis

AI uncertainty is not a strategic reason to wait; it is a strategic imperative to build adaptable organizations that can innovate confidently, govern risk proportionately, and respond effectively as technology and threats evolve.

Threat Research

Luciferus

underground

Devil’s advocate? Uncensored Luciferus AI service advertised underground

Uncensored refers to a lack of typical guardrails or ethical restrictions, lowering the technical barrier of entry into cybercrime

The Frontlines

DFIR

MITRE ATT&CK

Threat hunting tools

Blue Team

ATT&CK grew a 15th tactic: A practical DFIR field guide to the Stealth / Defense Impairment split

Artifacts and tooling for the new Enterprise MITRE ATT&CK matrix tactics, distilled from the field.

Threat Research

Cyclops Blink

Cisco

Linux

“Eye” spy: Cyclops Blink returns with extended capabilities

Upgraded modular malware observed in attacks on Cisco Firewall Management Center (FMC) devices

An EDR killer Sophos X-Ops has tracked for three years continues to bedevil organizations targeted by ransomware gangs.

August 27, 2024

Attack tool update impairs Windows computers

Threat Research

BlackCat

BURNTCIGAR

Cuba

EDR

EDR killer

kernel driver

leaked certificate

Lockbit

Medusa

PoorTry

RansomHub

Ransomware

signature

signed driver

StoneStop

August 22, 2024

Qilin ransomware caught stealing credentials stored in Google Chrome

Security Operations

Threat Research

Credentials

Featured

incident response

Privacy

qilin

Ransomware

A photograph of architectural diagrams on a table, with a yellow tape measure

August 15, 2024

Content updates and product architecture: Sophos Endpoint

Threat Research

content updates

drivers

Featured

Intercept X

Sophos X-Ops

August 15, 2024

August Patch Tuesday goes big

Threat Research

CVE-2024-21302

CVE-2024-38063

CVE-2024-38202

CVE-2024-38213

Microsoft

Patch Tuesday

Windows 11 24H2

Un hombre con uniforme de policía bloquea la entrada a un edificio acristalado con los brazos en alto. Los atacantes de ransomware introducen un nuevo asesino EDR en su arsenal. Sophos descubre el uso de EDRKillShifter por los atacantes del ransomware RansomHub. Por Andreas Klopsch. Fuente de la imagen: Shutterstock

August 14, 2024

Ransomware attackers introduce new EDR killer to their arsenal

Threat Research

BYOVD

EDR

EDR killer

EDRKillShifter

Featured

Ransomware

August 13, 2024

Don’t get Mad, get wise

Security Operations

Threat Research

AnyDesk

Featured

incident response

mad liberator

malware

Social engineering

August 12, 2024

The cybersecurity kids aren’t all right

Threat Research

asia

burnout

fatigue

Featured

Sophos X-Ops

Survey

August 7, 2024

Best security practices for ESXi environments

Security Operations

Threat Research

EDR

ESXi

Featured

MDR

remediations

Sophos X-Ops

Virtualization

VMware

August 6, 2024

Turning the screws: The pressure tactics of ransomware gangs

Threat Research

8base

BlackCat

blacksuit

cactus

Cybercrime Forums

Featured

Karakurt

malas

marketplaces

media

monti

play

pressure

qiulong

Ransomware

Snatch

Sophos X-Ops

space bears

werewolves