Sophos Blog

RSS

Threat Research

Luciferus

underground

Devil’s advocate? Uncensored Luciferus AI service advertised underground

Uncensored refers to a lack of typical guardrails or ethical restrictions, lowering the technical barrier of entry into cybercrime

The Frontlines

DFIR

MITRE ATT&CK

Threat hunting tools

Blue Team

ATT&CK grew a 15th tactic: A practical DFIR field guide to the Stealth / Defense Impairment split

Artifacts and tooling for the new Enterprise MITRE ATT&CK matrix tactics, distilled from the field.

Threat Research

Cyclops Blink

Cisco

Linux

“Eye” spy: Cyclops Blink returns with extended capabilities

Upgraded modular malware observed in attacks on Cisco Firewall Management Center (FMC) devices

Threat Research

rootkit

php

webshell

Dissecting a PHP web server rootkit

Sophos X-Ops takes a deep dive into an insidious piece of malware

August 10, 2026

Sophos Working with OpenAI on security from AI, with AI, and for AI

Products & Services

ChatGPT

artificial intelligence

August 5, 2026

Sophos DNS Protection update for GenAI

Products & Services

network

Workspace Protection

August 4, 2026

N-able N-central exploitation results in RMM tool deployment

Threat Research

RMM

N-able

vulnerability

Hero image for 2608-volatility-interlock

August 4, 2026

Interlock ransomware gang creates volatile situation

Threat Research

July 31, 2026

When AI doesn’t know the target is real

Security Operations

Hugging Face

Anthropic

OpenAI

July 31, 2026

Three-headed dogs and long tails: Sophos at BSides LV

AI Research

BSidesLV

An illustration showing multiple hands on a printed map

July 29, 2026

Secure by Design in practice: a year of progress on Sophos Firewall

Sophos SecOps

Secure by Design

Firewall

July 28, 2026

Chaos in Teams vishing

Threat Research

Microsoft Teams

vishing

Ransomware

Chaos

July 27, 2026

Introducing Sophos AI Defense

Products & Services

Sophos AI Defense