Sophos Blog

RSS

source:https://news.sophos.com/wp-content/uploads/2025/01/shutterstock_1164378040.jpg

Products & Services

AI Cybersecurity

Security Program Strategy

The answer to AI uncertainty is adaptability, not paralysis

AI uncertainty is not a strategic reason to wait; it is a strategic imperative to build adaptable organizations that can innovate confidently, govern risk proportionately, and respond effectively as technology and threats evolve.

Threat Research

Luciferus

underground

Devil’s advocate? Uncensored Luciferus AI service advertised underground

Uncensored refers to a lack of typical guardrails or ethical restrictions, lowering the technical barrier of entry into cybercrime

The Frontlines

DFIR

MITRE ATT&CK

Threat hunting tools

Blue Team

ATT&CK grew a 15th tactic: A practical DFIR field guide to the Stealth / Defense Impairment split

Artifacts and tooling for the new Enterprise MITRE ATT&CK matrix tactics, distilled from the field.

Threat Research

Cyclops Blink

Cisco

Linux

“Eye” spy: Cyclops Blink returns with extended capabilities

Upgraded modular malware observed in attacks on Cisco Firewall Management Center (FMC) devices

A group of four people with hiking equipment walking up a hill or mountain, taken from behind, during sunset on a cloudy day

July 28, 2025

Sophos’ Secure by Design 2025 Progress

Security Operations

CISA

Featured

Secure by Design

Sophos X-Ops

May 9, 2025

Lumma Stealer, coming and going

Security Operations

Threat Research

Featured

Information Stealers

Lumma Stealer

Sophos X-Ops

May 8, 2025

NICKEL TAPESTRY expands fraudulent worker operations

Security Operations

Threat Research

ctu

Democratic People’s Republic of Korea

employment scam

Featured

fraud

nickel tapestry

North Korea

Social engineering

April 17, 2025

Moving CVEs past one-nation control

Security Operations

Threat Research

CVE

Featured

MITRE

Small,White,Cctv,Cameras,On,A,Pole,Against,The,Background

April 16, 2025

Sophos Annual Threat Report appendix: Most frequently encountered malware and abused software

Security Operations

Threat Research

Annual Threat Report

Attack Tools

Dual-use tools

malware trends 2024

April 16, 2025

The Sophos Annual Threat Report: Cybercrime on Main Street 2025

Security Operations

Threat Research

Annual Threat Report

Featured

midsize businesses

small businesses

April 2, 2025

It takes two: The 2025 Sophos Active Adversary Report

Security Operations

Threat Research

Active Adversary

Active Adversary Report

Compromised Credentials

detection

dwell time

Featured

impact

incident response

LOLBIN

MFA

Monitoring

RDP

Remote Ransomware

root cause

April 1, 2025

Qilin affiliates spear-phish MSP ScreenConnect admin, targeting customers downstream

Security Operations

Threat Research

adversary in the middle

Featured

MFA

MFA phishing

qilin

RMM

ScreenConnect

Sophos X-Ops

supply chain compromise

March 28, 2025

Stealing user credentials with evilginx

Security Operations

Threat Research

adversary in the middle

aitm

evilginx

MFA

Sophos X-Ops