Sophos Blog

RSS

Threat Research

Luciferus

underground

Devil’s advocate? Uncensored Luciferus AI service advertised underground

Uncensored refers to a lack of typical guardrails or ethical restrictions, lowering the technical barrier of entry into cybercrime

The Frontlines

DFIR

MITRE ATT&CK

Threat hunting tools

Blue Team

ATT&CK grew a 15th tactic: A practical DFIR field guide to the Stealth / Defense Impairment split

Artifacts and tooling for the new Enterprise MITRE ATT&CK matrix tactics, distilled from the field.

Threat Research

Cyclops Blink

Cisco

Linux

“Eye” spy: Cyclops Blink returns with extended capabilities

Upgraded modular malware observed in attacks on Cisco Firewall Management Center (FMC) devices

Threat Research

rootkit

php

webshell

Dissecting a PHP web server rootkit

Sophos X-Ops takes a deep dive into an insidious piece of malware

November 26, 2024

A milestone for Sophos NDR: 1,000 customers and counting

Products & Services

Featured

network detection and response

Security Operations

Sophos NDR

November 26, 2024

Phorpiex Continues to Deliver Sextortion Spam

Blog

Research

November 21, 2024

Sophos XDR: New generative AI functionality and case investigation enhancements

Products & Services

Endpoint

Extended Detection and Response

Featured

Generative AI

Intercept X

Sophos Endpoint

XDR

The,Muddy,Water,Of,The,Jordan,River,At,The,Border

November 20, 2024

Sophos MDR blocks and tracks activity from probable Iranian state actor “MuddyWater”

Security Operations

Threat Research

Atera

Featured

legitimate service abuse

MDR

MuddyWater

Phishing

RMM

Sophos X-Ops

STAC 1171

TA450

November 19, 2024

Musings of a Dark Web Newbie

Blog

November 13, 2024

November Patch Tuesday loads up everyone’s plate

Threat Research

CVE-2024-43451

CVE-2024-43623

CVE-2024-43630

CVE-2024-49033

CVE-2024-49039

Featured

Microsoft Defender

Microsoft Windows

Patch Tuesday

November 8, 2024

VEEAM exploit seen used again with a new ransomware: “Frag”

Security Operations

Threat Research

crypto-ransomware

junk gun

MDR

Veeam

VPNs

shutterstock_asset-generation-9e8a3dcf-7a9d-4795-a22c-6077ad8cd3d4-2_edited

November 6, 2024

Bengal cat lovers in Australia get psspsspss’d in Google-driven Gootloader campaign

Security Operations

Threat Research

Gootloader

Javascript

loader

MDR

search engine poisoning

SEO Poisoning

Sophos X-Ops

A tsunami warning sign along a coastal highway near the Oregon coast.

October 31, 2024

Pacific Rim: What’s it to you?

Security Operations

Pacific Rim

Pacific Rim thought leadership

Sophos X-Ops