Sophos Blog

RSS

Threat Research

Luciferus

underground

Devil’s advocate? Uncensored Luciferus AI service advertised underground

Uncensored refers to a lack of typical guardrails or ethical restrictions, lowering the technical barrier of entry into cybercrime

The Frontlines

DFIR

MITRE ATT&CK

Threat hunting tools

Blue Team

ATT&CK grew a 15th tactic: A practical DFIR field guide to the Stealth / Defense Impairment split

Artifacts and tooling for the new Enterprise MITRE ATT&CK matrix tactics, distilled from the field.

Threat Research

Cyclops Blink

Cisco

Linux

“Eye” spy: Cyclops Blink returns with extended capabilities

Upgraded modular malware observed in attacks on Cisco Firewall Management Center (FMC) devices

Threat Research

rootkit

php

webshell

Dissecting a PHP web server rootkit

Sophos X-Ops takes a deep dive into an insidious piece of malware

August 13, 2024

Don’t get Mad, get wise

Security Operations

Threat Research

AnyDesk

Featured

incident response

mad liberator

malware

Social engineering

August 12, 2024

The cybersecurity kids aren’t all right

Threat Research

asia

burnout

fatigue

Featured

Sophos X-Ops

Survey

Broken,Modern,Doorknob,Closeup,With,Signs,Of,Forced,Entry,,Criminal

August 7, 2024

Sophos MDR hunt tracks Mimic ransomware campaign against organizations in India

Security Operations

Featured

human-led threat hunting

MDR

Microsoft SQL Server

Mimic Ransomware

Sophos X-Ops

August 7, 2024

Best security practices for ESXi environments

Security Operations

Threat Research

EDR

ESXi

Featured

MDR

remediations

Sophos X-Ops

Virtualization

VMware

August 6, 2024

Turning the screws: The pressure tactics of ransomware gangs

Threat Research

8base

BlackCat

blacksuit

cactus

Cybercrime Forums

Featured

Karakurt

malas

marketplaces

media

monti

play

pressure

qiulong

Ransomware

Snatch

Sophos X-Ops

space bears

werewolves

August 5, 2024

Upgrading your Sophos Firewall from XG to XGS

Products & Services

Firewall

network

A line of traffic cones with a vehicle driving in the background away from the camera

August 1, 2024

Driving lessons: The kernel drivers in Sophos Intercept X Advanced

Threat Research

CryptoGuard

drivers

Featured

Intercept X Advanced

kernel

Sophos X-Ops

July 31, 2024

Experience Fraud: From Taylor Swift to the Olympics

Blog

Research

July 30, 2024

The State of Ransomware in Healthcare 2024

Products & Services

Healthcare

Ransomware

research

Solutions