Focus Scroll Background

Sophos Blog

RSS

Aur0ra feature image

AI used in Aur0ra ransomware testing and execution

The GOLD OGRE threat group has used AI extensively to develop tools and to orchestrate and execute ransomware operations

Colin Cowie

‘Node2Shell’ vulnerability (CVE-2026-111497) in active exploitation

The breachpocalypse is here

It's just hard to measure

Ross McKerchar

Proof-of-concept exploit released for PHP vulnerabilities (CVE-2026-109618, CVE-2026-109619)

Photo of four technology professionals conferring as they look at a tablet in a modern office room that is illuminated with pale blue light

September 15, 2026

MSP Perspectives 2026: The evolution of the MSP cybersecurity value proposition

Products & Services

ATT&CK grew a 15th tactic: A practical DFIR field guide to the Stealth / Defense Impairment split

September 14, 2026

ATT&CK grew a 15th tactic: A practical DFIR field guide to the Stealth / Defense Impairment split

The Frontlines

Luciferus feature image

September 14, 2026

Devil’s advocate? Uncensored Luciferus AI service advertised underground

Threat Research

Cyclops Blink feature image

September 11, 2026

“Eye” spy: Cyclops Blink returns with extended capabilities

Threat Research

September 7, 2026

Dissecting a PHP web server rootkit

Threat Research

SonicWall advisory 82548 and 83549 feature image

September 2, 2026

SonicWall SMA1000 vulnerabilities (CVE-2026-83548, CVE-2026-83549) in active exploitation

Threat Research

The Gentlemen feature image

September 1, 2026

Ungentlemanly behavior: Insights into a ransomware operation

Threat Research

State of Ransomware in Education 2026 booklet thumbnail

August 27, 2026

The State of Ransomware in Education 2026

Products & Services

Sophos joins organizations worldwide in supporting a coordinated and responsible approach to cyber defense.

August 27, 2026

A call for collective action on cyber defense

Products & Services