Sophos Blog

RSS

QEMU abused to evade detection and enable ransomware delivery - feature image

Threat Research

virtual machine

QEMU

PayoutsKing

GOLD ENCOUNTER

CitrixBleed2

QEMU abused to evade detection and enable ransomware delivery

The use of hidden virtual machines (VMs) enables long-term access, credential harvesting, data exfiltration, and PayoutsKing ransomware deployment

Sophos Insights

LLM

Exploit

vulnerability

Active Adversary

Pacific Rim

The vulnerability flood is here. Here’s what it means – and how to prepare

We can't control the pace of AI-driven vulnerability discovery, but we can control how fast we respond.

Threat Research

OpenClaw

LLM

penetration testing

Red Team

CISO

Sophos X-Ops

We let OpenClaw loose on an internal network. Here’s what it found

Following our article on the challenges posed by agentic AI, we gave OpenClaw access to one of our legacy networks

Products & Services

CISO

Compliance

Is compliance complexity outpacing IT capacity?

No matter the country, industry, or company size, IT and cybersecurity teams report a heavy regulatory load and worry about staying aligned with requirements

A,Toy,Robot,Catches,Fish.,Abstract,Miniature,Plasticine,Lake,And

outubro 1, 2024

SophosAI at Virus Bulletin ’24: Using multimodal AI as a “sixth sense” for cyber defense

AI Research

anti-phishing

featured

Large Language Models

Multimodal AI

spam detection

Web Content Filtering

setembro 26, 2024

Sophos named a Leader in the 2024 IDC MarketScape for European MDR Services

Products & Services

featured

IDC

MDR

setembro 23, 2024

Sophos nomeada líder no Gartner®️ Magic Quadrant™️ 2024 para plataformas de proteção de endpoint

Products & Services

EDR

Endpoint

EPP

Extended Detection and Response

featured

Gartner

MDR

PRODUCTS & SERVICES

Sophos Endpo

Sophos Endpoint

XDR

setembro 10, 2024

Crimson Palace returns: New Tools, Tactics, and Targets

Security Operations

Threat Research

BackdoorDiplomacy

Chinese APT

Crimson Palace

Earth Longzhi

featured

MDR

REF5961

Sophos X-Ops

TA428

Unfading Sea Haze

Broken,Modern,Doorknob,Closeup,With,Signs,Of,Forced,Entry,,Criminal

agosto 7, 2024

Sophos MDR hunt tracks Mimic ransomware campaign against organizations in India

Security Operations

featured

human-led threat hunting

MDR

Microsoft SQL Server

Mimic Ransomware

Sophos X-Ops

agosto 7, 2024

Best security practices for ESXi environments

Security Operations

Threat Research

EDR

ESXi

featured

MDR

remediations

Sophos X-Ops

Virtualization

VMware

julho 25, 2024

Sophos MDR for Microsoft Defender: Gaining momentum with Microsoft-specific service enhancements

Products & Services

featured

Managed Detection and Response

MDR

Microsoft

julho 24, 2024

Unlocking cyber insurance savings to fund MDR

Products & Services

Cyber Insurance

MDR

Ransomware

Security Operations

CrowdStrike global outage: Sophos guidance

julho 23, 2024

Interrupção global do CrowdStrike: orientação da Sophos

Products & Services

CrowdStrike

featured