Sophos Blog

RSS

QEMU abused to evade detection and enable ransomware delivery - feature image

Threat Research

virtual machine

QEMU

PayoutsKing

GOLD ENCOUNTER

CitrixBleed2

QEMU abused to evade detection and enable ransomware delivery

The use of hidden virtual machines (VMs) enables long-term access, credential harvesting, data exfiltration, and PayoutsKing ransomware deployment

Sophos Insights

LLM

Exploit

vulnerability

Active Adversary

Pacific Rim

The vulnerability flood is here. Here’s what it means – and how to prepare

We can't control the pace of AI-driven vulnerability discovery, but we can control how fast we respond.

Threat Research

OpenClaw

LLM

penetration testing

Red Team

CISO

Sophos X-Ops

We let OpenClaw loose on an internal network. Here’s what it found

Following our article on the challenges posed by agentic AI, we gave OpenClaw access to one of our legacy networks

Products & Services

CISO

Compliance

Is compliance complexity outpacing IT capacity?

No matter the country, industry, or company size, IT and cybersecurity teams report a heavy regulatory load and worry about staying aligned with requirements

julho 9, 2024

Cysurance announces discounted cyber insurance program for Sophos customers in Australia

Products & Services

Cyber Insurance

cysurance

Endpoint

MDR

Ransomware

Security Operations

junho 5, 2024

Operation Crimson Palace: A Technical Deep Dive

Security Operations

Threat Research

china

Crimson Palace

EAGERBEE

Earth Longzhi

MDR

Sophos X-Ops

maio 29, 2024

MSP Perspectives 2024 Report

Products & Services

Cyber Insurance

featured

MDR

MSP

PSA

research

RMM

maio 13, 2024

Extracting data from encrypted virtual disks: six seven methods

Security Operations

Threat Research

data extraction

DFIR

Encryption

featured

incident response

MDR

Ransomware

Sophos X-Ops

virtual machine

abril 30, 2024

Sophos named a Leader in the 2024 IDC MarketScape for Worldwide Managed Detection and Response (MDR)

Products & Services

featured

IDC

MDR

Security Operations

abril 3, 2024

Apresentando o Sophos Managed Risk, powered by Tenable

Products & Services

featured

MANAGED RISK

MDR

Products and Services

Security Operations

março 26, 2024

O impacto dos backups comprometidos nos resultados do ransomware

Products & Services

março 20, 2024

Remote Desktop Protocol: The Series

Security Operations

Threat Research

Active Adversary

Active Adversary Report

featured

incident response

Incident response tools

MDR

RDP

Sophos X-Ops

março 20, 2024

Remote Desktop Protocol: Exposed RDP (is dangerous)

Security Operations

incident response

Incident response tools

MDR

RDP

Sophos X-Ops