Sophos Blog

RSS

QEMU abused to evade detection and enable ransomware delivery - feature image

Threat Research

virtual machine

QEMU

PayoutsKing

GOLD ENCOUNTER

CitrixBleed2

QEMU abused to evade detection and enable ransomware delivery

The use of hidden virtual machines (VMs) enables long-term access, credential harvesting, data exfiltration, and PayoutsKing ransomware deployment

Sophos Insights

LLM

Exploit

vulnerability

Active Adversary

Pacific Rim

The vulnerability flood is here. Here’s what it means – and how to prepare

We can't control the pace of AI-driven vulnerability discovery, but we can control how fast we respond.

Threat Research

OpenClaw

LLM

penetration testing

Red Team

CISO

Sophos X-Ops

We let OpenClaw loose on an internal network. Here’s what it found

Following our article on the challenges posed by agentic AI, we gave OpenClaw access to one of our legacy networks

Products & Services

CISO

Compliance

Is compliance complexity outpacing IT capacity?

No matter the country, industry, or company size, IT and cybersecurity teams report a heavy regulatory load and worry about staying aligned with requirements

abril 21, 2022

Sophos Firewall OS v19 já está disponível

Products & Services

featured

Sophos Firewall

v19

abril 14, 2022

Acelere a segurança do Linux e do contêiner

Products & Services

Cloud Security

Cloud Workload Protection

Containers

featured

Linux

Server Protection

abril 14, 2022

Segurança aprimorada do Linux e do contêiner para o Sophos Intercept X for Server

Products & Services

Cloud Security

Cloud Workload Protection

Containers

Intercept X for Server

Linux

Server Protection

XDR

abril 12, 2022

RPC Vulnerability Stands Out in a Field of 128 in April

Threat Research

2022-04

Patch Tuesday

Security Operations

SophosLabs Uncut

threat research

março 29, 2022

Reconstructing PowerShell scripts from multiple Windows event logs

Security Operations

4104

forensics

Powershell

threat research

março 17, 2022

The Ransomware Threat Intelligence Center

Windows fax and scan with acoustic coupler for patch tuesday-1

março 8, 2022

Microsoft patches 71 vulnerabilities including RDP Client, Exchange Server, Intune

Threat Research

2022-03

Patch Tuesday

Security Operations

SophosLabs Uncut

threat research

fevereiro 2, 2022

Log4Shell: How the Attackers’ Faces Have Changed Over Time

Security Operations

Exploit

featured

Log4J

Log4shell

threat research

vulnerability

janeiro 24, 2022

Log4Shell: No Mass Abuse, But No Respite, What Happened?

Security Operations

Exploit

featured

Log4J

Log4shell

MTR

Security Operations

threat research

vulnerability