Sophos Blog

RSS

QEMU abused to evade detection and enable ransomware delivery - feature image

Threat Research

virtual machine

QEMU

PayoutsKing

GOLD ENCOUNTER

CitrixBleed2

QEMU abused to evade detection and enable ransomware delivery

The use of hidden virtual machines (VMs) enables long-term access, credential harvesting, data exfiltration, and PayoutsKing ransomware deployment

Sophos Insights

LLM

Exploit

vulnerability

Active Adversary

Pacific Rim

The vulnerability flood is here. Here’s what it means – and how to prepare

We can't control the pace of AI-driven vulnerability discovery, but we can control how fast we respond.

Threat Research

OpenClaw

LLM

penetration testing

Red Team

CISO

Sophos X-Ops

We let OpenClaw loose on an internal network. Here’s what it found

Following our article on the challenges posed by agentic AI, we gave OpenClaw access to one of our legacy networks

Products & Services

CISO

Compliance

Is compliance complexity outpacing IT capacity?

No matter the country, industry, or company size, IT and cybersecurity teams report a heavy regulatory load and worry about staying aligned with requirements

Copy of Featured image for Sophos News & Nak Sec (78)

outubro 19, 2021

Secrets of a security analyst: Investigating an incident

Security Operations

Analyst insights

human-led threat hunting

incident response

Managed Threat Detection

MDR

MTR

Copy of Featured image for Sophos News & Nak Sec (79)

outubro 19, 2021

Secrets of a security analyst: Starting a threat hunt

Security Operations

Analyst insights

human-led threat hunting

incident response

MDR

outubro 12, 2021

Exchange Server, Windows Print Spooler get more patches in October’s Patch Tuesday

SophosLabs Uncut

threat research

2021-10

CVE-2021-26427

CVE-2021-36970

CVE-2021-38672

CVE-2021-40443

CVE-2021-40449

CVE-2021-40450

CVE-2021-40461

CVE-2021-40466

CVE-2021-40470

CVE-2021-40487

CVE-2021-41344

CVE-2021-41357

Microsoft

Patch Tuesday

julho 13, 2021

Integração Sophos EDR e Sophos XDR em uma única oferta

Products & Services

Sophos XDR

junho 30, 2021

O que esperar quando você foi atingido pelo ransomware REvil

Security Operations

Encryption

MTR

Ransomware

Rapid Response

REvil

Security

Sophos MTR

junho 30, 2021

MTR em tempo real: combate corpo a corpo com o ransomware REvil em busca de um dia de pagamento de $ 2,5 milhões

Security Operations

Encryption

MTR

Ransomware

Rapid Response

REvil

Security

Sophos MTR

junho 8, 2021

A equipe de segurança de TI: 2021 e além

Products & Services

maio 27, 2021

10 principais equívocos de segurança

Products & Services

maio 19, 2021

O que há de novo no Sophos EDR 4.0

Products & Services