Sophos Blog

RSS

QEMU abused to evade detection and enable ransomware delivery - feature image

Threat Research

virtual machine

QEMU

PayoutsKing

GOLD ENCOUNTER

CitrixBleed2

QEMU abused to evade detection and enable ransomware delivery

The use of hidden virtual machines (VMs) enables long-term access, credential harvesting, data exfiltration, and PayoutsKing ransomware deployment

Sophos Insights

LLM

Exploit

vulnerability

Active Adversary

Pacific Rim

The vulnerability flood is here. Here’s what it means – and how to prepare

We can't control the pace of AI-driven vulnerability discovery, but we can control how fast we respond.

Threat Research

OpenClaw

LLM

penetration testing

Red Team

CISO

Sophos X-Ops

We let OpenClaw loose on an internal network. Here’s what it found

Following our article on the challenges posed by agentic AI, we gave OpenClaw access to one of our legacy networks

Products & Services

CISO

Compliance

Is compliance complexity outpacing IT capacity?

No matter the country, industry, or company size, IT and cybersecurity teams report a heavy regulatory load and worry about staying aligned with requirements

abril 26, 2023

Tudo em todos os lugares ao mesmo tempo: o relatório de adversários ativos de 2023 para líderes empresariais

Products & Services

Security Operations

Threat Research

EXFILTRAÇÃO

EXTORSÃO

incident response

MANUAL ADVERSÁRIO ATIVO

PESQUISA DE AMEAÇA

Philadelphia ransomware

VIOLAÇÃO DE DADOS

3d,Render,,Blue,Heavy,Weight,Is,Hanging,Under,The,Levitating

julho 12, 2022

July Patch Tuesday is Rich in Azure, Windows Issues

Threat Research

2022-07

CVE-2022-22047

knotweed

Patch Tuesday

Security Operations

Sophos X-Ops

SophosLabs Uncut

threat research

abril 12, 2022

RPC Vulnerability Stands Out in a Field of 128 in April

Threat Research

2022-04

Patch Tuesday

Security Operations

SophosLabs Uncut

threat research

Windows fax and scan with acoustic coupler for patch tuesday-1

março 8, 2022

Microsoft patches 71 vulnerabilities including RDP Client, Exchange Server, Intune

Threat Research

2022-03

Patch Tuesday

Security Operations

SophosLabs Uncut

threat research

sophos-conti-ransomware-web-banner-1200x628px-option-2 (1)

fevereiro 16, 2021

Conti ransomware: Evasive by nature

SophosLabs Uncut

Threat Research

cobalt strike

Conti

Ransomware

shellcode

SMB

março 12, 2020

Patch now! Microsoft releases fixes for the serious SMB bug CVE-2020-0796

SophosLabs Uncut

Threat Research

2020-03

CVE-2020-0796

Exploit

Patch Tuesday

SMB

SMBv3

updates

Windows