Focus Scroll Background

Sophos Blog

RSS

QEMU abused to evade detection and enable ransomware delivery - feature image

Threat Research

virtual machine

QEMU

PayoutsKing

GOLD ENCOUNTER

CitrixBleed2

QEMU abused to evade detection and enable ransomware delivery

The use of hidden virtual machines (VMs) enables long-term access, credential harvesting, data exfiltration, and PayoutsKing ransomware deployment

Sophos Insights

LLM

AI

Exploit

vulnerability

Active Adversary

Pacific Rim

The vulnerability flood is here. Here’s what it means – and how to prepare

We can't control the pace of AI-driven vulnerability discovery, but we can control how fast we respond.

Ross McKerchar

Threat Research

OpenClaw

LLM

AI

penetration testing

Red Team

CISO

Sophos X-Ops

We let OpenClaw loose on an internal network. Here’s what it found

Following our article on the challenges posed by agentic AI, we gave OpenClaw access to one of our legacy networks

Ross McKerchar

Products & Services

CISO

Compliance

Is compliance complexity outpacing IT capacity?

No matter the country, industry, or company size, IT and cybersecurity teams report a heavy regulatory load and worry about staying aligned with requirements

ai research messageboards

九月 15, 2026

Messageboards are all they need

AI Research

Threat Research

AI

AI Cybersecurity

Threat Research

Cisco AsyncOS - feature

九月 15, 2026

Cisco Secure Email Gateway vulnerability (CVE-2026-76461) in active exploitation

Threat Research

advisory

vulnerability

Cisco

AI-impersonation-hero

八月 19, 2026

Fake AI, real malware: Attackers impersonating AI brands

Threat Research

AI

malvertising

infostealer

Sophos X-Ops

An illustration, full of sound and fury, signifying nothing

八月 17, 2026

A heap of overflow in August’s Patch Tuesday haul

Threat Research

Patch Tuesday

2608deno-case-studies

八月 11, 2026

Abuse of alternative runtime environments Deno-tes defender headaches

Threat Research

ClickFix Deno - feature

八月 11, 2026

ClickFix campaign abuses Deno runtime for infostealer delivery

Threat Research

clickfix

Deno

WordPress

N-able exploitation feature

八月 4, 2026

N-able N-central exploitation results in RMM tool deployment

Threat Research

RMM

N-able

vulnerability

Hero image for 2608-volatility-interlock

八月 4, 2026

Interlock ransomware gang creates volatile situation

Threat Research

Chaos in Teams vishing feature

七月 28, 2026

Chaos in Teams vishing

Threat Research

Microsoft Teams

vishing

Ransomware

Chaos