Sophos Blog

RSS

QEMU abused to evade detection and enable ransomware delivery - feature image

Threat Research

virtual machine

QEMU

PayoutsKing

GOLD ENCOUNTER

CitrixBleed2

QEMU abused to evade detection and enable ransomware delivery

The use of hidden virtual machines (VMs) enables long-term access, credential harvesting, data exfiltration, and PayoutsKing ransomware deployment

Sophos Insights

LLM

Exploit

vulnerability

Active Adversary

Pacific Rim

The vulnerability flood is here. Here’s what it means – and how to prepare

We can't control the pace of AI-driven vulnerability discovery, but we can control how fast we respond.

Threat Research

OpenClaw

LLM

penetration testing

Red Team

CISO

Sophos X-Ops

We let OpenClaw loose on an internal network. Here’s what it found

Following our article on the challenges posed by agentic AI, we gave OpenClaw access to one of our legacy networks

Products & Services

CISO

Compliance

Is compliance complexity outpacing IT capacity?

No matter the country, industry, or company size, IT and cybersecurity teams report a heavy regulatory load and worry about staying aligned with requirements

Small,White,Cctv,Cameras,On,A,Pole,Against,The,Background

四月 16, 2025

The Sophos Annual Threat Report: Cybercrime on Main Street 2025

Security Operations

Threat Research

Annual Threat Report

Featured

midsize businesses

small businesses

四月 9, 2025

Industrial-strength April Patch Tuesday covers 135 CVEs

Threat Research

CVE-2025-29824

Featured

Microsoft

Patch Tuesday

四月 2, 2025

It takes two: The 2025 Sophos Active Adversary Report

Security Operations

Threat Research

Active Adversary

Active Adversary Report

Compromised Credentials

detection

dwell time

Featured

impact

incident response

LOLBIN

MFA

Monitoring

RDP

Remote Ransomware

root cause

四月 1, 2025

Qilin affiliates spear-phish MSP ScreenConnect admin, targeting customers downstream

Security Operations

Threat Research

adversary in the middle

Featured

MFA

MFA phishing

qilin

RMM

ScreenConnect

Sophos X-Ops

supply chain compromise

三月 28, 2025

Stealing user credentials with evilginx

Security Operations

Threat Research

adversary in the middle

aitm

evilginx

MFA

Sophos X-Ops

A,Closeup,Shot,Of,A,Brown,Rat,In,A,Water

三月 27, 2025

PJobRAT makes a comeback, takes another crack at chat apps

Threat Research

Android

Featured

mobile malware

pjobrat

Sophos X-Ops

Taiwan

三月 20, 2025

The future of MFA is clear – but is it here yet?

Threat Research

2FA

aitm

authentication

Featured

MFA

passcode

WebAuthn

三月 12, 2025

Little fires everywhere for March Patch Tuesday

Threat Research

Featured

Microsoft

Patch Tuesday

二月 11, 2025

February Patch Tuesday delivers 57 packages

Threat Research

Featured

Microsoft

Patch Tuesday