Sophos Blog

RSS

QEMU abused to evade detection and enable ransomware delivery - feature image

Threat Research

virtual machine

QEMU

PayoutsKing

GOLD ENCOUNTER

CitrixBleed2

QEMU abused to evade detection and enable ransomware delivery

The use of hidden virtual machines (VMs) enables long-term access, credential harvesting, data exfiltration, and PayoutsKing ransomware deployment

Sophos Insights

LLM

Exploit

vulnerability

Active Adversary

Pacific Rim

The vulnerability flood is here. Here’s what it means – and how to prepare

We can't control the pace of AI-driven vulnerability discovery, but we can control how fast we respond.

Threat Research

OpenClaw

LLM

penetration testing

Red Team

CISO

Sophos X-Ops

We let OpenClaw loose on an internal network. Here’s what it found

Following our article on the challenges posed by agentic AI, we gave OpenClaw access to one of our legacy networks

Products & Services

CISO

Compliance

Is compliance complexity outpacing IT capacity?

No matter the country, industry, or company size, IT and cybersecurity teams report a heavy regulatory load and worry about staying aligned with requirements

White Grey Virtual reality Headset isolated on white background

十二月 11, 2024

Keeping it real: Sophos and the 2024 MITRE ATT&CK Evaluations: Enterprise

Threat Research

Featured

MITRE

MITRE ATT&CK

Ransomware

Sophos X-Ops

十二月 11, 2024

December Patch Tuesday arrives bearing 71 gifts

Threat Research

Featured

Microsoft

Patch Tuesday

RDP

Windows

The,Muddy,Water,Of,The,Jordan,River,At,The,Border

十一月 20, 2024

Sophos MDR blocks and tracks activity from probable Iranian state actor “MuddyWater”

Security Operations

Threat Research

Atera

Featured

legitimate service abuse

MDR

MuddyWater

Phishing

RMM

Sophos X-Ops

STAC 1171

TA450

十一月 13, 2024

November Patch Tuesday loads up everyone’s plate

Threat Research

CVE-2024-43451

CVE-2024-43623

CVE-2024-43630

CVE-2024-49033

CVE-2024-49039

Featured

Microsoft Defender

Microsoft Windows

Patch Tuesday

十一月 8, 2024

VEEAM exploit seen used again with a new ransomware: “Frag”

Security Operations

Threat Research

crypto-ransomware

junk gun

MDR

Veeam

VPNs

shutterstock_asset-generation-9e8a3dcf-7a9d-4795-a22c-6077ad8cd3d4-2_edited

十一月 6, 2024

Bengal cat lovers in Australia get psspsspss’d in Google-driven Gootloader campaign

Security Operations

Threat Research

Gootloader

Javascript

loader

MDR

search engine poisoning

SEO Poisoning

Sophos X-Ops

十月 16, 2024

From QR to compromise: The growing “quishing” threat

Threat Research

Featured

Phishing

QR code

Quishing

Sophos X-Ops

Spam

spearphishing

x-ops

十月 9, 2024

October Patch Tuesday harvest hauls in 117 CVEs

Threat Research

deepspeed

Patch Tuesday

Windows

九月 12, 2024

Standing on the Windows platform, waiting for change

Products & Services

Threat Research

Endpoint Protection

Endpoint security

kernel driver

Microsoft