Focus Scroll Background

Sophos Blog

RSS

QEMU abused to evade detection and enable ransomware delivery - feature image

Threat Research

virtual machine

QEMU

PayoutsKing

GOLD ENCOUNTER

CitrixBleed2

QEMU abused to evade detection and enable ransomware delivery

The use of hidden virtual machines (VMs) enables long-term access, credential harvesting, data exfiltration, and PayoutsKing ransomware deployment

Sophos Insights

LLM

AI

Exploit

vulnerability

Active Adversary

Pacific Rim

The vulnerability flood is here. Here’s what it means – and how to prepare

We can't control the pace of AI-driven vulnerability discovery, but we can control how fast we respond.

Ross McKerchar

Threat Research

OpenClaw

LLM

AI

penetration testing

Red Team

CISO

Sophos X-Ops

We let OpenClaw loose on an internal network. Here’s what it found

Following our article on the challenges posed by agentic AI, we gave OpenClaw access to one of our legacy networks

Ross McKerchar

Products & Services

CISO

Compliance

Is compliance complexity outpacing IT capacity?

No matter the country, industry, or company size, IT and cybersecurity teams report a heavy regulatory load and worry about staying aligned with requirements

An illustration, full of sound and fury, signifying nothing

八月 17, 2026

A heap of overflow in August’s Patch Tuesday haul

Threat Research

Patch Tuesday

2608deno-case-studies

八月 11, 2026

Abuse of alternative runtime environments Deno-tes defender headaches

Threat Research

ClickFix Deno - feature

八月 11, 2026

ClickFix campaign abuses Deno runtime for infostealer delivery

Threat Research

clickfix

Deno

WordPress

Sophos Working with OpenAI on security from AI, with AI, and for AI - Image

八月 10, 2026

Sophos Working with OpenAI on security from AI, with AI, and for AI

Products & Services

ChatGPT

AI

artificial intelligence

Sophos DNS GenAI

八月 5, 2026

Sophos DNS Protection update for GenAI

Products & Services

network

Workspace Protection

AI

N-able exploitation feature

八月 4, 2026

N-able N-central exploitation results in RMM tool deployment

Threat Research

RMM

N-able

vulnerability

Hero image for 2608-volatility-interlock

八月 4, 2026

Interlock ransomware gang creates volatile situation

Threat Research

AI real target - feature

七月 31, 2026

When AI doesn’t know the target is real

Security Operations

AI

Hugging Face

Anthropic

OpenAI

three-headed-dog-hero-image

七月 31, 2026

Three-headed dogs and long tails: Sophos at BSides LV

AI Research

AI

BSidesLV