Focus Scroll Background

Sophos Blog

RSS

QEMU abused to evade detection and enable ransomware delivery - feature image

Threat Research

virtual machine

QEMU

PayoutsKing

GOLD ENCOUNTER

CitrixBleed2

QEMU abused to evade detection and enable ransomware delivery

The use of hidden virtual machines (VMs) enables long-term access, credential harvesting, data exfiltration, and PayoutsKing ransomware deployment

Sophos Insights

LLM

AI

Exploit

vulnerability

Active Adversary

Pacific Rim

The vulnerability flood is here. Here’s what it means – and how to prepare

We can't control the pace of AI-driven vulnerability discovery, but we can control how fast we respond.

Ross McKerchar

Threat Research

OpenClaw

LLM

AI

penetration testing

Red Team

CISO

Sophos X-Ops

We let OpenClaw loose on an internal network. Here’s what it found

Following our article on the challenges posed by agentic AI, we gave OpenClaw access to one of our legacy networks

Ross McKerchar

Products & Services

CISO

Compliance

Is compliance complexity outpacing IT capacity?

No matter the country, industry, or company size, IT and cybersecurity teams report a heavy regulatory load and worry about staying aligned with requirements

Hero image for 2607-secai -- toy cars racing

七月 27, 2026

Why Sophos Has Become Its Own AI Test Lab

Threat Research

AI Research

July Patch Tuesday only feels endless

七月 21, 2026

July Patch Tuesday only feels endless

Threat Research

x-ops

Patch Tuesday

SonicWall SMA1000 feature

七月 15, 2026

SonicWall SMA1000 vulnerabilities in active exploitation

Threat Research

advisory

Vulnerabilities

SonicWall

Hero image for 2607_agents_vs_telemetry

七月 7, 2026

When AI agents look like attackers: what behavioral telemetry tells us

Threat Research

Stock image of a padlock composed of small cubes breaking apart into small pieces

七月 2, 2026

Vect and TeamPCP partner for ransomware campaigns

Threat Research

Vect

TeamPCP

Ransomware

Shadow of a person in an underground mine

六月 17, 2026

AI in the underground: Curiosity, claims, and concerns

Threat Research

AI

Dark Web

underground

June Patch Tuesday smashes past 500-CVE mark - Image

六月 11, 2026

June Patch Tuesday smashes past 500-CVE mark

Threat Research

x-ops

Patch Tuesday

hola-browser-image

六月 4, 2026

You do surprise me.exe: An unexpected executable in Hola Browser

Threat Research

Crypto mining

Supply chain

Gold cursor navigating around other cursors

六月 2, 2026

Pointing a Cursor at evading detection

Threat Research

AI

EDR