Sophos Blog

RSS

QEMU abused to evade detection and enable ransomware delivery - feature image

Threat Research

virtual machine

QEMU

PayoutsKing

GOLD ENCOUNTER

CitrixBleed2

QEMU abused to evade detection and enable ransomware delivery

The use of hidden virtual machines (VMs) enables long-term access, credential harvesting, data exfiltration, and PayoutsKing ransomware deployment

Sophos Insights

LLM

Exploit

vulnerability

Active Adversary

Pacific Rim

The vulnerability flood is here. Here’s what it means – and how to prepare

We can't control the pace of AI-driven vulnerability discovery, but we can control how fast we respond.

Threat Research

OpenClaw

LLM

penetration testing

Red Team

CISO

Sophos X-Ops

We let OpenClaw loose on an internal network. Here’s what it found

Following our article on the challenges posed by agentic AI, we gave OpenClaw access to one of our legacy networks

Products & Services

CISO

Compliance

Is compliance complexity outpacing IT capacity?

No matter the country, industry, or company size, IT and cybersecurity teams report a heavy regulatory load and worry about staying aligned with requirements

七月 7, 2025

Strengthening cyber resilience: Introducing Internal Attack Surface Management (IASM) for Sophos Managed Risk

Products & Services

Featured

MANAGED RISK

MDR

Security Operations

Threat Intelligence Executive Report cover image for Volume 2025 Number 3

七月 3, 2025

Threat Intelligence Executive Report – Volume 2025, Number 3

Threat Research

Black Basta

ctu

employment scam

Featured

GOLD REBELLION

human resources

North Korea

post-quantum cryptography

七月 3, 2025

Sophos Firewall Recognized as the #1 Overall Firewall Solution by G2 Users

Products & Services

Firewall

network security

SFOS

Sophos Firewall

六月 30, 2025

Using AI to identify cybercrime masterminds

AI Research

Threat Research

cybercrime

Dark Web

Featured

threat activity cluster

threat actors

六月 26, 2025

Taking the shine off BreachForums

Threat Research

BreachForums

Featured

IntelBroker

law enforcement action

ShinyHunters

六月 24, 2025

The State of Ransomware 2025

Products & Services

Featured

Ransomware

State of Ransomware

Research

Sophos MDR

Sophos Endpoint

六月 13, 2025

June Patch Tuesday digs into 67 bugs

Threat Research

copilot

CVE-2025-32711

CVE-2025-33053

Microsoft

Patch Tuesday

webdav

六月 10, 2025

Sophos Emergency Incident Response is now available

Products & Services

Emergency Incident Response

Rapid Response

六月 2, 2025

Sophos Firewall v21.5 is now available

Products & Services

Firewall

network