Sophos Blog

RSS

QEMU abused to evade detection and enable ransomware delivery - feature image

Threat Research

virtual machine

QEMU

PayoutsKing

GOLD ENCOUNTER

CitrixBleed2

QEMU abused to evade detection and enable ransomware delivery

The use of hidden virtual machines (VMs) enables long-term access, credential harvesting, data exfiltration, and PayoutsKing ransomware deployment

Sophos Insights

LLM

Exploit

vulnerability

Active Adversary

Pacific Rim

The vulnerability flood is here. Here’s what it means – and how to prepare

We can't control the pace of AI-driven vulnerability discovery, but we can control how fast we respond.

Threat Research

OpenClaw

LLM

penetration testing

Red Team

CISO

Sophos X-Ops

We let OpenClaw loose on an internal network. Here’s what it found

Following our article on the challenges posed by agentic AI, we gave OpenClaw access to one of our legacy networks

Products & Services

CISO

Compliance

Is compliance complexity outpacing IT capacity?

No matter the country, industry, or company size, IT and cybersecurity teams report a heavy regulatory load and worry about staying aligned with requirements

五月 13, 2025

Introducing the Sophos MSP Elevate program

Products & Services

Featured

MSP

Partners

Sophos Firewall

Sophos MDR

五月 9, 2025

Lumma Stealer, coming and going

Security Operations

Threat Research

Featured

Information Stealers

Lumma Stealer

Sophos X-Ops

A photograph of water rushing down a dam

五月 8, 2025

Putting the dampener on tamperers

Products & Services

Secure by Design

tamper protection

五月 8, 2025

NICKEL TAPESTRY expands fraudulent worker operations

Security Operations

Threat Research

ctu

Democratic People’s Republic of Korea

employment scam

Featured

fraud

nickel tapestry

North Korea

Social engineering

五月 1, 2025

Sophos Firewall v21.5: Entra ID SSO for Sophos Connect

Products & Services

Featured

Firewall

NDR

network

v21.5

四月 29, 2025

Finding Minhook in a sideloading attack – and Sweden too

Threat Research

cobalt strike

DLL sideloading

minhook

四月 23, 2025

Ransomware Groups Evolve Affiliate Models

Blog

Research

Threat Intelligence

四月 17, 2025

Moving CVEs past one-nation control

Security Operations

Threat Research

CVE

Featured

MITRE

Small,White,Cctv,Cameras,On,A,Pole,Against,The,Background

四月 16, 2025

Sophos Annual Threat Report appendix: Most frequently encountered malware and abused software

Security Operations

Threat Research

Annual Threat Report

Attack Tools

Dual-use tools

malware trends 2024