Sophos Blog

RSS

QEMU abused to evade detection and enable ransomware delivery - feature image

Threat Research

virtual machine

QEMU

PayoutsKing

GOLD ENCOUNTER

CitrixBleed2

QEMU abused to evade detection and enable ransomware delivery

The use of hidden virtual machines (VMs) enables long-term access, credential harvesting, data exfiltration, and PayoutsKing ransomware deployment

Sophos Insights

LLM

Exploit

vulnerability

Active Adversary

Pacific Rim

The vulnerability flood is here. Here’s what it means – and how to prepare

We can't control the pace of AI-driven vulnerability discovery, but we can control how fast we respond.

Threat Research

OpenClaw

LLM

penetration testing

Red Team

CISO

Sophos X-Ops

We let OpenClaw loose on an internal network. Here’s what it found

Following our article on the challenges posed by agentic AI, we gave OpenClaw access to one of our legacy networks

Products & Services

CISO

Compliance

Is compliance complexity outpacing IT capacity?

No matter the country, industry, or company size, IT and cybersecurity teams report a heavy regulatory load and worry about staying aligned with requirements

Small,White,Cctv,Cameras,On,A,Pole,Against,The,Background

四月 16, 2025

The Sophos Annual Threat Report: Cybercrime on Main Street 2025

Security Operations

Threat Research

Annual Threat Report

Featured

midsize businesses

small businesses

四月 15, 2025

Sophos Firewall v21.5: NDR Essentials

Products & Services

Featured

Firewall

NDR

network

v21.5

四月 9, 2025

Industrial-strength April Patch Tuesday covers 135 CVEs

Threat Research

CVE-2025-29824

Featured

Microsoft

Patch Tuesday

四月 8, 2025

Sophos Firewall v21.5 early access is now available

Products & Services

Firewall

network

Sophos Firewall

v21.5

四月 2, 2025

It takes two: The 2025 Sophos Active Adversary Report

Security Operations

Threat Research

Active Adversary

Active Adversary Report

Compromised Credentials

detection

dwell time

Featured

impact

incident response

LOLBIN

MFA

Monitoring

RDP

Remote Ransomware

root cause

四月 1, 2025

Qilin affiliates spear-phish MSP ScreenConnect admin, targeting customers downstream

Security Operations

Threat Research

adversary in the middle

Featured

MFA

MFA phishing

qilin

RMM

ScreenConnect

Sophos X-Ops

supply chain compromise

三月 28, 2025

Stealing user credentials with evilginx

Security Operations

Threat Research

adversary in the middle

aitm

evilginx

MFA

Sophos X-Ops

三月 27, 2025

Sophos ranked #1 overall for Firewall, MDR, and EDR in the G2 Spring 2025 Reports

Products & Services

Endpoint

network

Security Operations

A,Closeup,Shot,Of,A,Brown,Rat,In,A,Water

三月 27, 2025

PJobRAT makes a comeback, takes another crack at chat apps

Threat Research

Android

Featured

mobile malware

pjobrat

Sophos X-Ops

Taiwan