Sophos Blog

RSS

QEMU abused to evade detection and enable ransomware delivery - feature image

Threat Research

virtual machine

QEMU

PayoutsKing

GOLD ENCOUNTER

CitrixBleed2

QEMU abused to evade detection and enable ransomware delivery

The use of hidden virtual machines (VMs) enables long-term access, credential harvesting, data exfiltration, and PayoutsKing ransomware deployment

Sophos Insights

LLM

Exploit

vulnerability

Active Adversary

Pacific Rim

The vulnerability flood is here. Here’s what it means – and how to prepare

We can't control the pace of AI-driven vulnerability discovery, but we can control how fast we respond.

Threat Research

OpenClaw

LLM

penetration testing

Red Team

CISO

Sophos X-Ops

We let OpenClaw loose on an internal network. Here’s what it found

Following our article on the challenges posed by agentic AI, we gave OpenClaw access to one of our legacy networks

Products & Services

CISO

Compliance

Is compliance complexity outpacing IT capacity?

No matter the country, industry, or company size, IT and cybersecurity teams report a heavy regulatory load and worry about staying aligned with requirements

九月 16, 2024

Sophos Firewall v21: Let’s Encrypt certificates

Products & Services

Firewall

network

v21

九月 12, 2024

Standing on the Windows platform, waiting for change

Products & Services

Threat Research

Endpoint Protection

Endpoint security

kernel driver

Microsoft

九月 12, 2024

September Patch Tuesday addresses 79 CVEs

Threat Research

Intercept X

Microsoft

Microsoft Windows

Patch Tuesday

九月 10, 2024

Sophos Firewall v21: Third-party threat feeds

Products & Services

Firewall

network

v21

九月 10, 2024

Crimson Palace returns: New Tools, Tactics, and Targets

Security Operations

Threat Research

BackdoorDiplomacy

Chinese APT

Crimson Palace

Earth Longzhi

Featured

MDR

REF5961

Sophos X-Ops

TA428

Unfading Sea Haze

A graphic showing a DNA strands and a microcope

九月 6, 2024

Atomic macOS Stealer leads sensitive data theft on macOS

Threat Research

AMOS

atomic stealer

infostealer

MacOS

Sophos X-Ops

九月 5, 2024

The SEC’s 2023 final rules on cybersecurity disclosures

Products & Services

Compliance

SEC

Solutions

八月 29, 2024

Sophos Firewall v21 early access is now available

Products & Services

Firewall

network

v21

An EDR killer Sophos X-Ops has tracked for three years continues to bedevil organizations targeted by ransomware gangs.

八月 27, 2024

Attack tool update impairs Windows computers

Threat Research

BlackCat

BURNTCIGAR

Cuba

EDR

EDR killer

kernel driver

leaked certificate

Lockbit

Medusa

PoorTry

RansomHub

Ransomware

signature

signed driver

StoneStop