Sophos Blog

RSS

QEMU abused to evade detection and enable ransomware delivery - feature image

Threat Research

virtual machine

QEMU

PayoutsKing

GOLD ENCOUNTER

CitrixBleed2

QEMU abused to evade detection and enable ransomware delivery

The use of hidden virtual machines (VMs) enables long-term access, credential harvesting, data exfiltration, and PayoutsKing ransomware deployment

Sophos Insights

LLM

Exploit

vulnerability

Active Adversary

Pacific Rim

The vulnerability flood is here. Here’s what it means – and how to prepare

We can't control the pace of AI-driven vulnerability discovery, but we can control how fast we respond.

Threat Research

OpenClaw

LLM

penetration testing

Red Team

CISO

Sophos X-Ops

We let OpenClaw loose on an internal network. Here’s what it found

Following our article on the challenges posed by agentic AI, we gave OpenClaw access to one of our legacy networks

Products & Services

CISO

Compliance

Is compliance complexity outpacing IT capacity?

No matter the country, industry, or company size, IT and cybersecurity teams report a heavy regulatory load and worry about staying aligned with requirements

八月 22, 2024

Qilin ransomware caught stealing credentials stored in Google Chrome

Security Operations

Threat Research

Credentials

Featured

incident response

Privacy

qilin

Ransomware

八月 20, 2024

Free ZTNA licenses for Sophos Firewall customers

Products & Services

network

ZTNA

八月 20, 2024

Sophos NDR 1.7 is now available

Products & Services

network security

Security Operations

Sophos MDR

Sophos NDR

Sophos XDR

A photograph of architectural diagrams on a table, with a yellow tape measure

八月 15, 2024

Content updates and product architecture: Sophos Endpoint

Threat Research

content updates

drivers

Featured

Intercept X

Sophos X-Ops

八月 15, 2024

August Patch Tuesday goes big

Threat Research

CVE-2024-21302

CVE-2024-38063

CVE-2024-38202

CVE-2024-38213

Microsoft

Patch Tuesday

Windows 11 24H2

Un hombre con uniforme de policía bloquea la entrada a un edificio acristalado con los brazos en alto. Los atacantes de ransomware introducen un nuevo asesino EDR en su arsenal. Sophos descubre el uso de EDRKillShifter por los atacantes del ransomware RansomHub. Por Andreas Klopsch. Fuente de la imagen: Shutterstock

八月 14, 2024

Ransomware attackers introduce new EDR killer to their arsenal

Threat Research

BYOVD

EDR

EDR killer

EDRKillShifter

Featured

Ransomware

八月 14, 2024

The State of Ransomware in State and Local Government 2024

Products & Services

government

Ransomware

Solutions

The State of Ransomware

八月 13, 2024

Don’t get Mad, get wise

Security Operations

Threat Research

AnyDesk

Featured

incident response

mad liberator

malware

Social engineering

八月 12, 2024

The cybersecurity kids aren’t all right

Threat Research

asia

burnout

fatigue

Featured

Sophos X-Ops

Survey