Sophos Blog

RSS

QEMU abused to evade detection and enable ransomware delivery - feature image

Threat Research

virtual machine

QEMU

PayoutsKing

GOLD ENCOUNTER

CitrixBleed2

QEMU abused to evade detection and enable ransomware delivery

The use of hidden virtual machines (VMs) enables long-term access, credential harvesting, data exfiltration, and PayoutsKing ransomware deployment

Sophos Insights

LLM

Exploit

vulnerability

Active Adversary

Pacific Rim

The vulnerability flood is here. Here’s what it means – and how to prepare

We can't control the pace of AI-driven vulnerability discovery, but we can control how fast we respond.

Threat Research

OpenClaw

LLM

penetration testing

Red Team

CISO

Sophos X-Ops

We let OpenClaw loose on an internal network. Here’s what it found

Following our article on the challenges posed by agentic AI, we gave OpenClaw access to one of our legacy networks

Products & Services

CISO

Compliance

Is compliance complexity outpacing IT capacity?

No matter the country, industry, or company size, IT and cybersecurity teams report a heavy regulatory load and worry about staying aligned with requirements

Broken,Modern,Doorknob,Closeup,With,Signs,Of,Forced,Entry,,Criminal

八月 7, 2024

Sophos MDR hunt tracks Mimic ransomware campaign against organizations in India

Security Operations

Featured

human-led threat hunting

MDR

Microsoft SQL Server

Mimic Ransomware

Sophos X-Ops

八月 7, 2024

Best security practices for ESXi environments

Security Operations

Threat Research

EDR

ESXi

Featured

MDR

remediations

Sophos X-Ops

Virtualization

VMware

八月 6, 2024

Turning the screws: The pressure tactics of ransomware gangs

Threat Research

8base

BlackCat

blacksuit

cactus

Cybercrime Forums

Featured

Karakurt

malas

marketplaces

media

monti

play

pressure

qiulong

Ransomware

Snatch

Sophos X-Ops

space bears

werewolves

八月 5, 2024

Upgrading your Sophos Firewall from XG to XGS

Products & Services

Firewall

network

A line of traffic cones with a vehicle driving in the background away from the camera

八月 1, 2024

Driving lessons: The kernel drivers in Sophos Intercept X Advanced

Threat Research

CryptoGuard

drivers

Featured

Intercept X Advanced

kernel

Sophos X-Ops

七月 30, 2024

The State of Ransomware in Healthcare 2024

Products & Services

Healthcare

Ransomware

research

Solutions

七月 25, 2024

Sophos MDR for Microsoft Defender: Gaining momentum with Microsoft-specific service enhancements

Products & Services

Featured

Managed Detection and Response

MDR

Microsoft

七月 24, 2024

Unlocking cyber insurance savings to fund MDR

Products & Services

Cyber Insurance

MDR

Ransomware

Security Operations

七月 23, 2024

Sophos Firewall v20 MR2 is now available

Products & Services

Firewall

Firewall v20

network

v20