Sophos Blog

RSS

QEMU abused to evade detection and enable ransomware delivery - feature image

Threat Research

virtual machine

QEMU

PayoutsKing

GOLD ENCOUNTER

CitrixBleed2

QEMU abused to evade detection and enable ransomware delivery

The use of hidden virtual machines (VMs) enables long-term access, credential harvesting, data exfiltration, and PayoutsKing ransomware deployment

Sophos Insights

LLM

Exploit

vulnerability

Active Adversary

Pacific Rim

The vulnerability flood is here. Here’s what it means – and how to prepare

We can't control the pace of AI-driven vulnerability discovery, but we can control how fast we respond.

Threat Research

OpenClaw

LLM

penetration testing

Red Team

CISO

Sophos X-Ops

We let OpenClaw loose on an internal network. Here’s what it found

Following our article on the challenges posed by agentic AI, we gave OpenClaw access to one of our legacy networks

Products & Services

CISO

Compliance

Is compliance complexity outpacing IT capacity?

No matter the country, industry, or company size, IT and cybersecurity teams report a heavy regulatory load and worry about staying aligned with requirements

九月 6, 2023

Introducing Sophos ZTNA on Sophos Firewall

Products & Services

Featured

Firewall

network

Sophos Firewall

ZTNA

九月 1, 2023

Introducing the Sophos Incident Response Services Retainer

Products & Services

incident response

Security Operations

九月 1, 2023

Discover the latest innovations in Sophos Endpoint

Products & Services

Endpoint

Security Operations

Sophos XDR

八月 30, 2023

Protecting Amazon S3 Buckets from Malicious Files

Products & Services

Sophos Cloud

Sophos Cloud Native Security

Sophos Cloud Optix

Stand,Out,From,The,Crowd,And,Different,Concept,,,One

八月 29, 2023

For the win? Offensive research contests on criminal forums

Threat Research

Cybercrime Forums

Exploit

Featured

marketplaces

Sophos X-Ops

XSS

八月 23, 2023

Time keeps on slippin’ slippin’ slippin’: The 2023 Active Adversary Report for Tech Leaders

Threat Research

Active Adversary

Active Adversary Report

Active Directory

attribution

detection

dwell time

Featured

incident response

MFA

MTR

RDP

Sophos X-Ops

八月 14, 2023

NDR for XDR now available in early access

Products & Services

NDR

八月 10, 2023

The State of Ransomware in Healthcare 2023

Products & Services

Healthcare

Ransomware

Solutions

八月 10, 2023

Attacker combines phone, email lures into believable, complex attack chain

Threat Research

Defcon

Electron

Featured

image spam

Notepad++

socat

Social engineering

Sophos X-Ops

Tor

War Stories