Sophos Blog

RSS

QEMU abused to evade detection and enable ransomware delivery - feature image

Threat Research

virtual machine

QEMU

PayoutsKing

GOLD ENCOUNTER

CitrixBleed2

QEMU abused to evade detection and enable ransomware delivery

The use of hidden virtual machines (VMs) enables long-term access, credential harvesting, data exfiltration, and PayoutsKing ransomware deployment

Sophos Insights

LLM

Exploit

vulnerability

Active Adversary

Pacific Rim

The vulnerability flood is here. Here’s what it means – and how to prepare

We can't control the pace of AI-driven vulnerability discovery, but we can control how fast we respond.

Threat Research

OpenClaw

LLM

penetration testing

Red Team

CISO

Sophos X-Ops

We let OpenClaw loose on an internal network. Here’s what it found

Following our article on the challenges posed by agentic AI, we gave OpenClaw access to one of our legacy networks

Products & Services

CISO

Compliance

Is compliance complexity outpacing IT capacity?

No matter the country, industry, or company size, IT and cybersecurity teams report a heavy regulatory load and worry about staying aligned with requirements

五月 17, 2021

Splunk integration for Sophos Firewall

Products & Services

Integrations

Sophos Firewall

五月 13, 2021

IPs that are malicious together, stay together

AI Research

IP detection

Network Prefix

Sophos AI

五月 12, 2021

Fake Android and iOS apps disguise as trading and cryptocurrency apps

Threat Research

Android malware

Cryptorom

Fake apps

Fake Crypto

iOS malware

iOS MDM abuse

PigButchering

RomanceScam

ShaZhuPan

五月 11, 2021

A defender’s view inside a DarkSide ransomware attack

SophosLabs Uncut

Threat Research

cobalt strike

DarkSide

Mega

pCloud

Ransomware

SystemBC

五月 11, 2021

May’s Patch Tuesday brings a lighter-than-usual number of Windows updates

SophosLabs Uncut

Threat Research

2021-05

Containers

Docker

Jet

Kubernetes

Microsoft

Patch Tuesday

五月 10, 2021

Sophos is a Leader in the 2021 Gartner Magic Quadrant for Endpoint Protection Platforms

Products & Services

Gartner

Gartner Magic Quadrant

Copy of Copy of Copy of Supply Chain Sophos News banners 2

五月 10, 2021

CRN names 12 Sophos executives to 2021 Women of the Channel

Products & Services

Cloud Security

Endpoint

Mobile Security

五月 7, 2021

New Lemon Duck variants exploiting Microsoft Exchange Server

SophosLabs Uncut

Threat Research

China Chopper

cobalt strike

Cryptomining

CVE-2020-14882

Exchange

Lemon Duck

Oracle WebLogic Server

ProxyLogon

Web-Shell

五月 6, 2021

MTR in Real Time: Pirates pave way for Ryuk ransomware

Security Operations

Featured

MTR

Ransomware

Rapid Response

RDP

Ryuk

Sophos MTR