7 articles that week
Sophos, Friday, October 30th, 2026
Sophos reports a malicious Claude Code extension version 2.1.313 was distributed via the Cursor marketplace for about 11 hours on October 29, 2026.
more →
Sophos, Thursday, October 29th, 2026
Sophos describes a physical penetration test where a simple pretext got testers past badge readers, gates, mantraps and guards.
more → Sophos, Thursday, October 29th, 2026
Sophos CTU finds the GOLD OGRE group behind Aur0ra ransomware uses AI extensively, including for escalation and EDR testing.
more → Sophos, Wednesday, October 28th, 2026
Sophos DFIR advises that picking specialized cyber incident legal counsel is as important as choosing the forensics firm.
more → Sophos, Wednesday, October 28th, 2026
Sophos CTU warns that Node2Shell (CVE-2026-111497), a critical Brotli decoder buffer overflow, is under active exploitation and on CISA's KEV list.
more → Sophos, Tuesday, October 27th, 2026
Sophos argues AI agents need intent-based access control that turns each task into an enforceable, narrowly scoped policy.
more → Sophos, Monday, October 26th, 2026
Sophos CISO Ross McKerchar warns a breachpocalypse is underway and urges leaders to act before the data fully confirms it.
more →