Sophos, Thursday, November 5th, 2026
SIEM or XDR? Yes
Sophos argues XDR is effectively a SIEM rebuilt for security outcomes and outlines how to decide whether to replace, consolidate or keep both.
more →
Back Issues/Search Home → Archive → RSS → Subscribe → Services → Vendors → Blog → Popular →
All sections ›
Archive
Sophos — Archive
101 articles · page 1 of 3
Sophos, Thursday, November 5th, 2026
The State of Ransomware in Financial Services 2026
Sophos' 2026 financial services ransomware report finds lower ransom demands and payments but slower recovery and higher team stress.
more → Sophos, Wednesday, November 4th, 2026
What Happens When a Fake Coding Test Reaches a Security Company?
Sophos describes how a fake coding test compromised an employee's Mac, linking the tactic to North Korean groups and the Binance theft.
more → Sophos, Wednesday, November 4th, 2026
Sophos Firewall v23 Is Now Available
Sophos releases Sophos Firewall v23 with AI-powered assistance, a REST API, redesigned rule management and stronger high availability.
more → Sophos, Wednesday, November 4th, 2026
Securing the AI-Era Network: Why Performance and Defense Now Belong Together
Sophos explains how Firewall v23, new XGS appliances, Sophos NDR and Workspace Protection combine performance, visibility and response.
more → Sophos, Friday, October 30th, 2026
Malicious Claude Code Extension Distributed Through Cursor Marketplace
Sophos reports a malicious Claude Code extension version 2.1.313 was distributed via the Cursor marketplace for about 11 hours on October 29, 2026.
more →
Sophos, Thursday, October 29th, 2026
Physical Penetration Testing: When Human Trust Bypasses Layers of Security with a Simple Pretext
Sophos describes a physical penetration test where a simple pretext got testers past badge readers, gates, mantraps and guards.
more → Sophos, Thursday, October 29th, 2026
AI Used in Aur0ra Ransomware Testing and Execution
Sophos CTU finds the GOLD OGRE group behind Aur0ra ransomware uses AI extensively, including for escalation and EDR testing.
more → Sophos, Wednesday, October 28th, 2026
Never Bring a Knife to a Gun Fight!
Sophos DFIR advises that picking specialized cyber incident legal counsel is as important as choosing the forensics firm.
more → Sophos, Wednesday, October 28th, 2026
'Node2Shell' Vulnerability (CVE-2026-111497) in Active Exploitation
Sophos CTU warns that Node2Shell (CVE-2026-111497), a critical Brotli decoder buffer overflow, is under active exploitation and on CISA's KEV list.
more → Sophos, Tuesday, October 27th, 2026
Building Intent-Based Access Control for AI Agents
Sophos argues AI agents need intent-based access control that turns each task into an enforceable, narrowly scoped policy.
more → Sophos, Monday, October 26th, 2026
The Breachpocalypse Is Here
Sophos CISO Ross McKerchar warns a breachpocalypse is underway and urges leaders to act before the data fully confirms it.
more → Sophos, Friday, October 23rd, 2026
Is 'SIEM-less' Really What It Sounds Like?
Sophos argues SIEM-less architectures still need SIEM functions and often recreate the same complexity across several products.
more →
Sophos, Tuesday, October 20th, 2026
Why Incident Response Demand Will Grow Faster Than Expected
Sophos argues AI-scaled attacks will drive incident response demand beyond forecasts, so the industry must develop analysts now.
more → Sophos, Thursday, October 15th, 2026
Sophos ITDR Expands Identity Protection for the AI Era
Sophos ITDR becomes a standalone offering with deeper AI identity visibility, expanded Microsoft support and faster response.
more →
Sophos, Tuesday, October 13th, 2026
Sophos AI Defense Is Now Generally Available
Sophos AI Defense is now GA, giving visibility and control over shadow AI and protecting sensitive data in AI use.
more → Sophos, Wednesday, October 7th, 2026
CISA's 17 Active Directory Attack Techniques: Detection and Defense with Sophos MDR
Sophos groups CISA's 17 Active Directory compromise techniques into four categories and explains how to defend against them with MDR.
more →
Sophos, Tuesday, October 6th, 2026
Understanding Asymmetric Routing Risks
Sophos explains how asymmetric routing breaks stateful firewall inspection, raises adversary-in-the-middle risk and disrupts cutovers.
more → Sophos, Thursday, October 1st, 2026
Sophos CISO Advantage Is Now Generally Available
Sophos CISO Advantage is now GA, giving organizations and MSPs framework-mapped control evidence, roadmaps and board reporting.
more →
Sophos, Wednesday, September 30th, 2026
TerminalFix and Lorem Ipsum Loader Enable Covert Tunneling
Sophos details STAC4924, a campaign using TerminalFix lures and Lorem Ipsum Loader to deploy a Python tunneling implant.
more → Sophos, Wednesday, September 30th, 2026
Sophos Firewall v23 Is Now in Early Access
Sophos Firewall v23 enters early access with 30+ requested features, including a REST API and AI-powered firewall assistant.
more → Sophos, Tuesday, September 29th, 2026
Jev's Paradox: The Hidden Cost of Cheap AI Decisions
Sophos examines how cheap classifier-style AI decisions could multiply total errors if accuracy and calibration fall short.
more → Sophos, Wednesday, September 23rd, 2026
The Rising Threat of Deepfakes: Why Organizations Must Rethink Trust
Sophos warns deepfake attacks are up 2,100% and says organizations must move beyond trusting human judgment.
more →
Sophos, Thursday, September 17th, 2026
The Answer to AI Uncertainty Is Adaptability, Not Paralysis
Sophos argues security teams should build adaptable programs rather than wait out AI uncertainty.
more →
Sophos, Wednesday, September 16th, 2026
September Patch Tuesday Haul Includes 973 CVEs
Sophos breaks down an unusually large September Patch Tuesday covering 973 CVEs.
more → Sophos, Tuesday, September 15th, 2026
The Industry Turned XDR and SIEM into Categories. Sophos Turned Them into Outcomes.
Sophos positions its next-generation SIEM around security outcomes rather than product category labels.
more → Sophos, Tuesday, September 15th, 2026
Messageboards Are All They Need
Sophos research examines how threat actors coordinate via messageboards rather than sophisticated infrastructure.
more → Sophos, Monday, September 14th, 2026
Devil's Advocate? Uncensored Luciferus AI Service Advertised Underground
Sophos investigates Luciferus, an uncensored AI service marketed to criminals on underground forums.
more → Sophos, Friday, September 11th, 2026
"Eye" Spy: Cyclops Blink Returns With Extended Capabilities
Upgraded modular malware observed attacking Cisco Firewall Management Center devices.
more →
Sophos, Tuesday, September 1st, 2026
Ungentlemanly Behavior: Insights Into a Ransomware Operation
Sophos analyzes 15 intrusions by GOLD SHERWOOD affiliates running The Gentlemen ransomware-as-a-service scheme.
more →
Sophos, Thursday, August 27th, 2026
A Call for Collective Action on Cyber Defense
Sophos has signed OpenAI's open letter urging coordinated global action on cyber defense as AI reshapes the threat landscape.
more →
Sophos, Tuesday, August 25th, 2026
Sophos Ranked #1 Overall in Endpoint, XDR, MDR and Firewall in the G2 Fall 2026 Reports
G2's Fall 2026 Reports rank Sophos #1 Overall across Endpoint Protection, MDR, XDR and Firewall Software.
more → Sophos, Wednesday, August 19th, 2026
Fake AI, Real Malware: Attackers Impersonating AI Brands
Sophos X-Ops reviewed a year of MDR cases and found attackers overwhelmingly faking AI sites and installers to spread malware.
more →
Sophos, Wednesday, August 5th, 2026
Sophos DNS Protection Update for GenAI
Sophos DNS Protection adds a Generative AI category for visibility and policy control over GenAI services.
more →
Sophos, Tuesday, August 4th, 2026
N-Able N-Central Exploitation Results in RMM Tool Deployment
Sophos reports attackers exploiting N-able N-central to deploy AnyDesk, TeamViewer, and TacticalRMM.
more → Sophos, Tuesday, August 4th, 2026
Interlock Ransomware Gang Creates Volatile Situation
Sophos investigates Interlock ransomware abusing legitimate DFIR memory-analysis tools including Volatility3.
more → Sophos, Friday, July 31st, 2026
Three-Headed Dogs and Long Tails: Sophos at BSides LV
Sophos AI researchers preview BSides Las Vegas talks on a three-headed jailbreak detector and LLM-assisted data labeling.
more →
Sophos, Friday, July 31st, 2026
When AI Does Not Know the Target Is Real
Sophos reads Anthropic's disclosure of three sandbox-escape incidents as proof that security fundamentals still decide the outcome.
more → Sophos, Wednesday, July 29th, 2026
Secure by Design in Practice: A Year of Progress on Sophos Firewall
Sophos reports a year of firewall hardening and an internal AI vulnerability-hunting platform that outperformed pen testing on cost.
more → Sophos, Tuesday, July 28th, 2026
Chaos in Teams Vishing
Sophos tracks STAC4749 using Teams vishing and custom malware to deploy Chaos ransomware within 17 hours.
more → Sophos, Monday, July 27th, 2026
Why Sophos Has Become Its Own AI Test Lab
Sophos describes the risk compass and AI Safety Board it uses to govern aggressive internal AI adoption.
more → Sophos, Monday, July 27th, 2026
Turn Cybersecurity Into a High-Value Business Function With Sophos CISO Advantage
Sophos previews CISO Advantage, a cyber program management platform arriving in October to express security in business terms.
more → Sophos, Monday, July 27th, 2026
Introducing Sophos AI Defense
Sophos launches AI Defense to discover shadow AI, assess risk, and enforce policy inside the existing Fusion stack.
more → Sophos, Thursday, July 23rd, 2026
When the Attacker Is an AI Agent
Sophos draws defensive lessons from the OpenAI test agent that breached Hugging Face infrastructure.
more →
Sophos, Monday, July 20th, 2026
In Code We Trust? Why the Most Trusted Software Receives the Least Scrutiny
Sophos shows why widely trusted software gets the least security scrutiny and how to review it.
more → Sophos, Wednesday, July 15th, 2026
Sophos Fusion Launches as an AI-Native Cybersecurity Defense System
Sophos launched Fusion, an AI-native defense system unifying endpoint, firewall, email, cloud, identity and SecOps on one architecture.
more →
Sophos, Tuesday, July 14th, 2026
Sophos Firewall v22 MR2 Adds AI App Control, PQC Detection, and Enhanced Chromebook Support
Sophos Firewall v22 MR2 adds post-quantum cryptography detection, sharper generative AI app control and Manifest V3 Chromebook support.
more → Sophos, Thursday, July 2nd, 2026
Vect and TeamPCP Partner for Ransomware Campaigns
Sophos warns that Vect and TeamPCP have combined credential theft and ransomware into an industrialized attack model.
more →
Sophos, Tuesday, May 12th, 2026
71% of Organizations Suffered At Least One Identity Breach in the Past Year
State of Identity Security 2026 report finds human error and poor non-human identity management are the root causes of most attacks, as agentic AI accelerates the risk
more →
Sophos, Tuesday, May 12th, 2026
The State of Identity Security 2026: Identity is the new perimeter
Discover the causes and consequences of identity threats based on a survey of 5,000 organizations across 17 countries.
more →