Sophos achieves its best-ever results in the MITRE ATT&CK Enterprise 2025 Evaluation

November 18, 2025

Cybersecurity for Microsoft Environments

From certified MDR services to open threat intelligence frameworks, Sophos is delivering the clarity, context, and confidence organizations need to stay ahead of evolving threats.

Products & ServicesSecurity Operations

November 05, 2025

Detecting fraudulent North Korean hires: A CISO playbook

Has a North Korean threat actor applied for a position at your organization, or even been hired? We’re sharing a toolkit to help you detect and avoid that risk.

Security Operations

October 31, 2025

Phake phishing: Phundamental or pholly?

Debates over the effectiveness of phishing simulations are widespread. Sophos X-Ops looks at the arguments for and against – and our own phishing philosophy

Security Operations

September 22, 2025

What happens when a cybersecurity company gets phished?

A Sophos employee was phished, but we countered the threat with an end-to-end defense process

Security Operations

August 04, 2025

Rubrik & Sophos Enhance Cyber Resilience for Microsoft 365

Products & ServicesSecurity newsSecurity Operations

July 28, 2025

Sophos’ Secure by Design 2025 Progress

One year on, we are pleased to share progress on our secure-by-design commitments.

Security Operations

May 27, 2025

DragonForce actors target SimpleHelp vulnerabilities to attack MSP, customers

Ransomware actor exploited RMM to access multiple organizations; Sophos EDR blocked encryption on customer’s network

Security OperationsThreat Research

May 20, 2025

A familiar playbook with a twist: 3AM ransomware actors dropped virtual machine with vishing and Quick Assist

Another adversary picks up the email bombing / vishing Storm-1811 playbook, doing thorough reconnaissance to target specific employees with fake help desk call—this time, over the phone.

Security OperationsThreat Research

May 09, 2025

Lumma Stealer, coming and going

The high-profile information stealer switches up its TTPs, but keeps the CAPTCHA tactic; we take a deep dive

Security OperationsThreat Research