January 21, 2025

Sophos MDR tracks two ransomware campaigns using “email bombing,” Microsoft Teams “vishing”

Sophos MDR identifies a new threat cluster riffing on the playbook of Storm-1811, and amped-up activity from the original connected to Black Basta ransomware.

Security OperationsThreat Research

January 16, 2025

Gootloader inside out

Open-source intelligence reveals the server-side code of this pernicious SEO-driven malware - without needing a lawyer afterward

Threat Research

January 14, 2025

159-CVE January Patch Tuesday smashes single-month record

Brace yourselves... and consider reading your email in plaintext for now

Threat Research

December 19, 2024

Phishing platform Rockstar 2FA trips, and “FlowerStorm” picks up the pieces

A sudden disruption of a major phishing-as-a-service provider leads to the rise of another…that looks very familiar 

Security OperationsThreat Research

December 13, 2024

DeepSpeed: a tuning tool for large language models

SophosAI’s framework for upgrading the performance of LLMs for cybersecurity tasks (or any other specific task) is now open source.

AI Research

December 12, 2024

The Bite from Inside: The Sophos Active Adversary Report

A sea change in available data fuels fresh insights from the first half of 2024

Security OperationsThreat Research

December 11, 2024

Sophos excels in the 2024 MITRE ATT&CK® Evaluations: Enterprise

Results from the latest ATT&CK Evaluations for endpoint detection and response solutions.

Products & ServicesSecurity Operations

December 11, 2024

Keeping it real: Sophos and the 2024 MITRE ATT&CK Evaluations: Enterprise

Sophos X-Ops looks at the realism of this year’s MITRE ATT&CK Evaluations

Threat Research

December 11, 2024

December Patch Tuesday arrives bearing 71 gifts

Seventeen Critical-severity CVEs ready to deck your halls; also, new blog guidance for Windows Server admins

Threat Research