November 14, 2023

The song remains the same: The 2023 Active Adversary Report for Security Practitioners

The remarkable decline in attacker dwell time is now well-documented, but what does that mean for those doing the hands-on work of infosecurity?

Threat Research

November 10, 2023

Same threats, different ransomware

A threat cluster's switch from Vice Society to Rhysida

Threat Research

August 29, 2023

Mom’s Meals issues “Notice of Data Event”: What to know and what to do

It took six months for notifications to start, and we still don't know exactly what went down... but here's our advice on what to do.

Naked Security

August 08, 2023

Sophos Named Customers’ Choice for Managed Detection and Response (MDR) in the Inaugural Gartner® Voice of the Customer Peer Insights™ Report

Sophos earned a 97% “Willingness to Recommend” score and had more customer reviews than the other three Customers’ Choice selections combined.

Products & Services

August 08, 2023

Clustering attacker behavior reveals hidden patterns

A series of ransomware attacks made by different groups share curiously similar characteristics

Threat Research

July 20, 2023

Bad ad fad leads to IcedID, Gozi infections

Malvertising campaigns using paid ads result in infostealer and backdoor attacks

Security OperationsThreat Research

July 10, 2023

Clop At The Top – But For How Long?

Halfway through 2023, the threat landscape is dominated by one loud, adaptable, persistent player

Security OperationsThreat Research

June 30, 2023

Investigator, API Yourself: Deploying Microsoft Graph on the trail of an attacker

Two clients, two threat hunts – any connection? Using Microsoft’s cloud-security API to parse piles of disparate data leads to fascinating findings

Security OperationsThreat Research

June 05, 2023

Update 6: Information on MOVEit Vulnerabilities CVE-2023-34362, CVE-2023-35036, CVE-2023-35708, and CVE-2023-36934

Users of the file-transfer package should apply patches immediately and check for indications of possible compromise

Security OperationsThreat Research