October 31, 2025

Phake phishing: Phundamental or pholly?

Debates over the effectiveness of phishing simulations are widespread. Sophos X-Ops looks at the arguments for and against – and our own phishing philosophy

Security Operations

October 20, 2025

From inbox clutter to costly compromise: Why email threats still matter

Email-based attacks aren’t relics of the past. They’re active, sophisticated, and increasingly lucrative for attackers. 

Sophos Insights

October 13, 2025

Cybersecurity Awareness Month: 10 tips to Stay Safe Online that anyone can use

Use this short checklist as a launchpad: adopt the basics consistently, strengthen the controls that matter most, and build routines that keep those protections current and effective. 

Sophos Insights

September 18, 2025

K-12 schools face cybersecurity risks inside and outside of the classroom

As students return to school, it's crucial for administrators and IT teams to stay vigilant against opportunistic threat actors.

Products & Services

February 05, 2025

Scalable Vector Graphics files pose a novel phishing threat

The SVG file format can harbor malicious HTML, scripts, and malware

Threat Research

December 19, 2024

Phishing platform Rockstar 2FA trips, and “FlowerStorm” picks up the pieces

A sudden disruption of a major phishing-as-a-service provider leads to the rise of another…that looks very familiar 

Security OperationsThreat Research

November 20, 2024

Sophos MDR blocks and tracks activity from probable Iranian state actor “MuddyWater”

Security OperationsThreat Research

October 16, 2024

From QR to compromise: The growing “quishing” threat

Attackers leverage QR codes in PDF email attachments to spearphish corporate credentials from mobile devices

Threat Research

June 13, 2024

Phishing, BEC attackers target candidates in local election, among others

An escalating series of email-borne attacks were sent to candidates, including the author

Threat Research