September 10, 2024

Crimson Palace returns: New Tools, Tactics, and Targets 

Chinese cyberespionage campaign renews efforts in multiple organizations in Southeast Asia, blending tactics and expanding efforts 

Security OperationsThreat Research

September 06, 2024

Atomic macOS Stealer leads sensitive data theft on macOS

Sophos X-Ops explores the distribution and capabilities of the Atomic macOS Stealer (AMOS)

Threat Research

August 15, 2024

Content updates and product architecture: Sophos Endpoint

Sophos X-Ops takes a look at the content updates in Intercept X, and how we validate and release them

Threat Research

August 12, 2024

The cybersecurity kids aren’t all right

A new Sophos-commissioned survey finds burnout, fatigue, cynicism riding high in the workforce

Threat Research

August 07, 2024

Sophos MDR hunt tracks Mimic ransomware campaign against organizations in India

STAC6451 threat cluster targets Internet-exposed Microsoft SQL servers for initial access

Security Operations

August 07, 2024

Best security practices for ESXi environments

Ten recommendations for defenders when natively run EDR isn’t an option

Security OperationsThreat Research

August 06, 2024

Turning the screws: The pressure tactics of ransomware gangs

Sophos X-Ops examines the increasingly aggressive tactics ransomware gangs use to coerce their targets

Threat Research

August 01, 2024

Driving lessons: The kernel drivers in Sophos Intercept X Advanced

Operating in kernel-space is necessary, but risky – here’s how we do it in Sophos Intercept X Advanced

Threat Research

July 09, 2024

July Patch Tuesday Unleashes a Torrent of Updates

Microsoft fixes 138 bugs in Windows and other products this month

Threat Research