Sophos

Sophos uses agentic AI to show businesses which security fixes deserve funding

Industry news, Sophos /

Sophos uses agentic AI to show businesses which security fixes deserve funding 2026-10-01 at 16:25 By Industry News Sophos has launched Sophos CISO Advantage, an agentic AI-enabled solution that connects security operations to security strategy. The solution gives organizations a picture of their cyber risk, a prioritized plan to reduce it, and measurable proof of […]

Sophos uses agentic AI to show businesses which security fixes deserve funding Read More »

MSPs say nearly half their customers rely on them for CISO services

CISO, Compliance, cybersecurity, managed security, News, report, Sophos, survey /

MSPs say nearly half their customers rely on them for CISO services 2026-09-16 at 07:30 By Anamarija Pogorelec MSPs estimate that 46% of their customers, on average, look to them to act as CISOs, according to Sophos. Most of those providers do that job without the full set of compliance services, and many spread the […]

MSPs say nearly half their customers rely on them for CISO services Read More »

Uncensored AI sold on hacking forum as alternative to ChatGPT and Claude jailbreaks

AI, cybercrime, News, Sophos /

Uncensored AI sold on hacking forum as alternative to ChatGPT and Claude jailbreaks 2026-09-15 at 15:32 By Sinisa Markovic A new AI subscription service called Luciferus is being marketed on a hacking forum as an alternative to jailbreaking ChatGPT or Claude, Sophos found. The Counter Threat Unit (CTU) spotted the advertisement on August 24 on […]

Uncensored AI sold on hacking forum as alternative to ChatGPT and Claude jailbreaks Read More »

Hackers deploy Linux rootkit on F5 BIG-IP APM devices, hiding web shell in memory

F5 Networks, Malware, News, rootkits, Sophos /

Hackers deploy Linux rootkit on F5 BIG-IP APM devices, hiding web shell in memory 2026-09-09 at 14:05 By Sinisa Markovic A rootkit found on hacked F5 BIG-IP APM devices skips the usual step of writing a web shell to disk, hiding it in memory instead, according to Sophos. F5 BIG-IP APM provides access policy enforcement […]

Hackers deploy Linux rootkit on F5 BIG-IP APM devices, hiding web shell in memory Read More »

Attackers impersonate popular AI brands to spread malware

AI, ChatGPT, Claude Code, cybercrime, News, Sophos /

Attackers impersonate popular AI brands to spread malware 2026-08-21 at 14:47 By Sinisa Markovic Attackers are impersonating popular AI brands like Perplexity, Claude, ChatGPT, and Copilot to spread information stealers, backdoors, malicious browser extensions, and other malware, according to Sophos. Overview of MDR cases with AI involvement (Source: Sophos) Sophos X-Ops reviewed 12 months of […]

Attackers impersonate popular AI brands to spread malware Read More »

N-able ships second N-central hotfix as attackers keep exploiting CVE-2026-18577

Don't miss, Hot stuff, Huntress, Microsoft, MSP, N-able, News, remote management, Sophos /

N-able ships second N-central hotfix as attackers keep exploiting CVE-2026-18577 2026-08-10 at 14:34 By Zeljka Zorz To help customers fend off ongoing attacks, N-able released a second security hotfix for N‑central, its monitoring and management (RMM) solution popular with managed service providers (MSPs). “Hotfix 2 is required, even if you already applied the earlier hotfix. […]

N-able ships second N-central hotfix as attackers keep exploiting CVE-2026-18577 Read More »

Ransom demands are down, email is the top way attackers get in

credentials, cybercrime, cybersecurity, Don't miss, Encryption, Malware, News, Ransomware, report, Sophos /

Ransom demands are down, email is the top way attackers get in 2026-07-16 at 08:00 By Mirko Zorz An employee opens an email that looks like any other, clicks a link, and gives up a password without noticing. A stolen login opens a door deeper in the network. Files stop opening a few days later. […]

Ransom demands are down, email is the top way attackers get in Read More »

Sophos uncovers AI-powered malware lab built for EDR evasion

AI, cybercrime, Malware, News, Ransomware, Sophos /

Sophos uncovers AI-powered malware lab built for EDR evasion 2026-06-02 at 15:47 By Sinisa Markovic A threat actor used AI technologies to build a malware-testing framework for developing and refining endpoint detection and response (EDR) evasion techniques, according to Sophos. The investigation began after an anomalous endpoint in a customer environment triggered alerts tied to […]

Sophos uncovers AI-powered malware lab built for EDR evasion Read More »

Over 70% of organizations hit by identity breaches

credentials, cybersecurity, identity management, News, Non Human Identities, Ransomware, report, Sophos /

Over 70% of organizations hit by identity breaches 2026-05-14 at 07:30 By Anamarija Pogorelec Attackers rely on stolen credentials, compromised service accounts, and social engineering attacks targeting employees, according to Sophos’ The State of Identity Security 2026 survey. What do you estimate to be the overall cost to your organization to rectify the identity breach? […]

Over 70% of organizations hit by identity breaches Read More »

Users advised to drop passwords and make room for passkeys

authentication, cybersecurity, Government, NCSC, News, passkeys, passwordless, Sophos /

Users advised to drop passwords and make room for passkeys 2026-04-24 at 23:26 By Sinisa Markovic In a decisive move that could reshape how users log in online, the National Cyber Security Centre (NCSC) is urging consumers to abandon passwords in favour of passkeys, positioning them as the future of authentication. “Passkeys should become consumers’ […]

Users advised to drop passwords and make room for passkeys Read More »

Ransomware activity peaks outside business hours

Artificial Intelligence, cybersecurity, generative AI, identity, News, phishing, report, Sophos /

Ransomware activity peaks outside business hours 2026-02-27 at 12:18 By Anamarija Pogorelec Intrusions continue to center on credential access and timed execution outside standard business hours. The Sophos Active Adversary Report 2026 analyzes 661 incident response and managed detection and response cases handled between November 1, 2024 and October 31, 2025, spanning organizations in 70 […]

Ransomware activity peaks outside business hours Read More »

Sophos expands security stack to govern apps, data, and AI in hybrid work

Industry news, Sophos /

Sophos expands security stack to govern apps, data, and AI in hybrid work 2026-01-20 at 13:45 By Industry News Sophos has announced Sophos Workspace Protection, expanding its portfolio to help organizations secure hybrid work and govern the use of emerging technologies, including AI. Built around the Sophos Protected Browser, powered by Island, the solution enables […]

Sophos expands security stack to govern apps, data, and AI in hybrid work Read More »

Ransomware’s new playbook is chaos

Acronis, Akamai, At-Bay, Black Kite, Chainalysis, Coalition, Coveware, cybersecurity, Delinea, Illumio, Ivanti, News, Ransomware, report, Rubrik, Searchlight Cyber, Semperis, Sophos, Veeam Software /

Ransomware’s new playbook is chaos 2025-12-31 at 07:07 By Anamarija Pogorelec Ransomware threats are accelerating in scale, sophistication, and impact. Data reveals how evolving techniques, shifting payment trends, and AI-driven capabilities are reshaping the threat landscape, and raising the stakes for every organization. The weekend is prime time for ransomware Over half of organizations that […]

Ransomware’s new playbook is chaos Read More »

Manufacturing is becoming a test bed for ransomware shifts

cybersecurity, Encryption, manufacturing sector, News, Ransomware, report, Sophos, threat detection /

Manufacturing is becoming a test bed for ransomware shifts 2025-12-15 at 07:12 By Anamarija Pogorelec Manufacturing leaders may feel that ransomware risk has settled, but new data shows the threat is shifting in ways that require attention, according to a Sophos report. A global survey of 332 IT and security leaders outlines how attackers are […]

Manufacturing is becoming a test bed for ransomware shifts Read More »

Sophos adds Intelix threat intelligence to Microsoft Security and 365 Copilot

Industry news, Sophos /

Sophos adds Intelix threat intelligence to Microsoft Security and 365 Copilot 2025-11-19 at 11:32 By Industry News Sophos announced the general availability of new integrations that connect Sophos Intelix, its cyber threat intelligence repository, with Microsoft Security Copilot and Microsoft 365 Copilot. Organizations of all sizes now gain real-time access to Sophos threat intelligence within […]

Sophos adds Intelix threat intelligence to Microsoft Security and 365 Copilot Read More »

Retailers are learning to say no to ransom demands

cybersecurity, Encryption, extortion, News, Ransomware, report, Retail, Sophos /

Retailers are learning to say no to ransom demands 2025-11-06 at 07:45 By Anamarija Pogorelec Ransomware remains one of the biggest operational risks for retailers, but the latest data shows a shift in how these attacks unfold. Fewer incidents now lead to data encryption, recovery costs have dropped, and businesses are bouncing back faster. Yet […]

Retailers are learning to say no to ransom demands Read More »

Attackers exploiting WSUS vulnerability drop Skuld infostealer (CVE-2025-59287)

Darktrace, data theft, Don't miss, Eye Security, Hot stuff, Huntress, Malware, News, Palo Alto Networks, Sophos, Windows Server /

Attackers exploiting WSUS vulnerability drop Skuld infostealer (CVE-2025-59287) 2025-10-30 at 15:46 By Zeljka Zorz Attackers have been spotted exploiting the recently patched WSUS vulnerability (CVE-2025-59287) to deploy infostealer malware on unpatched Windows servers. An out-of-band update Last week’s release of an emergency fix for CVE-2025-59287, a Windows Server Update Services (WSUS) remote code execution vulnerability, […]

Attackers exploiting WSUS vulnerability drop Skuld infostealer (CVE-2025-59287) Read More »

Legit tools, illicit uses: Velociraptor, Nezha turned against victims

APT, attack tools, Cisco, Don't miss, Hot stuff, Huntress, News, open source, Ransomware, Sophos /

Legit tools, illicit uses: Velociraptor, Nezha turned against victims 2025-10-09 at 19:19 By Zeljka Zorz Threat actors are using an increasing variety of commercial and open-source products to carry out their attacks: according to researchers, Velociraptor and Nezha are the latest additions to their attack toolbox. Velociraptor misuse A suspected China-based ransomware threat actor has […]

Legit tools, illicit uses: Velociraptor, Nezha turned against victims Read More »

ScreenConnect admins targeted with spoofed login alerts

Don't miss, Hot stuff, MFA, Mimecast, MITM, MSP, News, Sophos, spear-phishing /

ScreenConnect admins targeted with spoofed login alerts 2025-08-25 at 17:56 By Zeljka Zorz ScreenConnect cloud administrators across all region and industries are being targeted with fake email alerts warning about a potentially suspicious login event. The goal of the attackers is to grab the login credentials and MFA tokens of Super Admins: users who have […]

ScreenConnect admins targeted with spoofed login alerts Read More »

Critical Vulnerabilities Patched in Sophos Firewall

firewall, Network Security, Sophos, Vulnerabilities, vulnerability /

Critical Vulnerabilities Patched in Sophos Firewall 2025-07-23 at 14:35 By Ionut Arghire Sophos has patched five vulnerabilities in Sophos Firewall that could allow remote attackers to execute arbitrary code. The post Critical Vulnerabilities Patched in Sophos Firewall appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Critical Vulnerabilities Patched in Sophos Firewall Read More »

Scroll to Top