Sophos

The fake human verification process led to infostealer and ransomware infections

Winter is coming – so it must be time for Sophos X-Ops’ report on this year’s MITRE ATT&CK Enterprise Evaluations

A month with no Critical-severity Windows bugs is overshadowed by a mass of Mariner mop-up

The availability of exploit code will likely lead to more widespread opportunistic attacks

#1 Ranked in 66 Global Reports

Analysis of the tradecraft evolution across 6 months and 11 incidents

A major milestone: Sophos XDR delivers 100% detection coverage in the latest ATT&CK Evaluation.

Secure by Design.

Sophos has been named one of Computerworld’s 2026 Best Places to Work in IT for the second consecutive year, earning 10th place among large organizations for its innovative, people-focused, and high-impact IT culture.

The ransomware scene gains another would-be EDR killer

Updates include novel abuse of recruitment platforms, modified infection chains, and expansion into a hybrid operation that combines data theft and ransomware deployment

Bringing Sophos threat intelligence directly into Microsoft 365 Copilot.

Elevating threat intelligence for all Security Copilot users.

332 IT and cybersecurity leaders reveal the ransomware realities for manufacturing and production organizations today.

Join the early access program for this new product.

At the Autonomous University of Yucatán (UADY), technology has long been central to supporting academic excellence.  As the university expanded to serve more than 20,000 students across five campuses, its IT team faced increasing pressure on an aging cybersecurity infrastructure. Manual patching, limited firmware support, and rising costs made it harder to defend against evolving […]

Expanding customer choice and bringing Sophos Central closer to customers and partners across the Middle East.

Another campaign targeting WhatsApp users in Brazil spreads like a worm and employs multiple payloads for credential theft, session hijacking, and persistence

Tips to better protect your network over extended breaks.

From certified MDR services to open threat intelligence frameworks, Sophos is delivering the clarity, context, and confidence organizations need to stay ahead of evolving threats.

“From logging in and connecting to Entra ID to seeing our first actionable findings — it took less than 45 minutes."

Credential theft isn’t just an inconvenience. It’s often the first move in a chain reaction that ends in full-scale compromise.  Beyond the dreaded password reset process, information stealers, as shown in several recent cyberattacks, can have far more consequential follow-on effects.   For many small and mid-sized organizations, a single stolen identity can lead to […]

A milestone that reflects our constant progress in email security.

As higher education institutions come under fire from threat actors, 24/7 vigilance is key

A cleanup month brings 63 patches… wait, no, 68… how about 61?

Combining advanced technologies with human expertise to defend against evolving threats.

Get involved in the Sophos Firewall v22 Early Access Program today!

Hardened kernel, remote integrity monitoring, an enhanced anti-malware engine, and more.

Sophos Firewall uses intelligent TLS inspection and AI-powered analysts to reveal hidden threats — without compromising performance.

Has a North Korean threat actor applied for a position at your organization, or even been hired? We’re sharing a toolkit to help you detect and avoid that risk.

Debates over the effectiveness of phishing simulations are widespread. Sophos X-Ops looks at the arguments for and against – and our own phishing philosophy

The threat group targeted a LANSCOPE zero-day vulnerability (CVE-2025-61932)

Explore the Cybersecurity toolkit and start building your prevention-first strategy today.

Exploitation of CVE-2025-59287 began after public disclosure and the release of proof-of-concept code

Securing your firewall is much easier with the new Health Check feature.

Following on from our preview, here’s the full rundown on LLM salting: a novel countermeasure against LLM jailbreaks, developed by AI researchers at Sophos X-Ops

Buyers need to demand better.

New innovations in identity protection, expanded security services, and advancements in AI, and threat detection and response to strengthen cybersecurity outcomes

Neutralize identity-based threats before they can impact your business.

On October 22-24, SophosAI will present research on ‘LLM salting’ (a novel countermeasure against jailbreaks) and command line classification at CAMLIS 2025