What happens when a cybersecurity company gets phished?
If you work in cybersecurity, you’ve probably heard the time-honored adage about cyber attacks: “It’s not a matter of if,...
Security Operations
Microsoft’s ‘Gross Cybersecurity Negligence Threatens National Security’
Roasting Redmond for Kerberoasting: “Like an arsonist selling firefighting services,” quips this 76-year-old. The post Microsoft’s ‘Gross Cybersecurity Negligence Threatens...
Sophos MDR: New analyst response actions for Microsoft 365
Businesses of all sizes are increasingly reliant on productivity tools like Microsoft 365 — and attackers are using this to...
Lumma Stealer, coming and going
In September 2024, a threat hunt across Sophos Managed Detection and Response’s telemetry uncovered a Lumma Stealer campaign using fake...
NICKEL TAPESTRY expands fraudulent worker operations
With this post, the X-Ops blog is thrilled to present research from our Sophos siblings newly joining us from Secureworks,...
SaaS risk is on the rise: 7 action items for better management
The rapid rise in the use of SaaS applications — often without the IT organization’s knowledge or consent — has...
Advancing Security Vulnerabilities beyond Single-Nation Authority
At times, the value of something only becomes apparent once it is nearly lost. Such was the case this past...
Sophos Annual Threat Report appendix: Most commonly encountered malware and exploited software
This supplementary section of our Annual Threat Report presents additional data and insights into the tools utilized by hackers targeting...
The Sophos Annual Threat Report: Cybercrime on Main Street 2025
Small enterprises are a key focus for cybercrime, as previously emphasized in our prior annual publication. Numerous criminal risks outlined...
The 2025 Sophos Active Adversary Report: A Duo’s Journey
This year marks the fifth year of the celebrated fifth anniversary of the Sophos Active Adversary Report. A simple query...
Qilin partners target MSP ScreenConnect admin through spear-phishing, impacting downstream clients
In the final days of January 2025, an administrator of a Managed Service Provider (MSP) received a meticulously crafted phishing...
Swiping user login details using evilginx
Evilginx, a tool based on the authentic (and widely utilized) open-source nginx web server, can be utilized to grab usernames,...
Sophos achieved the top position for Firewall, MDR, and EDR in the G2 Spring 2025 Reports
The verdict is out from customers. G2, a significant technology review platform, has just unveiled its Spring 2025 Reports, where...
The Sophos AI Assistant: Enhancing security operations with GenAI
Back in 2024, we unveiled the incorporation of Generative AI functionalities in the Sophos Extended Detection and Response (XDR) platform,...
Sophos Takes Over Secureworks
We are thrilled to announce the official acquisition of Secureworks by Sophos. Feel free to check out the video message...
