;
;

Sophos Blogs

Latest blog posts and insights from Sophos

Website Twitter Linkedin Facebook

Dissecting a PHP web server rootkit

Sophos X-Ops takes a deep dive into an insidious piece of malware
Posted on 7 September 2026 | 12:00 am

SonicWall SMA1000 vulnerabilities (CVE-2026-83548, CVE-2026-83549) in active exploitation

Posted on 2 September 2026 | 12:00 am

Ungentlemanly behavior: Insights into a ransomware operation

Analysis of 15 intrusions revealed tradecraft used by GOLD SHERWOOD affiliates
Posted on 1 September 2026 | 12:00 am

The State of Ransomware in Education 2026

Insights from 226 IT and cybersecurity leaders across the education sector in 17 countries whose organizations were hit by ransomware in the past y...
Posted on 27 August 2026 | 12:00 am

A call for collective action on cyber defense

Sophos joins organizations worldwide in supporting a coordinated and responsible approach to cyber defense.
Posted on 27 August 2026 | 12:00 am

Sophos Ranked #1 Overall in Endpoint, XDR, MDR, and Firewall in the G2 Fall 2026 Reports

Sophos is the only vendor recognized as a Leader across all five of these core cybersecurity markets.
Posted on 25 August 2026 | 12:00 am

Fake AI, real malware: Attackers impersonating AI brands

A year of MDR casework shows attackers repeatedly exploiting demand for AI tools
Posted on 19 August 2026 | 12:00 am

Hunting the Undead: Accelerating NetNTLMv1 Lookups Without GPUs

Outdated protocols, forgotten configurations, and legacy dependencies continue to create opportunities for attackers in modern environments. This r...
Posted on 17 August 2026 | 12:00 am

A heap of overflow in August’s Patch Tuesday haul

421 CVEs, a relatively small set of Edge patches, and two spicy stragglers
Posted on 17 August 2026 | 12:00 am