Sophos Blogs https://www.sophos.com/en-us/blog Latest blog posts and insights from Sophos en-us Cisco Secure Email Gateway vulnerability (CVE-2026-76461) in active exploitation https://www.sophos.com/en-us/blog/cisco-secure-email-gateway-vulnerability-cve-2026-76461-in-active-exploitation Tue, 15 Sep 2026 00:00:00 GMT blt7a9a5a595fbc6c7e MSP Perspectives 2026: The evolution of the MSP cybersecurity value proposition https://www.sophos.com/en-us/blog/the-evolution-of-the-msp-cybersecurity-value-proposition MSPs are no longer simply being asked to manage technology; increasingly, customers are expecting them to provide cybersecurity leadership, deliver compliance programs, and guide security investment.

]]> Tue, 15 Sep 2026 00:00:00 GMT blt94f98cc306c52516 ATT&CK grew a 15th tactic: A practical DFIR field guide to the Stealth / Defense Impairment split https://www.sophos.com/en-us/blog/mitre-enterprise-attack-grew-15th-tactic-practical-dfir-field-guide Artifacts and tooling for the new Enterprise MITRE ATT&CK matrix tactics, distilled from the field.

]]> Mon, 14 Sep 2026 00:00:00 GMT blt10fe9c7e5e3333fa Devil’s advocate? Uncensored Luciferus AI service advertised underground https://www.sophos.com/en-us/blog/uncensored-luciferus-ai-service-advertised-underground Uncensored refers to a lack of typical guardrails or ethical restrictions, lowering the technical barrier of entry into cybercrime

]]> Mon, 14 Sep 2026 00:00:00 GMT blt178dcfd4843d9fca “Eye” spy: Cyclops Blink returns with extended capabilities https://www.sophos.com/en-us/blog/-eye-spy-cyclops-blink-returns-with-extended-capabilities Upgraded modular malware observed in attacks on Cisco Firewall Management Center (FMC) devices

]]> Fri, 11 Sep 2026 00:00:00 GMT blt7be1114f3c8915a2 Dissecting a PHP web server rootkit https://www.sophos.com/en-us/blog/dissecting-a-php-web-server-rootkit Sophos X-Ops takes a deep dive into an insidious piece of malware

]]> Mon, 07 Sep 2026 00:00:00 GMT blt2261442cf10e35bf SonicWall SMA1000 vulnerabilities (CVE-2026-83548, CVE-2026-83549) in active exploitation https://www.sophos.com/en-us/blog/sonicwall-83548-83549 Wed, 02 Sep 2026 00:00:00 GMT bltfa0a0d20e6efc1c9 Ungentlemanly behavior: Insights into a ransomware operation https://www.sophos.com/en-us/blog/ungentlemanly-behavior-insights-into-a-ransomware-operation Analysis of 15 intrusions revealed tradecraft used by GOLD SHERWOOD affiliates

]]> Tue, 01 Sep 2026 00:00:00 GMT bltc5107dc7cc9acd24 The State of Ransomware in Education 2026 https://www.sophos.com/en-us/blog/state-of-ransomware-in-education-2026 Insights from 226 IT and cybersecurity leaders across the education sector in 17 countries whose organizations were hit by ransomware in the past year.

]]> Thu, 27 Aug 2026 00:00:00 GMT blt7d982b08ac116736