News
Git Hub internal repositories breached
49+ min ago (183+ words) A malicious VS Code extension led to cloned private repositories, reportedly offered for sale on a criminal forum Written by Sophos X-Ops Git Hub assesses that customer repositories, enterprise accounts, and user data are not affected. The compromise is, on…...
GPT-5. 5-Cyber is here. What it means for defenders operating at the frontier.
1+ week, 2+ day ago (657+ words) Open AI's May 7 release of GPT-5. 5 and the limited preview of GPT-5. 5-Cyber put frontier AI in verified defenders' hands. As a member of the Trusted Access for Cyber program, Sophos is using these models to sharpen what we already…...
Donuts and Beagles: Fake Claude site spreads backdoor
1+ week, 6+ day ago (876+ words) Written by Chaitanya Ghorpade, Gabor Szappanos, Rahul Dugar, Rahil Shah, Matt Wixey As we reported on social media recently, Sophos X-Ops has been investigating reports of a fake Claude AI website distributing malware. Like other researchers, we thought this might…...
Is compliance complexity outpacing IT capacity?
1+ mon, 1+ week ago (240+ words) No matter the country, industry, or company size, IT and cybersecurity teams report a heavy regulatory load and worry about staying aligned with requirements Organizations today operate under a substantial number of IT and cybersecurity compliance obligations. By defining requirements…...
Oracle vulnerability (CVE-2026-21992) impacts core products
1+ mon, 4+ week ago (117+ words) Sophos Oracle vulnerability (CVE-2026-21992) impacts core products Written by Sophos Counter Threat Unit Research Team On March 20, 2026, Oracle disclosed a critical (CVSS score of 9. 8) vulnerability (CVE-2026-21992) impacting two Oracle Fusion Middleware components: Oracle Identity Manager and Oracle Web Services Manager....
CISO Leadership Crisis - The Growing Cybersecurity Gap for SMBs
1+ mon, 3+ week ago (782+ words) The global CISO landscape: A leadership gap too large to ignore Why the world needs scalable security leadership'and MSPs and MSSPs arekey to delivery The 2026 CISO Report, published by Cybersecurity Ventures in partnership with Sophos, highlights a critical imbalance in…...
Sophos Workspace Protection is Now Available
2+ mon, 3+ week ago (384+ words) We're excited to announce the highly anticipated release of Sophos Workspace Protection has arrived. Written by Chris Mc Cormack Sophos Workspace Protection is an easy, effective, and affordable way to protect remote and hybrid workers, contractors and guests " and the…...
Nowhere, man: The 2026 Active Adversary Report
2+ mon, 3+ week ago (1553+ words) AI headline hype didn't deliver a sea change for practical defense " but one below-the-radar development should Written by John Shier, Hilary Wood, Angela Gunn In a world where so much changes rapidly, it can be interesting and informative to identify…...
Stopping real-world attacks: Lessons for business leaders from the 2026 cyber frontline
2+ mon, 3+ week ago (1580+ words) Practical steps to reduce business cyber risk based on analysis of 661 incidents remediated by Sophos X-Ops as detailed in the Sophos Active Adversary Report 2026 The 2026 Sophos Active Adversary Report offers an evidence'based look at how today's attackers operate in real…...
Sophos Workspace Protection Enables Safe Gen AI Adoption
3+ mon, 1+ week ago (318+ words) Easily enable adoption of sanctioned generative AI solutions Scritto da Chris Mc Cormack Sophos Workspace Protection, provides all the controls organizations need to safely and easily embrace Gen AI such as: Safe Gen AI policies are made possible thanks to…...