[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"vendor:sophos":3},{"vendor":4,"products":15,"links":47,"research":69,"news":122,"iocs":140,"iocs_total":162,"activity":163},{"slug":5,"name":6,"domain":7,"website_url":8,"hq_country":9,"description":10,"logo_path":11,"brand_color":12,"pitch":13,"pitch_source_url":8,"updated_at":14},"sophos","Sophos","sophos.com","https:\u002F\u002Fwww.sophos.com\u002Fen-us","GB","British security company offering endpoint protection, firewalls and managed detection and response. Sophos X-Ops publishes threat research.","\u002Fvendor-logos\u002Fsophos.png","#2006f7","Sophos Fusion is the industry’s most complete cyber defense system. It sees everything, connects everything, and enables your defenses to respond as one.","2026-10-16T13:44:14.81714+00:00",[16,27,37],{"slug":17,"name":18,"url":19,"description":20,"pitch":21,"pitch_source_url":21,"controls":22},"sophos-endpoint","Sophos Endpoint","https:\u002F\u002Fwww.sophos.com\u002Fen-us\u002Fproducts\u002Fendpoint-security","Endpoint protection with Intercept X anti-ransomware technology and EDR.",null,[23],{"slug":24,"name":25,"problem":26},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",{"slug":28,"name":29,"url":30,"description":31,"pitch":21,"pitch_source_url":21,"controls":32},"sophos-mdr","Sophos MDR","https:\u002F\u002Fwww.sophos.com\u002Fen-us\u002Fservices\u002Fmanaged-detection-and-response","Managed detection and response, 24\u002F7, including for other vendors' tools.",[33],{"slug":34,"name":35,"problem":36},"managed-detection-response","Managed detection and response (MDR)","A team watches and responds around the clock when you cannot.",{"slug":38,"name":39,"url":40,"description":41,"pitch":21,"pitch_source_url":21,"controls":42},"sophos-firewall","Sophos Firewall","https:\u002F\u002Fwww.sophos.com\u002Fen-us\u002Fproducts\u002Fnext-gen-firewall","Next-generation firewall with intrusion prevention.",[43],{"slug":44,"name":45,"problem":46},"firewall","Next-generation firewall and intrusion prevention","Malicious traffic is blocked at the network edge and between zones.",[48,52,56,60,63,66],{"kind":49,"label":50,"url":51},"advisories","Security advisories","https:\u002F\u002Fwww.sophos.com\u002Fen-us\u002Fsecurity-advisories",{"kind":53,"label":54,"url":55},"research","Sophos X-Ops threat research","https:\u002F\u002Fwww.sophos.com\u002Fen-us\u002Fblog?taxonomy_blog_category=Threat+Research",{"kind":57,"label":58,"url":59},"review","AV-TEST: business results for Sophos","https:\u002F\u002Fwww.av-test.org\u002Fen\u002Fantivirus\u002Fbusiness-windows-client\u002Fmanufacturer\u002Fsophos\u002F",{"kind":57,"label":61,"url":62},"SE Labs enterprise endpoint test Apr-Jun 2026: Sophos Endpoint Security","https:\u002F\u002Fselabs.uk\u002Fwp-content\u002Fuploads\u002F2026\u002F07\u002Fsecurity-evaluation-test-report-enterprise-sophos-endpoint-security-2026-07-factsheet.pdf",{"kind":57,"label":64,"url":65},"ITPro: Sophos Firewall Virtual review (2024)","https:\u002F\u002Fwww.itpro.com\u002Fsecurity\u002Fsophos-firewall-virtual-review-affordable-network-protection-for-those-that-like-it-virtualized",{"kind":57,"label":67,"url":68},"Gartner Peer Insights: Sophos Endpoint user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fsophos-endpoint",{"total":70,"stories":71},15,[72,77,82,87,92,97,102,107,112,117],{"slug":73,"title":74,"published_at":75,"brief":76},"f5-big-ip-apm-malware-injects-a-php-web-shell-into-memory-evading-disk-scans-88a031","F5 BIG-IP APM Malware Injects a PHP Web Shell Into Memory, Evading Disk Scans","2026-09-09T07:36:49+00:00","Malware injects PHP web shell into memory on F5 BIG-IP APM, evading disk-based detection.",{"slug":78,"title":79,"published_at":80,"brief":81},"hackers-breach-f5-big-ip-apm-devices-to-deploy-linux-rootkit-11f562","Hackers breach F5 BIG-IP APM devices to deploy Linux rootkit","2026-09-08T20:08:55+00:00","Hackers deploy Linux rootkit on F5 BIG-IP APM devices via RCE vulnerability.",{"slug":83,"title":84,"published_at":85,"brief":86},"apt-group-honeymyte-upgrades-coolclient-the-backdoor-gets-a-kernel-level-windows-9232cf","APT group HoneyMyte upgrades CoolClient: the backdoor gets a kernel-level Windows rootkit","2026-08-14T09:00:14+00:00","HoneyMyte APT group's CoolClient backdoor now includes a kernel-level Windows rootkit.",{"slug":88,"title":89,"published_at":90,"brief":91},"microsoft-teams-vishing-attacks-lead-to-chaos-ransomware-attacks-364711","Microsoft Teams vishing attacks lead to Chaos ransomware attacks","2026-07-30T15:56:33+00:00","Microsoft Teams vishing campaign STAC4749 deploys Chaos ransomware against North American organizations.",{"slug":93,"title":94,"published_at":95,"brief":96},"ai-coding-agents-found-triggering-endpoint-security-rules-built-to-catch-attacke-7bc0e8","AI Coding Agents Found Triggering Endpoint Security Rules Built to Catch Attackers","2026-07-08T17:02:12+00:00","AI coding agents are triggering endpoint security rules designed to catch attackers.",{"slug":98,"title":99,"published_at":100,"brief":101},"hola-browser-for-windows-compromised-to-deliver-cryptominer-026e1c","Hola Browser for Windows compromised to deliver cryptominer","2026-06-04T21:27:25+00:00","Hola Browser Windows version compromised to deliver undeclared Monero cryptominer to 0.1% of users.",{"slug":103,"title":104,"published_at":105,"brief":106},"ai-built-ransomware-toolkit-automates-edr-evasion-ad-discovery-ad76fb","AI-built ransomware toolkit automates EDR evasion, AD discovery","2026-06-02T20:01:20+00:00","AI-assisted ransomware toolkit automates EDR evasion and Active Directory discovery in cybercriminal operations.",{"slug":108,"title":109,"published_at":110,"brief":111},"hackers-use-fake-claude-ai-site-to-infect-users-with-new-beagle-malware-3a8dcb","Hackers Use Fake Claude AI Site to Infect Users With New Beagle Malware","2026-05-07T21:34:18+00:00","Hackers use fake Claude AI site to distribute new Beagle backdoor malware via malvertising.",{"slug":113,"title":114,"published_at":115,"brief":116},"phishing-campaign-hits-80-orgs-using-simplehelp-and-screenconnect-rmm-tools-c26330","Phishing Campaign Hits 80+ Orgs Using SimpleHelp and ScreenConnect RMM Tools","2026-05-04T18:06:00+00:00","Phishing campaign VENOMOUS#HELPER targets 80+ orgs using SimpleHelp and ScreenConnect RMM tools for persistent access.",{"slug":118,"title":119,"published_at":120,"brief":121},"cisa-adds-4-exploited-flaws-to-kev-sets-may-2026-federal-deadline-ff0558","CISA Adds 4 Exploited Flaws to KEV, Sets May 2026 Federal Deadline","2026-04-25T05:08:00+00:00","CISA adds 4 actively exploited vulnerabilities to KEV catalog with May 2026 federal deadline.",{"total":123,"stories":124},3,[125,130,135],{"slug":126,"title":127,"published_at":128,"brief":129},"fortibleed-targeted-fortigate-firewalls-in-110-million-credential-harvesting-ope-fa20be","FortiBleed Targeted FortiGate Firewalls in 110 Million-Credential Harvesting Operation","2026-06-23T18:20:49+00:00","FortiBleed operation harvests 110 million credentials from FortiGate firewalls.",{"slug":131,"title":132,"published_at":133,"brief":134},"gentlemen-ransomware-uses-multiple-edr-killers-to-disable-defenses-42866a","Gentlemen ransomware uses multiple EDR killers to disable defenses","2026-06-18T22:31:52+00:00","Gentlemen ransomware uses multiple EDR killers to disable defenses.",{"slug":136,"title":137,"published_at":138,"brief":139},"attackers-use-ai-to-automate-edr-evasion-testing-39a733","Attackers Use AI to Automate EDR Evasion Testing","2026-06-03T21:34:07+00:00","Attackers automate EDR evasion testing using Python scripts against major endpoint security products.",[141,144,146,148,150,152,154,156,158,160],{"type":142,"value":143,"article_slug":126,"article_title":127,"published_at":128},"malware","forticheck",{"type":142,"value":145,"article_slug":126,"article_title":127,"published_at":128},"FortigateSniffer",{"type":142,"value":147,"article_slug":126,"article_title":127,"published_at":128},"FortiProbe-fast",{"type":142,"value":149,"article_slug":126,"article_title":127,"published_at":128},"HASHBOT",{"type":142,"value":151,"article_slug":131,"article_title":132,"published_at":133},"GentleKiller",{"type":142,"value":153,"article_slug":131,"article_title":132,"published_at":133},"HavocKiller",{"type":142,"value":155,"article_slug":131,"article_title":132,"published_at":133},"HexKiller",{"type":142,"value":157,"article_slug":131,"article_title":132,"published_at":133},"OxideHarvest",{"type":142,"value":159,"article_slug":131,"article_title":132,"published_at":133},"SystemBC",{"type":142,"value":161,"article_slug":131,"article_title":132,"published_at":133},"ThrottleBlood",10,[164,167,170,172,175,177],{"month":165,"reported":123,"affected":166},"2026-05-01",0,{"month":168,"reported":169,"affected":123},"2026-06-01",2,{"month":171,"reported":169,"affected":166},"2026-07-01",{"month":173,"reported":174,"affected":166},"2026-08-01",1,{"month":176,"reported":169,"affected":166},"2026-09-01",{"month":178,"reported":166,"affected":166},"2026-10-01"]