[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"vendor:sophos":3},{"vendor":4,"products":15,"links":47,"research":69,"news":122,"iocs":145,"iocs_total":174,"activity":175},{"slug":5,"name":6,"domain":7,"website_url":8,"hq_country":9,"description":10,"logo_path":11,"brand_color":12,"pitch":13,"pitch_source_url":8,"updated_at":14},"sophos","Sophos","sophos.com","https:\u002F\u002Fwww.sophos.com\u002Fen-us","GB","British security company offering endpoint protection, firewalls and managed detection and response. Sophos X-Ops publishes threat research.","\u002Fvendor-logos\u002Fsophos.png","#2006f7","Sophos Fusion is the industry’s most complete cyber defense system. It sees everything, connects everything, and enables your defenses to respond as one.","2026-10-16T13:44:14.81714+00:00",[16,27,37],{"slug":17,"name":18,"url":19,"description":20,"pitch":21,"pitch_source_url":21,"controls":22},"sophos-endpoint","Sophos Endpoint","https:\u002F\u002Fwww.sophos.com\u002Fen-us\u002Fproducts\u002Fendpoint-security","Endpoint protection with Intercept X anti-ransomware technology and EDR.",null,[23],{"slug":24,"name":25,"problem":26},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",{"slug":28,"name":29,"url":30,"description":31,"pitch":21,"pitch_source_url":21,"controls":32},"sophos-mdr","Sophos MDR","https:\u002F\u002Fwww.sophos.com\u002Fen-us\u002Fservices\u002Fmanaged-detection-and-response","Managed detection and response, 24\u002F7, including for other vendors' tools.",[33],{"slug":34,"name":35,"problem":36},"managed-detection-response","Managed detection and response (MDR)","A team watches and responds around the clock when you cannot.",{"slug":38,"name":39,"url":40,"description":41,"pitch":21,"pitch_source_url":21,"controls":42},"sophos-firewall","Sophos Firewall","https:\u002F\u002Fwww.sophos.com\u002Fen-us\u002Fproducts\u002Fnext-gen-firewall","Next-generation firewall with intrusion prevention.",[43],{"slug":44,"name":45,"problem":46},"firewall","Next-generation firewall and intrusion prevention","Malicious traffic is blocked at the network edge and between zones.",[48,52,56,60,63,66],{"kind":49,"label":50,"url":51},"advisories","Security advisories","https:\u002F\u002Fwww.sophos.com\u002Fen-us\u002Fsecurity-advisories",{"kind":53,"label":54,"url":55},"research","Sophos X-Ops threat research","https:\u002F\u002Fwww.sophos.com\u002Fen-us\u002Fblog?taxonomy_blog_category=Threat+Research",{"kind":57,"label":58,"url":59},"review","AV-TEST: business results for Sophos","https:\u002F\u002Fwww.av-test.org\u002Fen\u002Fantivirus\u002Fbusiness-windows-client\u002Fmanufacturer\u002Fsophos\u002F",{"kind":57,"label":61,"url":62},"SE Labs enterprise endpoint test Apr-Jun 2026: Sophos Endpoint Security","https:\u002F\u002Fselabs.uk\u002Fwp-content\u002Fuploads\u002F2026\u002F07\u002Fsecurity-evaluation-test-report-enterprise-sophos-endpoint-security-2026-07-factsheet.pdf",{"kind":57,"label":64,"url":65},"ITPro: Sophos Firewall Virtual review (2024)","https:\u002F\u002Fwww.itpro.com\u002Fsecurity\u002Fsophos-firewall-virtual-review-affordable-network-protection-for-those-that-like-it-virtualized",{"kind":57,"label":67,"url":68},"Gartner Peer Insights: Sophos Endpoint user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fsophos-endpoint",{"total":70,"stories":71},24,[72,77,82,87,92,97,102,107,112,117],{"slug":73,"title":74,"published_at":75,"brief":76},"ransomware-gang-talked-ai-agents-into-doing-much-of-its-dirty-work-283b05","Ransomware gang talked AI agents into doing much of its dirty work","2026-11-02T05:00:46+00:00","Ransomware gang uses AI agents to automate network traversal and credential collection.",{"slug":78,"title":79,"published_at":80,"brief":81},"aur0ra-ransomware-hackers-use-cursor-ai-agents-to-gain-domain-admin-access-and-s-90376c","Aur0ra Ransomware Hackers Use Cursor AI Agents to Gain Domain Admin Access and Steal Data","2026-10-30T14:36:33+00:00","Aur0ra ransomware hackers leverage AI agents for domain admin access and data theft.",{"slug":83,"title":84,"published_at":85,"brief":86},"critical-php2shell-exploit-code-goes-public-as-hackers-attempt-to-deploy-botnet-c6e1f0","Critical PHP2Shell Exploit Code Goes Public as Hackers Attempt to Deploy Botnet Malware","2026-10-23T13:00:37+00:00","Public exploit code for critical PHP vulnerabilities PHP2Shell (CVE-2026-109618, CVE-2026-109619) released; attackers",{"slug":88,"title":89,"published_at":90,"brief":91},"mirai-botnet-operators-join-php2shell-attacks-as-aslr-bypass-exploits-emerge-8915ec","Mirai Botnet Operators Join PHP2Shell Attacks as ASLR Bypass Exploits Emerge","2026-10-23T12:45:52+00:00","Mirai botnet operators exploit PHP2Shell vulnerabilities, but no successful compromise confirmed.",{"slug":93,"title":94,"published_at":95,"brief":96},"php2shell-millions-of-attacks-no-confirmed-successful-exploits-yet-5534c9","PHP2Shell: Millions of Attacks, No Confirmed Successful Exploits Yet","2026-10-23T10:52:00+00:00","Millions of PHP2Shell attacks observed targeting critical CVEs, with exploit development ongoing.",{"slug":98,"title":99,"published_at":100,"brief":101},"php2shell-exploit-attempts-hit-millions-as-attackers-try-to-deploy-mirai-malware-9d0cfa","PHP2Shell Exploit Attempts Hit Millions as Attackers Try to Deploy Mirai Malware","2026-10-23T07:40:45+00:00","Attackers attempt to deploy Potassium Mirai botnet variant using PHP2Shell vulnerabilities.",{"slug":103,"title":104,"published_at":105,"brief":106},"reports-of-php-bug-exploitation-attempts-grow-as-experts-downplay-viability-of-e-e6136b","Reports of PHP bug exploitation attempts grow as experts downplay viability of exploits","2026-10-23T04:00:00+00:00","PHP2Shell vulnerabilities see rising exploitation attempts, but experts say most PoCs fail in real-world conditions.",{"slug":108,"title":109,"published_at":110,"brief":111},"china-aligned-bronze-sandcastle-abuses-sandboxie-dll-sideloading-to-deploy-backd-5ff1dd","China-Aligned Bronze Sandcastle Abuses Sandboxie DLL Sideloading to Deploy Backdoors","2026-10-21T12:05:00+00:00","China-aligned Bronze Sandcastle targets Asia\u002FAfrica with Sandboxie DLL sideloading attacks since mid-2025.",{"slug":113,"title":114,"published_at":115,"brief":116},"f5-big-ip-apm-malware-injects-a-php-web-shell-into-memory-evading-disk-scans-88a031","F5 BIG-IP APM Malware Injects a PHP Web Shell Into Memory, Evading Disk Scans","2026-09-09T07:36:49+00:00","Malware injects PHP web shell into memory on F5 BIG-IP APM, evading disk-based detection.",{"slug":118,"title":119,"published_at":120,"brief":121},"hackers-breach-f5-big-ip-apm-devices-to-deploy-linux-rootkit-11f562","Hackers breach F5 BIG-IP APM devices to deploy Linux rootkit","2026-09-08T20:08:55+00:00","Hackers deploy Linux rootkit on F5 BIG-IP APM devices via RCE vulnerability.",{"total":123,"stories":124},4,[125,130,135,140],{"slug":126,"title":127,"published_at":128,"brief":129},"uk-school-estate-hit-by-3am-ransomware-in-suspected-ai-assisted-attack-4fc8c8","UK school estate hit by 3AM ransomware in suspected AI-assisted attack","2026-11-03T14:00:00+00:00","3AM ransomware affiliate targets UK school estate, encrypting 37 machines in suspected AI-assisted attack.",{"slug":131,"title":132,"published_at":133,"brief":134},"fortibleed-targeted-fortigate-firewalls-in-110-million-credential-harvesting-ope-fa20be","FortiBleed Targeted FortiGate Firewalls in 110 Million-Credential Harvesting Operation","2026-06-23T18:20:49+00:00","FortiBleed operation harvests 110 million credentials from FortiGate firewalls.",{"slug":136,"title":137,"published_at":138,"brief":139},"gentlemen-ransomware-uses-multiple-edr-killers-to-disable-defenses-42866a","Gentlemen ransomware uses multiple EDR killers to disable defenses","2026-06-18T22:31:52+00:00","Gentlemen ransomware uses multiple EDR killers to disable defenses.",{"slug":141,"title":142,"published_at":143,"brief":144},"attackers-use-ai-to-automate-edr-evasion-testing-39a733","Attackers Use AI to Automate EDR Evasion Testing","2026-06-03T21:34:07+00:00","Attackers automate EDR evasion testing using Python scripts against major endpoint security products.",[146,149,151,154,156,158,160,162,164,166,168,170,172],{"type":147,"value":148,"article_slug":126,"article_title":127,"published_at":128},"malware","3AM ransomware",{"type":147,"value":150,"article_slug":126,"article_title":127,"published_at":128},"Mimikatz",{"type":152,"value":153,"article_slug":126,"article_title":127,"published_at":128},"mitre_attack","T1003",{"type":147,"value":155,"article_slug":131,"article_title":132,"published_at":133},"forticheck",{"type":147,"value":157,"article_slug":131,"article_title":132,"published_at":133},"FortigateSniffer",{"type":147,"value":159,"article_slug":131,"article_title":132,"published_at":133},"FortiProbe-fast",{"type":147,"value":161,"article_slug":131,"article_title":132,"published_at":133},"HASHBOT",{"type":147,"value":163,"article_slug":136,"article_title":137,"published_at":138},"GentleKiller",{"type":147,"value":165,"article_slug":136,"article_title":137,"published_at":138},"HavocKiller",{"type":147,"value":167,"article_slug":136,"article_title":137,"published_at":138},"HexKiller",{"type":147,"value":169,"article_slug":136,"article_title":137,"published_at":138},"OxideHarvest",{"type":147,"value":171,"article_slug":136,"article_title":137,"published_at":138},"SystemBC",{"type":147,"value":173,"article_slug":136,"article_title":137,"published_at":138},"ThrottleBlood",13,[176,180,183,186,188,191],{"month":177,"reported":178,"affected":179},"2026-06-01",2,3,{"month":181,"reported":178,"affected":182},"2026-07-01",0,{"month":184,"reported":185,"affected":182},"2026-08-01",1,{"month":187,"reported":178,"affected":182},"2026-09-01",{"month":189,"reported":190,"affected":182},"2026-10-01",8,{"month":192,"reported":185,"affected":185},"2026-11-01"]