Sorry

This feed does not validate.

In addition, interoperability with the widest range of feed readers could be improved by implementing the following recommendations.

Source: https://feeds.feedburner.com/sophos/dgdY

  1. <?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
  2. xmlns:content="http://purl.org/rss/1.0/modules/content/"
  3. xmlns:wfw="http://wellformedweb.org/CommentAPI/"
  4. xmlns:dc="http://purl.org/dc/elements/1.1/"
  5. xmlns:atom="http://www.w3.org/2005/Atom"
  6. xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
  7. xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
  9. xmlns:georss="http://www.georss.org/georss"
  10. xmlns:geo="http://www.w3.org/2003/01/geo/wgs84_pos#"
  11. xmlns:media="http://search.yahoo.com/mrss/"
  12. >
  13.  
  14. <channel>
  15. <title>Sophos News</title>
  16. <atom:link href="https://news.sophos.com/en-us/feed/" rel="self" type="application/rss+xml" />
  17. <link>https://news.sophos.com/en-us/</link>
  18. <description>The Sophos Blog</description>
  19. <lastBuildDate>Thu, 19 Dec 2024 17:11:17 +0000</lastBuildDate>
  20. <language>en-US</language>
  21. <sy:updatePeriod>
  22. hourly </sy:updatePeriod>
  23. <sy:updateFrequency>
  24. 1 </sy:updateFrequency>
  25. <generator>https://wordpress.org/?v=6.7.1</generator>
  26.  
  27. <image>
  28. <url>https://news.sophos.com/wp-content/uploads/2020/01/cropped-sophos.png?w=32</url>
  29. <title>Sophos News</title>
  30. <link>https://news.sophos.com/en-us/</link>
  31. <width>32</width>
  32. <height>32</height>
  33. </image>
  34. <site xmlns="com-wordpress:feed-additions:1">166161023</site> <item>
  35. <title>Phishing platform Rockstar 2FA trips, and “FlowerStorm” picks up the pieces</title>
  36. <link>https://news.sophos.com/en-us/2024/12/19/phishing-platform-rockstar-2fa-trips-and-flowerstorm-picks-up-the-pieces/</link>
  37. <comments>https://news.sophos.com/en-us/2024/12/19/phishing-platform-rockstar-2fa-trips-and-flowerstorm-picks-up-the-pieces/?noamp=mobile#respond</comments>
  39. <dc:creator><![CDATA[gallagherseanm]]></dc:creator>
  40. <pubDate>Thu, 19 Dec 2024 15:11:48 +0000</pubDate>
  41. <category><![CDATA[Security Operations]]></category>
  42. <category><![CDATA[Threat Research]]></category>
  43. <category><![CDATA[CloudFlare]]></category>
  44. <category><![CDATA[featured]]></category>
  45. <category><![CDATA[FlowerStorm]]></category>
  46. <category><![CDATA[legitimate service abuse]]></category>
  47. <category><![CDATA[Phishing]]></category>
  48. <category><![CDATA[phishing-as-a-service]]></category>
  49. <category><![CDATA[Rockstar]]></category>
  50. <category><![CDATA[Rockstar2FA]]></category>
  51. <category><![CDATA[Sophos MDR]]></category>
  52. <guid isPermaLink="false">https://news.sophos.com/en-us/?p=958944</guid>
  53.  
  54. <description><![CDATA[A sudden disruption of a major phishing-as-a-service provider leads to the rise of another…that looks very familiar ]]></description>
  56. <wfw:commentRss>https://news.sophos.com/en-us/2024/12/19/phishing-platform-rockstar-2fa-trips-and-flowerstorm-picks-up-the-pieces/feed/</wfw:commentRss>
  57. <slash:comments>0</slash:comments>
  60. <media:content url="https://news.sophos.com/wp-content/uploads/2024/12/shutterstock_1469287178.jpg?w=230&#38;h=130&#38;crop=1" medium="image" alt="" />
  61. <post-id xmlns="com-wordpress:feed-additions:1">958944</post-id>
  62. <media:thumbnail url="https://news.sophos.com/wp-content/uploads/2024/12/shutterstock_1469287178.jpg" alt="" />
  63. <media:content url="https://news.sophos.com/wp-content/uploads/2024/12/shutterstock_1469287178.jpg" medium="image" alt="">
  64. <media:title type="html">A,Wooden,Acoustic,Guitar,At,Night.,With,Spotlight,For,Your</media:title>
  65. </media:content>
  66.  
  67. <media:content url="https://news.sophos.com/wp-content/uploads/2024/12/rockstar-decoy.png" medium="image" alt="A screenshot of a Rockstar2FA &#034;decoy&#034; page, a fake auto dealer site.">
  68. <media:title type="html">A screenshot of a Rockstar2FA &#034;decoy&#034; page, a fake auto dealer site.</media:title>
  69. </media:content>
  70.  
  71. <media:content url="https://news.sophos.com/wp-content/uploads/2024/12/Rockstar-backend-server-comms.jpg" medium="image" alt="Screen shots of the developer view of Chrome showing web requests sent from a Rockstar2FA phishing portal. ">
  72. <media:title type="html">Screen shots of the developer view of Chrome showing web requests sent from a Rockstar2FA phishing portal. </media:title>
  73. </media:content>
  74.  
  75. <media:content url="https://news.sophos.com/wp-content/uploads/2024/12/RockstarTLDs.png" medium="image" alt="A pie chart showing the distribution of top-level domains the 10 most heavily used domain names were registered with. A third were .ru, a fifth were .com. ">
  76. <media:title type="html">A pie chart showing the distribution of top-level domains the 10 most heavily used domain names were registered with. A third were .ru, a fifth were .com. </media:title>
  77. </media:content>
  78.  
  79. <media:content url="https://news.sophos.com/wp-content/uploads/2024/12/FlowerStorm-detects-by-TLD.jpg" medium="image" alt="A bar chart showing the distribution of TLDs and number of URLs detected per month for Rockstar2FA. The number of .ru domains decreased significantly over time.">
  80. <media:title type="html">A bar chart showing the distribution of TLDs and number of URLs detected per month for Rockstar2FA. The number of .ru domains decreased significantly over time.</media:title>
  81. </media:content>
  82.  
  83. <media:content url="https://news.sophos.com/wp-content/uploads/2024/12/Rockstarerror522.png" medium="image" alt="A screenshot of a failed connection error for a Rockstar decoy page.">
  84. <media:title type="html">A screenshot of a failed connection error for a Rockstar decoy page.</media:title>
  85. </media:content>
  86.  
  87. <media:content url="https://news.sophos.com/wp-content/uploads/2024/12/RockstarOutlookanimate.png" medium="image" alt="A screenshot of an animated Office365 logo for Outlook used by Rockstar&#039;s phishing portal pages.">
  88. <media:title type="html">A screenshot of an animated Office365 logo for Outlook used by Rockstar&#039;s phishing portal pages.</media:title>
  89. </media:content>
  90.  
  91. <media:content url="https://news.sophos.com/wp-content/uploads/2024/12/Failed_connection_Rockstar_backend.png" medium="image" alt="A screenshot of a Chrome developer view of a Rockstar pages.dev phishing portal failing to connect to a backend server.">
  92. <media:title type="html">A screenshot of a Chrome developer view of a Rockstar pages.dev phishing portal failing to connect to a backend server.</media:title>
  93. </media:content>
  94.  
  95. <media:content url="https://news.sophos.com/wp-content/uploads/2024/12/FlowerStormphishnext-php.png" medium="image" alt="A screenshot of data abouit and ">
  96. <media:title type="html">A screenshot of data abouit and </media:title>
  97. </media:content>
  98.  
  99. <media:content url="https://news.sophos.com/wp-content/uploads/2024/12/FlowerStormEntraID-log.png" medium="image" alt="Figure 9: the EnteraID log for a sign-in by the adversary-in-the-middle script on the phishing service’s back-end server.">
  100. <media:title type="html">Figure 9: the EnteraID log for a sign-in by the adversary-in-the-middle script on the phishing service’s back-end server.</media:title>
  101. </media:content>
  102.  
  103. <media:content url="https://news.sophos.com/wp-content/uploads/2024/12/Flowerstorm-same-host-authenticate.png" medium="image" alt="Figure 10: the HTTP header data for a phishing page’s backend server communications on a separate host">
  104. <media:title type="html">Figure 10: the HTTP header data for a phishing page’s backend server communications on a separate host</media:title>
  105. </media:content>
  106.  
  107. <media:content url="https://news.sophos.com/wp-content/uploads/2024/12/FlowerstormDeveloperViewPhishportal.png" medium="image" alt="Figure 11: A developer browser view of the phishing page protectivewearsupplies[.]doclawfederal[.]com/wQBPg/">
  108. <media:title type="html">Figure 11: A developer browser view of the phishing page protectivewearsupplies[.]doclawfederal[.]com/wQBPg/</media:title>
  109. </media:content>
  110.  
  111. <media:content url="https://news.sophos.com/wp-content/uploads/2024/12/rockstardom.png" medium="image" alt="Figure12: The document object model of a Rockstar2FA phishing page ">
  112. <media:title type="html">Figure12: The document object model of a Rockstar2FA phishing page </media:title>
  113. </media:content>
  114.  
  115. <media:content url="https://news.sophos.com/wp-content/uploads/2024/12/OldFlowerDom.png" medium="image" alt="Figure 13: The DOM of an older FlowerStorm phishing page (from June 2024)">
  116. <media:title type="html">Figure 13: The DOM of an older FlowerStorm phishing page (from June 2024)</media:title>
  117. </media:content>
  118.  
  119. <media:content url="https://news.sophos.com/wp-content/uploads/2024/12/NewFlowerDom.png" medium="image" alt="Figure 14: The DOM of a newer FlowerStorm phishing page; the algorithm generating the title and function names uses a combination of two botanical-themed words">
  120. <media:title type="html">Figure 14: The DOM of a newer FlowerStorm phishing page; the algorithm generating the title and function names uses a combination of two botanical-themed words</media:title>
  121. </media:content>
  122.  
  123. <media:content url="https://news.sophos.com/wp-content/uploads/2024/12/RS_vs_FS_detects.jpg" medium="image" alt="Figure 15: A chart plotting daily page detections for Rockstar2FA and FlowerStorm through the end of November 2024 ">
  124. <media:title type="html">Figure 15: A chart plotting daily page detections for Rockstar2FA and FlowerStorm through the end of November 2024 </media:title>
  125. </media:content>
  126.  
  127. <media:content url="https://news.sophos.com/wp-content/uploads/2024/12/FlowerStormTargeting.png" medium="image" alt="Figure 16: The ten countries most targeted by attackers using FlowerStorm, based on Sophos detections">
  128. <media:title type="html">Figure 16: The ten countries most targeted by attackers using FlowerStorm, based on Sophos detections</media:title>
  129. </media:content>
  130.  
  131. <media:content url="https://news.sophos.com/wp-content/uploads/2024/12/FSindustrytargeting.png" medium="image" alt="Figure 17: The ten business sectors most targeted by attackers using FlowerStorm">
  132. <media:title type="html">Figure 17: The ten business sectors most targeted by attackers using FlowerStorm</media:title>
  133. </media:content>
  134. </item>
  135. <item>
  136. <title>Sophos ranked #1 overall for Firewall, MDR, and EDR in the G2 Winter 2025 Reports</title>
  137. <link>https://news.sophos.com/en-us/2024/12/18/sophos-ranked-1-overall-for-firewall-mdr-and-edr-in-the-g2-winter-2025-reports/</link>
  138. <comments>https://news.sophos.com/en-us/2024/12/18/sophos-ranked-1-overall-for-firewall-mdr-and-edr-in-the-g2-winter-2025-reports/?noamp=mobile#respond</comments>
  140. <dc:creator><![CDATA[rajansanhotra]]></dc:creator>
  141. <pubDate>Wed, 18 Dec 2024 10:21:54 +0000</pubDate>
  142. <category><![CDATA[Products & Services]]></category>
  143. <category><![CDATA[EDR]]></category>
  144. <category><![CDATA[Endpoint]]></category>
  145. <category><![CDATA[Firewall]]></category>
  146. <category><![CDATA[G2]]></category>
  147. <category><![CDATA[MDR]]></category>
  148. <category><![CDATA[Sophos EDR]]></category>
  149. <category><![CDATA[Sophos Endpoint]]></category>
  150. <category><![CDATA[Sophos Firewall]]></category>
  151. <category><![CDATA[Sophos MDR]]></category>
  152. <category><![CDATA[Sophos XDR]]></category>
  153. <category><![CDATA[XDR]]></category>
  154. <guid isPermaLink="false">https://news.sophos.com/en-us/?p=958917</guid>
  155.  
  156. <description><![CDATA[Sophos was also ranked the #1 solution in 36 individual reports spanning the Antivirus, EDR, Endpoint Protection Suites, XDR, Firewall, and MDR markets.]]></description>
  158. <wfw:commentRss>https://news.sophos.com/en-us/2024/12/18/sophos-ranked-1-overall-for-firewall-mdr-and-edr-in-the-g2-winter-2025-reports/feed/</wfw:commentRss>
  159. <slash:comments>0</slash:comments>
  162. <media:content url="https://news.sophos.com/wp-content/uploads/2024/12/Sophos-ranked-1-overall-for-Firewall-MDR-and-EDR-in-the-G2-Winter-2025-Reports-1.png?w=230&#38;h=130&#38;crop=1" medium="image" alt="Sophos ranked #1 overall for Firewall, MDR, and EDR in the G2 Winter 2025 Reports" />
  163. <post-id xmlns="com-wordpress:feed-additions:1">958917</post-id>
  164. <media:thumbnail url="https://news.sophos.com/wp-content/uploads/2024/12/Sophos-ranked-1-overall-for-Firewall-MDR-and-EDR-in-the-G2-Winter-2025-Reports-1.png" alt="Sophos ranked #1 overall for Firewall, MDR, and EDR in the G2 Winter 2025 Reports" />
  165. <media:content url="https://news.sophos.com/wp-content/uploads/2024/12/Sophos-ranked-1-overall-for-Firewall-MDR-and-EDR-in-the-G2-Winter-2025-Reports-1.png" medium="image" alt="Sophos ranked #1 overall for Firewall, MDR, and EDR in the G2 Winter 2025 Reports">
  166. <media:title type="html">Sophos ranked #1 overall for Firewall, MDR, and EDR in the G2 Winter 2025 Reports</media:title>
  167. </media:content>
  168. </item>
  169. <item>
  170. <title>Year in Review 2024: The major headlines and moments from Sophos this year</title>
  171. <link>https://news.sophos.com/en-us/2024/12/17/year-in-review-2024-the-major-headlines-and-moments-from-sophos-this-year/</link>
  172. <comments>https://news.sophos.com/en-us/2024/12/17/year-in-review-2024-the-major-headlines-and-moments-from-sophos-this-year/?noamp=mobile#respond</comments>
  174. <dc:creator><![CDATA[Doug Aamoth]]></dc:creator>
  175. <pubDate>Tue, 17 Dec 2024 13:00:15 +0000</pubDate>
  176. <category><![CDATA[Products & Services]]></category>
  177. <category><![CDATA[Sophos Endpoint]]></category>
  178. <category><![CDATA[Sophos MDR]]></category>
  179. <category><![CDATA[Sophos X-Ops]]></category>
  180. <category><![CDATA[Sophos XDR]]></category>
  181. <guid isPermaLink="false">https://news.sophos.com/en-us/?p=958865</guid>
  182.  
  183. <description><![CDATA[From cyber attacks across the geopolitical landscapes, to product updates that help small businesses, Sophos was there in 2024.]]></description>
  185. <wfw:commentRss>https://news.sophos.com/en-us/2024/12/17/year-in-review-2024-the-major-headlines-and-moments-from-sophos-this-year/feed/</wfw:commentRss>
  186. <slash:comments>0</slash:comments>
  189. <media:content url="https://news.sophos.com/wp-content/uploads/2024/12/sophos-wews-blog-banner-year-in-review-1200x628px-01.png?w=230&#38;h=130&#38;crop=1" medium="image" alt="sophos-wews-blog-banner-year-in-review-1200x628px-01" />
  190. <post-id xmlns="com-wordpress:feed-additions:1">958865</post-id>
  191. <media:thumbnail url="https://news.sophos.com/wp-content/uploads/2024/12/sophos-wews-blog-banner-year-in-review-1200x628px-01.png" alt="sophos-wews-blog-banner-year-in-review-1200x628px-01" />
  192. <media:content url="https://news.sophos.com/wp-content/uploads/2024/12/sophos-wews-blog-banner-year-in-review-1200x628px-01.png" medium="image" alt="sophos-wews-blog-banner-year-in-review-1200x628px-01">
  193. <media:title type="html">sophos-wews-blog-banner-year-in-review-1200x628px-01</media:title>
  194. </media:content>
  195. </item>
  196. <item>
  197. <title>DeepSpeed: a tuning tool for large language models</title>
  198. <link>https://news.sophos.com/en-us/2024/12/13/deepspeed-a-tuning-tool-for-large-language-models/</link>
  199. <comments>https://news.sophos.com/en-us/2024/12/13/deepspeed-a-tuning-tool-for-large-language-models/?noamp=mobile#respond</comments>
  201. <dc:creator><![CDATA[gallagherseanm]]></dc:creator>
  202. <pubDate>Fri, 13 Dec 2024 11:30:50 +0000</pubDate>
  203. <category><![CDATA[AI Research]]></category>
  204. <category><![CDATA[deepspeed]]></category>
  205. <category><![CDATA[featured]]></category>
  206. <category><![CDATA[LLM]]></category>
  207. <category><![CDATA[LLM tuning]]></category>
  208. <guid isPermaLink="false">https://news.sophos.com/en-us/?p=958840</guid>
  209.  
  210. <description><![CDATA[SophosAI’s framework for upgrading the performance of LLMs for cybersecurity tasks (or any other specific task) is now open source. ]]></description>
  212. <wfw:commentRss>https://news.sophos.com/en-us/2024/12/13/deepspeed-a-tuning-tool-for-large-language-models/feed/</wfw:commentRss>
  213. <slash:comments>0</slash:comments>
  216. <media:content url="https://news.sophos.com/wp-content/uploads/2024/12/shutterstock_asset-generation-6dc4f763-f8a7-4dff-a56b-92736d8c8d6c-1_edited-e1734048709973.jpeg?w=230&#38;h=130&#38;crop=1" medium="image" alt="" />
  217. <post-id xmlns="com-wordpress:feed-additions:1">958840</post-id>
  218. <media:thumbnail url="https://news.sophos.com/wp-content/uploads/2024/12/shutterstock_asset-generation-6dc4f763-f8a7-4dff-a56b-92736d8c8d6c-1_edited-e1734048709973.jpeg" alt="" />
  219. <media:content url="https://news.sophos.com/wp-content/uploads/2024/12/shutterstock_asset-generation-6dc4f763-f8a7-4dff-a56b-92736d8c8d6c-1_edited-e1734048709973.jpeg" medium="image" alt="">
  220. <media:title type="html">shutterstock_asset-generation-6dc4f763-f8a7-4dff-a56b-92736d8c8d6c-1_edited</media:title>
  221. </media:content>
  222.  
  223. <media:content url="https://news.sophos.com/wp-content/uploads/2024/12/Slide1.jpeg" medium="image" alt="" />
  224. </item>
  225. <item>
  226. <title>The Bite from Inside: The Sophos Active Adversary Report</title>
  227. <link>https://news.sophos.com/en-us/2024/12/12/active-adversary-report-2024-12/</link>
  228. <comments>https://news.sophos.com/en-us/2024/12/12/active-adversary-report-2024-12/?noamp=mobile#respond</comments>
  230. <dc:creator><![CDATA[Angela Gunn]]></dc:creator>
  231. <pubDate>Thu, 12 Dec 2024 14:00:56 +0000</pubDate>
  232. <category><![CDATA[Security Operations]]></category>
  233. <category><![CDATA[Threat Research]]></category>
  234. <category><![CDATA[active adversary]]></category>
  235. <category><![CDATA[Active Adversary Report]]></category>
  236. <category><![CDATA[featured]]></category>
  237. <category><![CDATA[incident response]]></category>
  238. <category><![CDATA[IR]]></category>
  239. <category><![CDATA[LoLBINs]]></category>
  240. <category><![CDATA[MDR]]></category>
  241. <category><![CDATA[RDP]]></category>
  242. <guid isPermaLink="false">https://news.sophos.com/en-us/?p=958790</guid>
  243.  
  244. <description><![CDATA[A sea change in available data fuels fresh insights from the first half of 2024]]></description>
  246. <wfw:commentRss>https://news.sophos.com/en-us/2024/12/12/active-adversary-report-2024-12/feed/</wfw:commentRss>
  247. <slash:comments>0</slash:comments>
  250. <media:content url="https://news.sophos.com/wp-content/uploads/2024/12/shutterstock_2154147129.jpg?w=230&#38;h=130&#38;crop=1" medium="image" alt="Active Adversary Report" />
  251. <post-id xmlns="com-wordpress:feed-additions:1">958790</post-id>
  252. <media:thumbnail url="https://news.sophos.com/wp-content/uploads/2024/12/shutterstock_2154147129.jpg" alt="Active Adversary Report" />
  253. <media:content url="https://news.sophos.com/wp-content/uploads/2024/12/shutterstock_2154147129.jpg" medium="image" alt="Active Adversary Report">
  254. <media:title type="html">Active Adversary Report</media:title>
  255. </media:content>
  256.  
  257. <media:content url="https://news.sophos.com/wp-content/uploads/2024/12/aar2412-01.png" medium="image" alt="A bar chart showing an increase in LOLbins in the span between 2021 and the first half of 2024; the totals increased from just over 100 to nearly 190">
  258. <media:title type="html">A bar chart showing an increase in LOLbins in the span between 2021 and the first half of 2024; the totals increased from just over 100 to nearly 190</media:title>
  259. </media:content>
  260.  
  261. <media:content url="https://news.sophos.com/wp-content/uploads/2024/12/aar2412-02.png" medium="image" alt="A stacked bar chart showing the relationship between artifact and LOLbin counts between 2021 and the first half of 2024, as described in text">
  262. <media:title type="html">A stacked bar chart showing the relationship between artifact and LOLbin counts between 2021 and the first half of 2024, as described in text</media:title>
  263. </media:content>
  264.  
  265. <media:content url="https://news.sophos.com/wp-content/uploads/2024/12/aar2412-03.png" medium="image" alt="A bar chart showing the prevalence of the top 29 LOLbins noted in the first half of 2024, ranging from RDP at just under 90 percent to findstr.exe at 10 percent">
  266. <media:title type="html">A bar chart showing the prevalence of the top 29 LOLbins noted in the first half of 2024, ranging from RDP at just under 90 percent to findstr.exe at 10 percent</media:title>
  267. </media:content>
  268.  
  269. <media:content url="https://news.sophos.com/wp-content/uploads/2024/12/aar2412-04.png" medium="image" alt="A table showing the changes in prevalence of the top 29 1H24 LOLbins between 2023 and the first half of the year; all but five of the listed LOLbins increased in frequency of usage">
  270. <media:title type="html">A table showing the changes in prevalence of the top 29 1H24 LOLbins between 2023 and the first half of the year; all but five of the listed LOLbins increased in frequency of usage</media:title>
  271. </media:content>
  272.  
  273. <media:content url="https://news.sophos.com/wp-content/uploads/2024/12/aar2412-05.png" medium="image" alt="A table showing RDP usage in attacks in 2022, 2023, and the first half of 2024">
  274. <media:title type="html">A table showing RDP usage in attacks in 2022, 2023, and the first half of 2024</media:title>
  275. </media:content>
  276.  
  277. <media:content url="https://news.sophos.com/wp-content/uploads/2024/12/aar2412-06.png" medium="image" alt="Five funnel-shaped charts showing the prevalence of ransomware attributions between 2020 and the first half of 2024; in this format they resemble different types of trees as described in text">
  278. <media:title type="html">Five funnel-shaped charts showing the prevalence of ransomware attributions between 2020 and the first half of 2024; in this format they resemble different types of trees as described in text</media:title>
  279. </media:content>
  280.  
  281. <media:content url="https://news.sophos.com/wp-content/uploads/2024/12/aar2412-07.png" medium="image" alt="A table showing the root causes of 1H24 cases for the entire report, for IR&#039;s portion of the data, and for MDR&#039;s portion of the data">
  282. <media:title type="html">A table showing the root causes of 1H24 cases for the entire report, for IR&#039;s portion of the data, and for MDR&#039;s portion of the data</media:title>
  283. </media:content>
  284.  
  285. <media:content url="https://news.sophos.com/wp-content/uploads/2024/12/aar2412-08.png" medium="image" alt="A table showing changes in artifact prevalence in AAR cases from 2021 to the first half of 2024">
  286. <media:title type="html">A table showing changes in artifact prevalence in AAR cases from 2021 to the first half of 2024</media:title>
  287. </media:content>
  288.  
  289. <media:content url="https://news.sophos.com/wp-content/uploads/2024/12/aar2412-a1.png" medium="image" alt="A world map showing locations in which cases appearing in this report occurred">
  290. <media:title type="html">A world map showing locations in which cases appearing in this report occurred</media:title>
  291. </media:content>
  292. </item>
  293. <item>
  294. <title>Sophos excels in the 2024 MITRE ATT&#038;CK® Evaluations: Enterprise</title>
  295. <link>https://news.sophos.com/en-us/2024/12/11/sophos-excels-in-the-2024-mitre-attck-evaluations-enterprise/</link>
  296. <comments>https://news.sophos.com/en-us/2024/12/11/sophos-excels-in-the-2024-mitre-attck-evaluations-enterprise/?noamp=mobile#respond</comments>
  298. <dc:creator><![CDATA[rajansanhotra]]></dc:creator>
  299. <pubDate>Wed, 11 Dec 2024 15:55:55 +0000</pubDate>
  300. <category><![CDATA[Products & Services]]></category>
  301. <category><![CDATA[Security Operations]]></category>
  302. <category><![CDATA[featured]]></category>
  303. <category><![CDATA[MITRE ATT&CK]]></category>
  304. <category><![CDATA[Sophos EDR]]></category>
  305. <category><![CDATA[Sophos Endpoint]]></category>
  306. <category><![CDATA[Sophos XDR]]></category>
  307. <guid isPermaLink="false">https://news.sophos.com/en-us/?p=958700</guid>
  308.  
  309. <description><![CDATA[Results from the latest ATT&#38;CK Evaluations for endpoint detection and response solutions.]]></description>
  311. <wfw:commentRss>https://news.sophos.com/en-us/2024/12/11/sophos-excels-in-the-2024-mitre-attck-evaluations-enterprise/feed/</wfw:commentRss>
  312. <slash:comments>0</slash:comments>
  315. <media:content url="https://news.sophos.com/wp-content/uploads/2024/12/Sophos-excels-in-the-2024-MITRE-ATTCK®-Evaluations-Enterprise-3.png?w=230&#38;h=130&#38;crop=1" medium="image" alt="Sophos excels in the 2024 MITRE ATT&amp;CK® Evaluations Enterprise" />
  316. <post-id xmlns="com-wordpress:feed-additions:1">958700</post-id>
  317. <media:thumbnail url="https://news.sophos.com/wp-content/uploads/2024/12/Sophos-excels-in-the-2024-MITRE-ATTCK®-Evaluations-Enterprise-3.png" alt="Sophos excels in the 2024 MITRE ATT&#38;CK® Evaluations Enterprise" />
  318. <media:content url="https://news.sophos.com/wp-content/uploads/2024/12/Sophos-excels-in-the-2024-MITRE-ATTCK®-Evaluations-Enterprise-3.png" medium="image" alt="Sophos excels in the 2024 MITRE ATT&#38;CK® Evaluations Enterprise">
  319. <media:title type="html">Sophos excels in the 2024 MITRE ATT&#38;CK® Evaluations Enterprise</media:title>
  320. </media:content>
  321.  
  322. <media:content url="https://news.sophos.com/wp-content/uploads/2024/12/Evaluation-particpants.png" medium="image" alt="MITRE ATT&#038;CK® Evaluation participants">
  323. <media:title type="html">MITRE ATT&#038;CK® Evaluation participants</media:title>
  324. </media:content>
  325.  
  326. <media:content url="https://news.sophos.com/wp-content/uploads/2024/12/vendor-performance.png" medium="image" alt="MITRE ATT&#038;CK Evaluation vendor performance">
  327. <media:title type="html">MITRE ATT&#038;CK Evaluation vendor performance</media:title>
  328. </media:content>
  329. </item>
  330. <item>
  331. <title>Keeping it real: Sophos and the 2024 MITRE ATT&#038;CK Evaluations: Enterprise</title>
  332. <link>https://news.sophos.com/en-us/2024/12/11/keeping-it-real-sophos-and-the-2024-mitre-attck-evaluations-enterprise/</link>
  333. <comments>https://news.sophos.com/en-us/2024/12/11/keeping-it-real-sophos-and-the-2024-mitre-attck-evaluations-enterprise/?noamp=mobile#comments</comments>
  335. <dc:creator><![CDATA[Michael Wood]]></dc:creator>
  336. <pubDate>Wed, 11 Dec 2024 15:35:22 +0000</pubDate>
  337. <category><![CDATA[Threat Research]]></category>
  338. <category><![CDATA[featured]]></category>
  339. <category><![CDATA[MITRE]]></category>
  340. <category><![CDATA[MITRE ATT&CK]]></category>
  341. <category><![CDATA[Ransomware]]></category>
  342. <category><![CDATA[Sophos X-Ops]]></category>
  343. <guid isPermaLink="false">https://news.sophos.com/en-us/?p=958764</guid>
  344.  
  345. <description><![CDATA[Sophos X-Ops looks at the realism of this year’s MITRE ATT&#38;CK Evaluations]]></description>
  347. <wfw:commentRss>https://news.sophos.com/en-us/2024/12/11/keeping-it-real-sophos-and-the-2024-mitre-attck-evaluations-enterprise/feed/</wfw:commentRss>
  348. <slash:comments>1</slash:comments>
  351. <media:content url="https://news.sophos.com/wp-content/uploads/2024/12/shutterstock_2229463409.jpg?w=230&#38;h=130&#38;crop=1" medium="image" alt="White Grey Virtual reality Headset isolated on white background" />
  352. <post-id xmlns="com-wordpress:feed-additions:1">958764</post-id>
  353. <media:thumbnail url="https://news.sophos.com/wp-content/uploads/2024/12/shutterstock_2229463409.jpg" alt="White Grey Virtual reality Headset isolated on white background" />
  354. <media:content url="https://news.sophos.com/wp-content/uploads/2024/12/shutterstock_2229463409.jpg" medium="image" alt="White Grey Virtual reality Headset isolated on white background">
  355. <media:title type="html">White,Grey,Virtual,Reality,Headset,Isolated,On,White,Background</media:title>
  356. </media:content>
  357.  
  358. <media:content url="https://news.sophos.com/wp-content/uploads/2024/12/image1.png" medium="image" alt="A screenshot of a dashboard showing commands which establish persistence via &#039;ZoomHelperTool.plist&#039;">
  359. <media:title type="html">A screenshot of a dashboard showing commands which establish persistence via &#039;ZoomHelperTool.plist&#039;</media:title>
  360. </media:content>
  361.  
  362. <media:content url="https://news.sophos.com/wp-content/uploads/2024/12/image2.png" medium="image" alt="A screenshot of disassembled code">
  363. <media:title type="html">A screenshot of disassembled code</media:title>
  364. </media:content>
  365.  
  366. <media:content url="https://news.sophos.com/wp-content/uploads/2024/12/image3.png" medium="image" alt="A screenshot of disassembled code">
  367. <media:title type="html">A screenshot of disassembled code</media:title>
  368. </media:content>
  369.  
  370. <media:content url="https://news.sophos.com/wp-content/uploads/2024/12/image4.jpeg" medium="image" alt="A screenshot of a command window showing a symlink for msverload.dll">
  371. <media:title type="html">A screenshot of a command window showing a symlink for msverload.dll</media:title>
  372. </media:content>
  373.  
  374. <media:content url="https://news.sophos.com/wp-content/uploads/2024/12/image5.png" medium="image" alt="A screenshot of disassembled code">
  375. <media:title type="html">A screenshot of disassembled code</media:title>
  376. </media:content>
  377.  
  378. <media:content url="https://news.sophos.com/wp-content/uploads/2024/12/image6.png" medium="image" alt="A screenshot of a dashboard, showing detection of exfiltration">
  379. <media:title type="html">A screenshot of a dashboard, showing detection of exfiltration</media:title>
  380. </media:content>
  381.  
  382. <media:content url="https://news.sophos.com/wp-content/uploads/2024/12/image7.png" medium="image" alt="A screenshot of disassembled code">
  383. <media:title type="html">A screenshot of disassembled code</media:title>
  384. </media:content>
  385.  
  386. <media:content url="https://news.sophos.com/wp-content/uploads/2024/12/image8.png" medium="image" alt="A screenshot of a dashboard, with a list of commands to resize shadowstorage">
  387. <media:title type="html">A screenshot of a dashboard, with a list of commands to resize shadowstorage</media:title>
  388. </media:content>
  389.  
  390. <media:content url="https://news.sophos.com/wp-content/uploads/2024/12/image9.png" medium="image" alt="A screenshot of a dashboard, showing a list of executed net stop commands for various services">
  391. <media:title type="html">A screenshot of a dashboard, showing a list of executed net stop commands for various services</media:title>
  392. </media:content>
  393.  
  394. <media:content url="https://news.sophos.com/wp-content/uploads/2024/12/image10.png" medium="image" alt="A screenshot of a dashboard showing that cmd.exe was executed during an RDP session">
  395. <media:title type="html">A screenshot of a dashboard showing that cmd.exe was executed during an RDP session</media:title>
  396. </media:content>
  397.  
  398. <media:content url="https://news.sophos.com/wp-content/uploads/2024/12/image11.png" medium="image" alt="A screenshot of disassembled code">
  399. <media:title type="html">A screenshot of disassembled code</media:title>
  400. </media:content>
  401.  
  402. <media:content url="https://news.sophos.com/wp-content/uploads/2024/12/image12.png" medium="image" alt="A screenshot of text (&#039;thumbprint information&#039;) from CryptoGuard">
  403. <media:title type="html">A screenshot of text (&#039;thumbprint information&#039;) from CryptoGuard</media:title>
  404. </media:content>
  405. </item>
  406. <item>
  407. <title>December Patch Tuesday arrives bearing 71 gifts</title>
  408. <link>https://news.sophos.com/en-us/2024/12/11/december-patch-tuesday-arrives-bearing-71-gifts/</link>
  409. <comments>https://news.sophos.com/en-us/2024/12/11/december-patch-tuesday-arrives-bearing-71-gifts/?noamp=mobile#respond</comments>
  411. <dc:creator><![CDATA[Angela Gunn]]></dc:creator>
  412. <pubDate>Wed, 11 Dec 2024 08:00:38 +0000</pubDate>
  413. <category><![CDATA[Threat Research]]></category>
  414. <category><![CDATA[featured]]></category>
  415. <category><![CDATA[Microsoft]]></category>
  416. <category><![CDATA[Patch Tuesday]]></category>
  417. <category><![CDATA[RDP]]></category>
  418. <category><![CDATA[Windows]]></category>
  419. <guid isPermaLink="false">https://news.sophos.com/en-us/?p=958752</guid>
  420.  
  421. <description><![CDATA[Seventeen Critical-severity CVEs ready to deck your halls; also, new blog guidance for Windows Server admins]]></description>
  423. <wfw:commentRss>https://news.sophos.com/en-us/2024/12/11/december-patch-tuesday-arrives-bearing-71-gifts/feed/</wfw:commentRss>
  424. <slash:comments>0</slash:comments>
  427. <media:content url="https://news.sophos.com/wp-content/uploads/2024/12/shutterstock_517169110.jpg?w=230&#38;h=130&#38;crop=1" medium="image" alt="martes de parches" />
  428. <post-id xmlns="com-wordpress:feed-additions:1">958752</post-id>
  429. <media:thumbnail url="https://news.sophos.com/wp-content/uploads/2024/12/shutterstock_517169110.jpg" alt="martes de parches" />
  430. <media:content url="https://news.sophos.com/wp-content/uploads/2024/12/shutterstock_517169110.jpg" medium="image" alt="martes de parches">
  431. <media:title type="html">martes de parches</media:title>
  432. </media:content>
  433.  
  434. <media:content url="https://news.sophos.com/wp-content/uploads/2024/12/pt2412-01.png" medium="image" alt="A bar chart showing the severities of the issues addressed in the December 2024 Patch Tuesday release, sorted by impact. Information duplicated in text.">
  435. <media:title type="html">A bar chart showing the severities of the issues addressed in the December 2024 Patch Tuesday release, sorted by impact. Information duplicated in text.</media:title>
  436. </media:content>
  437.  
  438. <media:content url="https://news.sophos.com/wp-content/uploads/2024/12/pt2412-02.png" medium="image" alt="A bar chart showing the severeities of all patches in the December 2024 release, sorted by product family. Information also covered in text.">
  439. <media:title type="html">A bar chart showing the severeities of all patches in the December 2024 release, sorted by product family. Information also covered in text.</media:title>
  440. </media:content>
  441.  
  442. <media:content url="https://news.sophos.com/wp-content/uploads/2024/12/pt2412-03.png" medium="image" alt="A bar chart showing the cumulative totals for all Patch Tuesday releases in 2024. Highlights covered in text.">
  443. <media:title type="html">A bar chart showing the cumulative totals for all Patch Tuesday releases in 2024. Highlights covered in text.</media:title>
  444. </media:content>
  445.  
  446. <media:content url="https://news.sophos.com/wp-content/uploads/2024/12/pt2412-04.png" medium="image" alt="A bar chart showing the patch counts for each month from January 202-December 2024; highlights covered in text">
  447. <media:title type="html">A bar chart showing the patch counts for each month from January 202-December 2024; highlights covered in text</media:title>
  448. </media:content>
  449. </item>
  450. <item>
  451. <title>Network security best practices for the holidays</title>
  452. <link>https://news.sophos.com/en-us/2024/12/10/network-security-best-practices-for-the-holidays/</link>
  453. <comments>https://news.sophos.com/en-us/2024/12/10/network-security-best-practices-for-the-holidays/?noamp=mobile#respond</comments>
  455. <dc:creator><![CDATA[Chris McCormack]]></dc:creator>
  456. <pubDate>Tue, 10 Dec 2024 20:19:47 +0000</pubDate>
  457. <category><![CDATA[Products & Services]]></category>
  458. <category><![CDATA[Firewall]]></category>
  459. <category><![CDATA[network]]></category>
  460. <guid isPermaLink="false">https://news.sophos.com/en-us/?p=958738</guid>
  461.  
  462. <description><![CDATA[Tips to better protect your network while you take some well-deserved time off.]]></description>
  464. <wfw:commentRss>https://news.sophos.com/en-us/2024/12/10/network-security-best-practices-for-the-holidays/feed/</wfw:commentRss>
  465. <slash:comments>0</slash:comments>
  468. <media:content url="https://news.sophos.com/wp-content/uploads/2024/12/Shutterstock_768302194.jpg?w=230&#38;h=130&#38;crop=1" medium="image" alt="Shutterstock_768302194" />
  469. <post-id xmlns="com-wordpress:feed-additions:1">958738</post-id>
  470. <media:thumbnail url="https://news.sophos.com/wp-content/uploads/2024/12/Shutterstock_768302194.jpg" alt="Shutterstock_768302194" />
  471. <media:content url="https://news.sophos.com/wp-content/uploads/2024/12/Shutterstock_768302194.jpg" medium="image" alt="Shutterstock_768302194">
  472. <media:title type="html">Shutterstock_768302194</media:title>
  473. </media:content>
  474. </item>
  475. <item>
  476. <title>Sophos AI to present on how to defang malicious AI models at Black Hat Europe</title>
  477. <link>https://news.sophos.com/en-us/2024/12/10/sophos-ai-to-present-on-how-to-defang-malicious-ai-models-at-black-hat-europe/</link>
  478. <comments>https://news.sophos.com/en-us/2024/12/10/sophos-ai-to-present-on-how-to-defang-malicious-ai-models-at-black-hat-europe/?noamp=mobile#respond</comments>
  480. <dc:creator><![CDATA[gallagherseanm]]></dc:creator>
  481. <pubDate>Tue, 10 Dec 2024 15:35:16 +0000</pubDate>
  482. <category><![CDATA[AI Research]]></category>
  483. <category><![CDATA[AI Trojans]]></category>
  484. <category><![CDATA[featured]]></category>
  485. <category><![CDATA[LLM]]></category>
  486. <guid isPermaLink="false">https://news.sophos.com/en-us/?p=958735</guid>
  487.  
  488. <description><![CDATA[“LLMbotomy” research reveals how Trojans can be injected into Large Language Models, and how to disarm them.]]></description>
  490. <wfw:commentRss>https://news.sophos.com/en-us/2024/12/10/sophos-ai-to-present-on-how-to-defang-malicious-ai-models-at-black-hat-europe/feed/</wfw:commentRss>
  491. <slash:comments>0</slash:comments>
  494. <media:content url="https://news.sophos.com/wp-content/uploads/2022/02/shutterstock_389760973.jpg?w=230&#38;h=130&#38;crop=1" medium="image" alt="" />
  495. <post-id xmlns="com-wordpress:feed-additions:1">958735</post-id>
  496. <media:thumbnail url="https://news.sophos.com/wp-content/uploads/2022/02/shutterstock_389760973.jpg" alt="" />
  497. <media:content url="https://news.sophos.com/wp-content/uploads/2022/02/shutterstock_389760973.jpg" medium="image" alt="">
  498. <media:title type="html">Flat,Line,Design,Website,Banner,Of,Learning,Process,,Brain,Process,</media:title>
  499. </media:content>
  500. </item>
  501. </channel>
  502. </rss>
  503.  

Home · About · News · Docs · Terms

 
Copyright © 2002-9 Sam Ruby, Mark Pilgrim, Joseph Walton, and Phil Ringnalda