Killing ill-willed skills: Sophos AI at BSides Sydney
The Sophos AI team presents new research at BSides Sydney
The Sophos AI team presents new research at BSides Sydney
Same logs, two places, overlapping outcomes. It's time to rethink the SIEM vs. XDR question.
Insights from 177 IT and cybersecurity leaders across the financial services sector in 17 countries whose organizations were hit by ransomware in the past year.
Secure the AI-era network by combining high-performance protection, deeper visibility across every environment, and coordinated response that stops fast-moving threats sooner.
Delivering 30 of your top-requested features
Fake job interviews are an established way to target developers
The GOLD OGRE threat group has used AI extensively to develop tools and to orchestrate and execute ransomware operations
A physical penetration test reveals how social engineering, badge security gaps, exposed network access, and everyday human behavior can undermine layers of physical security.
Cyber incidents create both technical and legal challenges, making coordination between DFIR teams and experienced legal counsel essential. This article explores why organizations should establish these relationships before an incident occurs and how a coordinated response can improve forensic investigations, regulatory preparedness, communications, recovery, and overall cyber resilience.
This article was first published on LinkedIn.
It's just hard to measure
SIEM-less security may sound like an escape from traditional SIEM complexity and costs, but the underlying capabilities still have to exist somewhere.
Recent incident response investigations reveal how AI-assisted attackers are chaining web application vulnerabilities, credential theft, privilege escalation, and lateral movement into autonomous intrusion workflows.
A perspective on AI-enabled attacker scale, defender capacity, and the growing need for experienced responders.
The China-based threat group uses DLL sideloading in these attacks
Automated sign-ins used the vendor's Entra application identity to request Microsoft Graph tokens across consenting tenants
No novelty required to be effective