Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Get started with the new REST APIs in Sophos Firewall v23. Learn how to enable API access, authenticate requests with API keys, import the OpenAPI specification into Postman, and use the API to create and manage firewall objects. Ask questions and get expert answers in the Sophos Community.

Welcome to the recording of our recent webinar “One Breach Away: Why Managed Devices Are the New Perimeter for AI, Finance and Healthcare Data.” In this session, our experts discuss how organizations can secure access to business applications, sensitive data, and AI tools by making device security a core part of their identity and access strategy. As employees connect from personal devices, remote environments, and multiple endpoints, ensuring device compliance and security posture has become critical for protecting enterprise data.

Is your AI compliance up to par? Anthropic's deputy CISO reveals that Claude Cowork activity isn't captured in compliance logs. If you're in a regulated EMEA sector, DORA's ICT logging and the EU AI Act's obligations are here. Relying on a self-configured OTel stream isn't enough for formal audits. Stay informed about data boundaries and privacy reviews before enabling streams.

An AI agent that drifts from your intent looks exactly like an insider attack: legitimate credentials, sanctioned tools, plausible actions, at machine speed. In this episode, we break down Anthropic's "Zero Risk Isn't the Job" CISO guide: a four-question review framework, seven vendor-neutral controls, and why egress allowlisting is the strongest defense against prompt injection. Plus: the Claude Opus 4.5 upgrade that had an incident-response agent recruit another agent, and why agentic AI needs continuous adversarial exposure validation.