Sophos Active Adversary Report 2026: Identity attacks dominate as threat groups proliferate
Two-thirds of security incidents traced back to identity-related weaknesses as attackers move faster and strike after hours.
Security | Threat Detection | Cyberattacks | DevSecOps | Compliance
The Latest Cybersecurity News & Insights From Around The World
Why Most Companies Don't Catch Internal Threats Until It's Too Late
Every year, businesses lose billions to threats that don't come from hackers on the other side of the world. They come from inside the building. Whether it's financial misconduct, data theft, or simple policy violations that snowball into costly incidents, internal threats are consistently one of the hardest risks to detect and manage.
Your Cyber Resilience Strategy for Unknown Threats
Global cyber attacks increased by approximately 38% in 2025, with organisations experiencing an average of over 1,900 attacks per week. To thrive and survive in this dynamic environment, businesses must move beyond mere security and embrace a holistic strategy of cyber resilience.
Corelight at SC25: A laboratory for securing the fastest conference network
I’ve worked as a threat hunter in several Black Hat Security Conference Network Operations Centers (NOCs) across the globe. So I didn’t expect to be surprised by much when signing on to be a part of the NOC for SCinet—a conference that has the “fastest conference network in the world.” And yet I was surprised by just how diverse the SCinet NOC team was, how collaborative the environment was, and how much we were able to achieve with automation in such a short amount of time.
Sophos Firewall: Configuration Viewer
An overview of the new Sophos Firewall Configuration Viewer - a standalone, browser-based tool that converts firewall configurations into a clear, human-readable format, enhancing your viewing, auditing, documentation, and comparison capabilities. All data is processed locally, so your information remains 100% private. Ask questions and get expert answers in the Sophos Community.
Episode 8 - Enterprise Nervous System: Using Network Signal to Direct Business Strategy
In this episode of Corelight Defenders, I’m joined by Bernard Brantley, Chief Information Security Officer at Corelight, as we delve into the concept of the enterprise nervous system. Bernard shares insights from his extensive experience in network analysis, explaining how organizations can leverage their network traffic data to enhance security and drive business outcomes. We discuss the importance of understanding the interdependencies between assets, processes, and goals, and how security teams can position themselves as integral to business success rather than just risk mitigators.
The 2026 Forecast for AI-Driven Threats
2025 changed the shape of digital risk. In 2026, the impact accelerates. The fastest-growing threats no longer look like traditional attacks. They arrive through apparently legitimate automated access – AI agents, LLM crawlers, and delegated automation interacting directly with revenue-critical systems. They don’t trigger alarms. They quietly extract value, distort pricing logic, and reshape digital economics at scale.
Sophos MDR AI Agents for Triage and Case Investigation
These are just a few, powerful examples of how we're building out the Agentic SOC, driven by human expertise to deliver superior cybersecurity outcomes.
Application Detection and Response Tools: 2026 Buyer's Guide
A: Most were designed for monolithic applications or VMs. They see containers as lightweight VMs rather than ephemeral workloads with unique identity, network, and orchestration patterns. When a pod gets rescheduled across nodes, shares service accounts with other workloads, or communicates over cluster DNS that never touches traditional network monitoring—these tools lose context.
Sophos Central: Configure Peripheral Control policies
Learn how to create Peripheral Control policies along with the many options you can use to configure them. Then learn how to create peripheral exemptions, and some basic troubleshooting tips for any issues you may encounter. Ask questions and get expert answers in the Sophos Community.