Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Gold Blade doesn’t send phishing emails. Instead, they weaponize resumes and slip past defenses through legit recruitment sites. Sophos threat researcher Morgan Demboski breaks down their stealthy tactics.

In Episode 6 of Corelight DefeNDRs, we delve deeper into the fascinating world of DNS covert channels with Vern Paxson, our chief scientist and co-founder. Continuing from our previous discussion, Vern shares his insights on techniques developed to detect these stealthy channels utilized by intruders to evade security measures. We explore the innovative approach of leveraging time series analysis of DNS lookups, how to distinguish benign traffic from potential threats, and the real-world implications of our findings across significant datasets.

Learn how to implement Microsoft Entra ID Sync in Sophos Central. Ask questions and get expert answers in the Sophos Community.

Learn how to manually create user mailboxes and import mailboxes using CSV files in Sophos Email. Ask questions and get expert answers in the Sophos Community.

As attack surfaces continue to expand, many security teams are finding that traditional detection methods can’t keep up. In this clip, the discussion centers on why legacy security tools struggle in modern environments — from the growing complexity of networks to the sheer volume of alerts teams are expected to investigate. When alerts are handled manually and without sufficient context, it becomes difficult to understand which threats are most critical and how quickly to respond.

Sophos Anti-Exploitation technology in Sophos Endpoint places lightweight integrity guards inside every running process — including malware itself — to shield your applications and keep them behaving as intended, all without affecting performance.