Sorry

This feed does not validate.

In addition, interoperability with the widest range of feed readers could be improved by implementing the following recommendation.

Source: https://news.sophos.com/feed/

  1. <?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
  2. xmlns:content="http://purl.org/rss/1.0/modules/content/"
  3. xmlns:wfw="http://wellformedweb.org/CommentAPI/"
  4. xmlns:dc="http://purl.org/dc/elements/1.1/"
  5. xmlns:atom="http://www.w3.org/2005/Atom"
  6. xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
  7. xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
  8. xmlns:media="http://search.yahoo.com/mrss/"
  9. >
  10.  
  11. <channel>
  12. <title>Sophos News</title>
  13. <atom:link href="https://news.sophos.com/en-us/feed/" rel="self" type="application/rss+xml" />
  14. <link>https://news.sophos.com/en-us/</link>
  15. <description>The Sophos Blog</description>
  16. <lastBuildDate>Fri, 29 Aug 2025 13:37:35 +0000</lastBuildDate>
  17. <language>en-US</language>
  18. <sy:updatePeriod>
  19. hourly </sy:updatePeriod>
  20. <sy:updateFrequency>
  21. 1 </sy:updateFrequency>
  22. <generator>https://wordpress.org/?v=6.8.2</generator>
  23.  
  24. <image>
  25. <url>https://news.sophos.com/wp-content/uploads/2025/08/sophos-icon-512x512-1.png?w=32</url>
  26. <title>Sophos News</title>
  27. <link>https://news.sophos.com/en-us/</link>
  28. <width>32</width>
  29. <height>32</height>
  30. </image>
  31. <site xmlns="com-wordpress:feed-additions:1">166161023</site> <item>
  32. <title>Empowering Rural Education: Sophos India’s Volunteering Initiative</title>
  33. <link>https://news.sophos.com/en-us/2025/08/29/empowering-rural-education-sophos-indias-volunteering-initiative/</link>
  34. <comments>https://news.sophos.com/en-us/2025/08/29/empowering-rural-education-sophos-indias-volunteering-initiative/#respond</comments>
  36. <dc:creator><![CDATA[victoriatownsley]]></dc:creator>
  37. <pubDate>Fri, 29 Aug 2025 13:08:35 +0000</pubDate>
  38. <category><![CDATA[#SophosLife]]></category>
  39. <guid isPermaLink="false">https://news.sophos.com/en-us/?p=962561</guid>
  40.  
  41. <description><![CDATA[Transforming Futures: How Sophos India’s volunteers are driving education and hope in rural communities.]]></description>
  43. <wfw:commentRss>https://news.sophos.com/en-us/2025/08/29/empowering-rural-education-sophos-indias-volunteering-initiative/feed/</wfw:commentRss>
  44. <slash:comments>0</slash:comments>
  47. <media:content url="https://news.sophos.com/wp-content/uploads/2025/08/Sophos-News-3.png?w=230&#38;h=130&#38;crop=1" medium="image" alt="" />
  48. <post-id xmlns="com-wordpress:feed-additions:1">962561</post-id>
  49. <media:thumbnail url="https://news.sophos.com/wp-content/uploads/2025/08/Sophos-News-3.png" alt="" />
  50. <media:content url="https://news.sophos.com/wp-content/uploads/2025/08/Sophos-News-3.png" medium="image" alt="">
  51. <media:title type="html">Sophos News (3)</media:title>
  52. </media:content>
  53.  
  54. <media:content url="https://news.sophos.com/wp-content/uploads/2025/08/9744dabc-7673-4f42-a52e-e138e1d36586.jpg?w=300" medium="image" alt="" />
  55.  
  56. <media:content url="https://news.sophos.com/wp-content/uploads/2025/08/2099f79b-392b-4a39-9d58-34030f24acc6.jpg?w=300" medium="image" alt="" />
  57.  
  58. <media:content url="https://news.sophos.com/wp-content/uploads/2025/08/83ae9a74-79b1-4bc5-898a-cccdb5b29d98.jpg?w=300" medium="image" alt="" />
  59.  
  60. <media:content url="https://news.sophos.com/wp-content/uploads/2025/08/d13339bb-611c-430d-8a84-b9cfb5f446cb.jpg?w=300" medium="image" alt="" />
  61. </item>
  62. <item>
  63. <title>Defend what matters: Introducing Sophos Endpoint for Legacy Platforms</title>
  64. <link>https://news.sophos.com/en-us/2025/08/28/defend-what-matters-introducing-sophos-endpoint-for-legacy-platforms/</link>
  65. <comments>https://news.sophos.com/en-us/2025/08/28/defend-what-matters-introducing-sophos-endpoint-for-legacy-platforms/#respond</comments>
  67. <dc:creator><![CDATA[Doug Aamoth]]></dc:creator>
  68. <pubDate>Thu, 28 Aug 2025 13:03:39 +0000</pubDate>
  69. <category><![CDATA[Products & Services]]></category>
  70. <category><![CDATA[EDR]]></category>
  71. <category><![CDATA[Endpoint]]></category>
  72. <category><![CDATA[EPP]]></category>
  73. <category><![CDATA[featured]]></category>
  74. <category><![CDATA[MDR]]></category>
  75. <category><![CDATA[Sophos Endpoint]]></category>
  76. <category><![CDATA[XDR]]></category>
  77. <guid isPermaLink="false">https://news.sophos.com/en-us/?p=962529</guid>
  78.  
  79. <description><![CDATA[Comprehensive endpoint security for critical systems]]></description>
  81. <wfw:commentRss>https://news.sophos.com/en-us/2025/08/28/defend-what-matters-introducing-sophos-endpoint-for-legacy-platforms/feed/</wfw:commentRss>
  82. <slash:comments>0</slash:comments>
  85. <media:content url="https://news.sophos.com/wp-content/uploads/2025/08/legacy.png?w=230&#38;h=130&#38;crop=1" medium="image" alt="legacy" />
  86. <post-id xmlns="com-wordpress:feed-additions:1">962529</post-id>
  87. <media:thumbnail url="https://news.sophos.com/wp-content/uploads/2025/08/legacy.png" alt="legacy" />
  88. <media:content url="https://news.sophos.com/wp-content/uploads/2025/08/legacy.png" medium="image" alt="legacy">
  89. <media:title type="html">legacy</media:title>
  90. </media:content>
  91. </item>
  92. <item>
  93. <title>A Bold New Look for a Bold Future: Sophos’ Reimagined Brand</title>
  94. <link>https://news.sophos.com/en-us/2025/08/27/a-bold-new-look-for-a-bold-future-sophos-reimagined-brand/</link>
  95. <comments>https://news.sophos.com/en-us/2025/08/27/a-bold-new-look-for-a-bold-future-sophos-reimagined-brand/#respond</comments>
  97. <dc:creator><![CDATA[tou.mua@sophos.com]]></dc:creator>
  98. <pubDate>Wed, 27 Aug 2025 12:30:14 +0000</pubDate>
  99. <category><![CDATA[Products & Services]]></category>
  100. <guid isPermaLink="false">https://news.sophos.com/en-us/?p=962437</guid>
  101.  
  102. <description><![CDATA[At Sophos, we envision a world where organizations of any size and means have a clear path to superior cybersecurity outcomes. It guides every decision we make from how we design solutions, to how we empower partners – to how we present ourselves as a brand. This is why I am so excited to have [&#8230;]]]></description>
  104. <wfw:commentRss>https://news.sophos.com/en-us/2025/08/27/a-bold-new-look-for-a-bold-future-sophos-reimagined-brand/feed/</wfw:commentRss>
  105. <slash:comments>0</slash:comments>
  108. <media:content url="https://news.sophos.com/wp-content/uploads/2025/08/blog_rebranding.png?w=230&#38;h=130&#38;crop=1" medium="image" alt="Sophos rebrand design" />
  109. <post-id xmlns="com-wordpress:feed-additions:1">962437</post-id>
  110. <media:thumbnail url="https://news.sophos.com/wp-content/uploads/2025/08/blog_rebranding.png" alt="Sophos rebrand design" />
  111. <media:content url="https://news.sophos.com/wp-content/uploads/2025/08/blog_rebranding.png" medium="image" alt="Sophos rebrand design">
  112. <media:title type="html">sophos defeat cyberattacks</media:title>
  113. </media:content>
  114.  
  115. <media:content url="https://news.sophos.com/wp-content/uploads/2025/08/blog-rebranding-01.jpeg" medium="image" alt="Sophos: Defeat Cyberattacks">
  116. <media:title type="html">Sophos: Defeat Cyberattacks</media:title>
  117. </media:content>
  118. </item>
  119. <item>
  120. <title>Velociraptor incident response tool abused for remote access</title>
  121. <link>https://news.sophos.com/en-us/2025/08/26/velociraptor-incident-response-tool-abused-for-remote-access/</link>
  122. <comments>https://news.sophos.com/en-us/2025/08/26/velociraptor-incident-response-tool-abused-for-remote-access/#respond</comments>
  124. <dc:creator><![CDATA[mindimcdowell]]></dc:creator>
  125. <pubDate>Tue, 26 Aug 2025 21:13:13 +0000</pubDate>
  126. <category><![CDATA[Threat Research]]></category>
  127. <category><![CDATA[Attack Tools]]></category>
  128. <category><![CDATA[featured]]></category>
  129. <category><![CDATA[Remote access]]></category>
  130. <category><![CDATA[Velociraptor]]></category>
  131. <category><![CDATA[Visual Studio Code]]></category>
  132. <guid isPermaLink="false">https://news.sophos.com/en-us/?p=962517</guid>
  133.  
  134. <description><![CDATA[This approach represents an evolution from threat actors abusing remote monitoring and management tools ]]></description>
  136. <wfw:commentRss>https://news.sophos.com/en-us/2025/08/26/velociraptor-incident-response-tool-abused-for-remote-access/feed/</wfw:commentRss>
  137. <slash:comments>0</slash:comments>
  140. <media:content url="https://news.sophos.com/wp-content/uploads/2025/08/Velociraptor2508-hero.jpg?w=230&#38;h=130&#38;crop=1" medium="image" alt="" />
  141. <post-id xmlns="com-wordpress:feed-additions:1">962517</post-id>
  142. <media:thumbnail url="https://news.sophos.com/wp-content/uploads/2025/08/Velociraptor2508-hero.jpg" alt="" />
  143. <media:content url="https://news.sophos.com/wp-content/uploads/2025/08/Velociraptor2508-hero.jpg" medium="image" alt="" />
  144.  
  145. <media:content url="https://news.sophos.com/wp-content/uploads/2025/08/Velociraptor2508-fig1.png" medium="image" alt="Velociraptor creating Visual Studio Code tunnel">
  146. <media:title type="html">Velociraptor creating Visual Studio Code tunnel</media:title>
  147. </media:content>
  148. </item>
  149. <item>
  150. <title>Threat Intelligence Executive Report – Volume 2025, Number 4</title>
  151. <link>https://news.sophos.com/en-us/2025/08/20/threat-intelligence-executive-report-volume-2025-number-4/</link>
  152. <comments>https://news.sophos.com/en-us/2025/08/20/threat-intelligence-executive-report-volume-2025-number-4/#respond</comments>
  154. <dc:creator><![CDATA[mindimcdowell]]></dc:creator>
  155. <pubDate>Wed, 20 Aug 2025 16:57:37 +0000</pubDate>
  156. <category><![CDATA[Threat Research]]></category>
  157. <category><![CDATA[featured]]></category>
  158. <category><![CDATA[Iran]]></category>
  159. <category><![CDATA[israel]]></category>
  160. <category><![CDATA[law enforcement action]]></category>
  161. <category><![CDATA[LummaC2]]></category>
  162. <category><![CDATA[naming conventions]]></category>
  163. <guid isPermaLink="false">https://news.sophos.com/en-us/?p=962413</guid>
  164.  
  165. <description><![CDATA[This issue of the Counter Threat Unit’s high-level bimonthly report discusses noteworthy updates in the threat landscape during May and June]]></description>
  167. <wfw:commentRss>https://news.sophos.com/en-us/2025/08/20/threat-intelligence-executive-report-volume-2025-number-4/feed/</wfw:commentRss>
  168. <slash:comments>0</slash:comments>
  171. <media:content url="https://news.sophos.com/wp-content/uploads/2025/08/TI-Exec-Report-Volume-2025-Number-4.png?w=230&#38;h=130&#38;crop=1" medium="image" alt="Threat Intelligence Executive Report cover image for Volume 2025 Number 4" />
  172. <post-id xmlns="com-wordpress:feed-additions:1">962413</post-id>
  173. <media:thumbnail url="https://news.sophos.com/wp-content/uploads/2025/08/TI-Exec-Report-Volume-2025-Number-4.png" alt="Threat Intelligence Executive Report cover image for Volume 2025 Number 4" />
  174. <media:content url="https://news.sophos.com/wp-content/uploads/2025/08/TI-Exec-Report-Volume-2025-Number-4.png" medium="image" alt="Threat Intelligence Executive Report cover image for Volume 2025 Number 4">
  175. <media:title type="html">Threat Intelligence Executive Report cover image for Volume 2025 Number 4</media:title>
  176. </media:content>
  177.  
  178. <media:content url="https://news.sophos.com/wp-content/uploads/2025/07/TI-Exec-Report-checkmark-Sophos-blue.png?w=66" medium="image" alt="Checkmark icon for the &#039;What to do next&#039; sections">
  179. <media:title type="html">Checkmark icon for the &#039;What to do next&#039; sections</media:title>
  180. </media:content>
  181.  
  182. <media:content url="https://news.sophos.com/wp-content/uploads/2025/07/TI-Exec-Report-checkmark-Sophos-blue.png?w=66" medium="image" alt="Checkmark icon for the &#039;What to do next&#039; sections">
  183. <media:title type="html">Checkmark icon for the &#039;What to do next&#039; sections</media:title>
  184. </media:content>
  185.  
  186. <media:content url="https://news.sophos.com/wp-content/uploads/2025/07/TI-Exec-Report-checkmark-Sophos-blue.png?w=66" medium="image" alt="Checkmark icon for the &#039;What to do next&#039; sections">
  187. <media:title type="html">Checkmark icon for the &#039;What to do next&#039; sections</media:title>
  188. </media:content>
  189. </item>
  190. <item>
  191. <title>The State of Ransomware in Retail 2025</title>
  192. <link>https://news.sophos.com/en-us/2025/08/19/the-state-of-ransomware-in-retail-2025/</link>
  193. <comments>https://news.sophos.com/en-us/2025/08/19/the-state-of-ransomware-in-retail-2025/#respond</comments>
  195. <dc:creator><![CDATA[rajansanhotra]]></dc:creator>
  196. <pubDate>Tue, 19 Aug 2025 12:31:15 +0000</pubDate>
  197. <category><![CDATA[Products & Services]]></category>
  198. <category><![CDATA[PRODUCTS & SERVICES]]></category>
  199. <category><![CDATA[Ransomware]]></category>
  200. <category><![CDATA[Retail]]></category>
  201. <category><![CDATA[Solutions]]></category>
  202. <category><![CDATA[The State of Ransomware]]></category>
  203. <guid isPermaLink="false">https://news.sophos.com/en-us/?p=962384</guid>
  204.  
  205. <description><![CDATA[361 IT and cybersecurity leaders reveal the ransomware realities for retail businesses today.]]></description>
  207. <wfw:commentRss>https://news.sophos.com/en-us/2025/08/19/the-state-of-ransomware-in-retail-2025/feed/</wfw:commentRss>
  208. <slash:comments>0</slash:comments>
  211. <media:content url="https://news.sophos.com/wp-content/uploads/2025/08/State-of-Ransomware-Retail-1.png?w=230&#38;h=130&#38;crop=1" medium="image" alt="The State of Ransomware in Retail 2025" />
  212. <post-id xmlns="com-wordpress:feed-additions:1">962384</post-id>
  213. <media:thumbnail url="https://news.sophos.com/wp-content/uploads/2025/08/State-of-Ransomware-Retail-1.png" alt="The State of Ransomware in Retail 2025" />
  214. <media:content url="https://news.sophos.com/wp-content/uploads/2025/08/State-of-Ransomware-Retail-1.png" medium="image" alt="The State of Ransomware in Retail 2025">
  215. <media:title type="html">State of Ransomware Retail (1)</media:title>
  216. </media:content>
  217.  
  218. <media:content url="https://news.sophos.com/wp-content/uploads/2025/08/Organizational-root-cause-of-attacks-in-retail-1.png" medium="image" alt="" />
  219.  
  220. <media:content url="https://news.sophos.com/wp-content/uploads/2025/08/Data-encryption-rate-in-retail.png" medium="image" alt="" />
  221.  
  222. <media:content url="https://news.sophos.com/wp-content/uploads/2025/08/Recovery-of-encrypted-data-in-retail.png" medium="image" alt="" />
  223. </item>
  224. <item>
  225. <title>August Patch Tuesday includes blasts from the (recent) past</title>
  226. <link>https://news.sophos.com/en-us/2025/08/13/august-patch-tuesday-includes-blasts-from-the-recent-past/</link>
  228. <dc:creator><![CDATA[Angela Gunn]]></dc:creator>
  229. <pubDate>Wed, 13 Aug 2025 17:48:47 +0000</pubDate>
  230. <category><![CDATA[Threat Research]]></category>
  231. <category><![CDATA[Bug]]></category>
  232. <category><![CDATA[CVE]]></category>
  233. <category><![CDATA[featured]]></category>
  234. <category><![CDATA[Microsoft]]></category>
  235. <category><![CDATA[Patch Tuesday]]></category>
  236. <category><![CDATA[Windows]]></category>
  237. <guid isPermaLink="false">https://news.sophos.com/en-us/?p=962356</guid>
  238.  
  239. <description><![CDATA[Microsoft haul this month covers 109 CVEs… more or less]]></description>
  243. <media:content url="https://news.sophos.com/wp-content/uploads/2025/08/shutterstock_119638627.jpg?w=230&#38;h=130&#38;crop=1" medium="image" alt="" />
  244. <post-id xmlns="com-wordpress:feed-additions:1">962356</post-id>
  245. <media:thumbnail url="https://news.sophos.com/wp-content/uploads/2025/08/shutterstock_119638627.jpg" alt="" />
  246. <media:content url="https://news.sophos.com/wp-content/uploads/2025/08/shutterstock_119638627.jpg" medium="image" alt="" />
  247.  
  248. <media:content url="https://news.sophos.com/wp-content/uploads/2025/08/pt2508-fig01.png" medium="image" alt="A bar chart showing the impact and severity of bugs addressed in the August 2025 Patch Tuesday; described in article text">
  249. <media:title type="html">A bar chart showing the impact and severity of bugs addressed in the August 2025 Patch Tuesday; described in article text</media:title>
  250. </media:content>
  251.  
  252. <media:content url="https://news.sophos.com/wp-content/uploads/2025/08/pt2508-fig02.png" medium="image" alt="A bar chart showing the product families addressed in the August 2025 Patch Tuesday; described in article text">
  253. <media:title type="html">A bar chart showing the product families addressed in the August 2025 Patch Tuesday; described in article text</media:title>
  254. </media:content>
  255.  
  256. <media:content url="https://news.sophos.com/wp-content/uploads/2025/08/pt2508-fig03.png" medium="image" alt="A bar chart showing the impact and severity of bugs addressed in the 2025 Patch Tuesday releases; described in article text">
  257. <media:title type="html">A bar chart showing the impact and severity of bugs addressed in the 2025 Patch Tuesday releases; described in article text</media:title>
  258. </media:content>
  259. </item>
  260. <item>
  261. <title>Enhancements and new offerings for Sophos’ email security portfolio</title>
  262. <link>https://news.sophos.com/en-us/2025/08/12/enhancements-and-new-offerings-for-sophos-email-security-portfolio/</link>
  264. <dc:creator><![CDATA[Editor]]></dc:creator>
  265. <pubDate>Tue, 12 Aug 2025 13:00:42 +0000</pubDate>
  266. <category><![CDATA[Products & Services]]></category>
  267. <category><![CDATA[Email]]></category>
  268. <guid isPermaLink="false">https://news.sophos.com/en-us/?p=962293</guid>
  269.  
  270. <description><![CDATA[Following multiple enhancements to Sophos Email – the only MDR-optimized email security solution – Sophos is introducing two new offerings to boost email security posture.]]></description>
  274. <media:content url="https://news.sophos.com/wp-content/uploads/2025/08/sophos-email-launch-news-blog-banner_1200x675.png?w=230&#38;h=130&#38;crop=1" medium="image" alt="" />
  275. <post-id xmlns="com-wordpress:feed-additions:1">962293</post-id>
  276. <media:thumbnail url="https://news.sophos.com/wp-content/uploads/2025/08/sophos-email-launch-news-blog-banner_1200x675.png" alt="" />
  277. <media:content url="https://news.sophos.com/wp-content/uploads/2025/08/sophos-email-launch-news-blog-banner_1200x675.png" medium="image" alt="">
  278. <media:title type="html">sophos-email-launch-news-blog-banner_1200x675</media:title>
  279. </media:content>
  280.  
  281. <media:content url="https://news.sophos.com/wp-content/uploads/2025/08/Sophos-Email-Blog-Screenshot.png" medium="image" alt="" />
  282. </item>
  283. <item>
  284. <title>Sophos AI at Black Hat USA ’25: Anomaly detection betrayed us, so we gave it a new job</title>
  285. <link>https://news.sophos.com/en-us/2025/08/07/sophos-ai-at-black-hat-usa-25-anomaly-detection-betrayed-us-so-we-gave-it-a-new-job/</link>
  287. <dc:creator><![CDATA[Matt Wixey]]></dc:creator>
  288. <pubDate>Thu, 07 Aug 2025 21:30:27 +0000</pubDate>
  289. <category><![CDATA[Threat Research]]></category>
  290. <category><![CDATA[AI]]></category>
  291. <category><![CDATA[anomaly detection]]></category>
  292. <category><![CDATA[Black Hat]]></category>
  293. <category><![CDATA[command line]]></category>
  294. <category><![CDATA[featured]]></category>
  295. <category><![CDATA[LLM]]></category>
  296. <category><![CDATA[Sophos X-Ops]]></category>
  297. <guid isPermaLink="false">https://news.sophos.com/en-us/?p=962274</guid>
  298.  
  299. <description><![CDATA[Following on from our preview, here's Ben Gelman and Sean Bergeron's research on enhancing command line classification with benign anomalous data]]></description>
  303. <media:content url="https://news.sophos.com/wp-content/uploads/2025/08/shutterstock_2399544991.jpg?w=230&#38;h=130&#38;crop=1" medium="image" alt="A hand holding a magnifying glass above several blocks containing pictures of triangles. The block directly under the magnifying glass is taller and has a larger triangle on it" />
  304. <post-id xmlns="com-wordpress:feed-additions:1">962274</post-id>
  305. <media:thumbnail url="https://news.sophos.com/wp-content/uploads/2025/08/shutterstock_2399544991.jpg" alt="A hand holding a magnifying glass above several blocks containing pictures of triangles. The block directly under the magnifying glass is taller and has a larger triangle on it" />
  306. <media:content url="https://news.sophos.com/wp-content/uploads/2025/08/shutterstock_2399544991.jpg" medium="image" alt="A hand holding a magnifying glass above several blocks containing pictures of triangles. The block directly under the magnifying glass is taller and has a larger triangle on it">
  307. <media:title type="html">Investigate,Abnormally,High,Rates.,A,Jump,In,The,Level,Of</media:title>
  308. </media:content>
  309.  
  310. <media:content url="https://news.sophos.com/wp-content/uploads/2025/08/image2_04d3e3-e1754563997722.png" medium="image" alt="Graph as described">
  311. <media:title type="html">Graph as described</media:title>
  312. </media:content>
  313.  
  314. <media:content url="https://news.sophos.com/wp-content/uploads/2025/08/image3_f7ae28-e1754564021542.png" medium="image" alt="Graph as described">
  315. <media:title type="html">Graph as described</media:title>
  316. </media:content>
  317. </item>
  318. <item>
  319. <title>Shared secret: EDR killer in the kill chain</title>
  320. <link>https://news.sophos.com/en-us/2025/08/06/shared-secret-edr-killer-in-the-kill-chain/</link>
  322. <dc:creator><![CDATA[Gabor Szappanos]]></dc:creator>
  323. <pubDate>Wed, 06 Aug 2025 14:00:27 +0000</pubDate>
  324. <category><![CDATA[Threat Research]]></category>
  325. <category><![CDATA[avkiller]]></category>
  326. <category><![CDATA[EDR killer]]></category>
  327. <category><![CDATA[featured]]></category>
  328. <category><![CDATA[heartcrypt]]></category>
  329. <category><![CDATA[RansomHub]]></category>
  330. <category><![CDATA[Sophos X-Ops]]></category>
  331. <guid isPermaLink="false">https://news.sophos.com/en-us/?p=961780</guid>
  332.  
  333. <description><![CDATA[A look under the hood at a tool designed to disable protections]]></description>
  337. <media:content url="https://news.sophos.com/wp-content/uploads/2025/07/shutterstock_1484273711.jpg?w=230&#38;h=130&#38;crop=1" medium="image" alt="A person, face obscured, behind a sheet of yellow paper. A torn gap in the paper shows the person putting both hands to their ear as though trying to hear something." />
  338. <post-id xmlns="com-wordpress:feed-additions:1">961780</post-id>
  339. <media:thumbnail url="https://news.sophos.com/wp-content/uploads/2025/07/shutterstock_1484273711.jpg" alt="A person, face obscured, behind a sheet of yellow paper. A torn gap in the paper shows the person putting both hands to their ear as though trying to hear something." />
  340. <media:content url="https://news.sophos.com/wp-content/uploads/2025/07/shutterstock_1484273711.jpg" medium="image" alt="A person, face obscured, behind a sheet of yellow paper. A torn gap in the paper shows the person putting both hands to their ear as though trying to hear something.">
  341. <media:title type="html">Female,Ear,And,Hands,Close-up.,Copy,Space.,Torn,Paper,,Yellow</media:title>
  342. </media:content>
  343.  
  344. <media:content url="https://news.sophos.com/wp-content/uploads/2025/07/ccleaner-fig01.png" medium="image" alt="A screen capture of a description of toolac tivity; it reads &#034;Host -- Defense Evasion -- Look for unusual service installations, especially of kernel drivers, in Windowsl ogs. In this particular case, Cylerian identified a service name containing five random characters and the driver signed by &#034;Changsha Hengxiang Information Technology Co., Ltd.&#034;.">
  345. <media:title type="html">A screen capture of a description of toolac tivity; it reads &#034;Host -- Defense Evasion -- Look for unusual service installations, especially of kernel drivers, in Windowsl ogs. In this particular case, Cylerian identified a service name containing five random characters and the driver signed by &#034;Changsha Hengxiang Information Technology Co., Ltd.&#034;.</media:title>
  346. </media:content>
  347.  
  348. <media:content url="https://news.sophos.com/wp-content/uploads/2025/08/image2.png" medium="image" alt="Code block as described">
  349. <media:title type="html">Code block as described</media:title>
  350. </media:content>
  351.  
  352. <media:content url="https://news.sophos.com/wp-content/uploads/2025/08/image3.png" medium="image" alt="Code block as described">
  353. <media:title type="html">Code block as described</media:title>
  354. </media:content>
  355.  
  356. <media:content url="https://news.sophos.com/wp-content/uploads/2025/08/image4.png" medium="image" alt="Code block as described">
  357. <media:title type="html">Code block as described</media:title>
  358. </media:content>
  359.  
  360. <media:content url="https://news.sophos.com/wp-content/uploads/2025/08/image5.png" medium="image" alt="Code block as described">
  361. <media:title type="html">Code block as described</media:title>
  362. </media:content>
  363.  
  364. <media:content url="https://news.sophos.com/wp-content/uploads/2025/08/image6.png" medium="image" alt="A screen capture showing that the signature under discussion has been revoked">
  365. <media:title type="html">A screen capture showing that the signature under discussion has been revoked</media:title>
  366. </media:content>
  367.  
  368. <media:content url="https://news.sophos.com/wp-content/uploads/2025/08/image7.png" medium="image" alt="A screen capture showing that the certificate has been revoked since 2016">
  369. <media:title type="html">A screen capture showing that the certificate has been revoked since 2016</media:title>
  370. </media:content>
  371.  
  372. <media:content url="https://news.sophos.com/wp-content/uploads/2025/07/ccleaner-fig04.png" medium="image" alt="A screen capture showing a tweet from @threatintel. The last two tweets in the thread provide file hashes. The first tweet reads &#034;Multiple new variants of a malicious driver that first surfaced in 2022 are circulating in the wild. The driver is used by attackers to attempt to disable security solutions.">
  373. <media:title type="html">A screen capture showing a tweet from @threatintel. The last two tweets in the thread provide file hashes. The first tweet reads &#034;Multiple new variants of a malicious driver that first surfaced in 2022 are circulating in the wild. The driver is used by attackers to attempt to disable security solutions.</media:title>
  374. </media:content>
  375.  
  376. <media:content url="https://news.sophos.com/wp-content/uploads/2025/08/image9.png" medium="image" alt="Screen captures showing the signing information for the invalid Fuzhou Dingxin Trade certificate.">
  377. <media:title type="html">Screen captures showing the signing information for the invalid Fuzhou Dingxin Trade certificate.</media:title>
  378. </media:content>
  379. </item>
  380. </channel>
  381. </rss>
  382.  

Home · About · News · Docs · Terms

 
Copyright © 2002-9 Sam Ruby, Mark Pilgrim, Joseph Walton, and Phil Ringnalda