Sophos

Volume 343, Issue 4 · 11 articles from 3 issues

In This Issue

• Sophos AI Defense Is Now Generally Available
• Sophos ITDR Expands Identity Protection for the AI Era
• Why Incident Response Demand Will Grow Faster Than Expected
• Is 'SIEM-less' Really What It Sounds Like?
• Malicious Claude Code Extension Distributed Through Cursor Marketplace
• Physical Penetration Testing: When Human Trust Bypasses Layers of Security with a Simple Pretext
• Never Bring a Knife to a Gun Fight!
• AI Used in Aur0ra Ransomware Testing and Execution
• 'Node2Shell' Vulnerability (CVE-2026-111497) in Active Exploitation
• Building Intent-Based Access Control for AI Agents
• The Breachpocalypse Is Here

Sophos AI Defense Is Now Generally Available (Sophos, Tuesday, October 13th, 2026)

Sophos AI Defense is now GA, giving visibility and control over shadow AI and protecting sensitive data in AI use. Read more

Sophos ITDR Expands Identity Protection for the AI Era (Sophos, Thursday, October 15th, 2026)

Sophos ITDR becomes a standalone offering with deeper AI identity visibility, expanded Microsoft support and faster response. Read more

Why Incident Response Demand Will Grow Faster Than Expected (Sophos, Tuesday, October 20th, 2026)

Sophos argues AI-scaled attacks will drive incident response demand beyond forecasts, so the industry must develop analysts now. Read more

Is 'SIEM-less' Really What It Sounds Like? (Sophos, Friday, October 23rd, 2026)

Sophos argues SIEM-less architectures still need SIEM functions and often recreate the same complexity across several products. Read more

Malicious Claude Code Extension Distributed Through Cursor Marketplace (Sophos, Friday, October 30th, 2026)

Sophos reports a malicious Claude Code extension version 2.1.313 was distributed via the Cursor marketplace for about 11 hours on October 29, 2026. Read more

Physical Penetration Testing: When Human Trust Bypasses Layers of Security with a Simple Pretext (Sophos, Thursday, October 29th, 2026)

Sophos describes a physical penetration test where a simple pretext got testers past badge readers, gates, mantraps and guards. Read more

Never Bring a Knife to a Gun Fight! (Sophos, Wednesday, October 28th, 2026)

Sophos DFIR advises that picking specialized cyber incident legal counsel is as important as choosing the forensics firm. Read more

AI Used in Aur0ra Ransomware Testing and Execution (Sophos, Thursday, October 29th, 2026)

Sophos CTU finds the GOLD OGRE group behind Aur0ra ransomware uses AI extensively, including for escalation and EDR testing. Read more

'Node2Shell' Vulnerability (CVE-2026-111497) in Active Exploitation (Sophos, Wednesday, October 28th, 2026)

Sophos CTU warns that Node2Shell (CVE-2026-111497), a critical Brotli decoder buffer overflow, is under active exploitation and on CISA's KEV list. Read more

Building Intent-Based Access Control for AI Agents (Sophos, Tuesday, October 27th, 2026)

Sophos argues AI agents need intent-based access control that turns each task into an enforceable, narrowly scoped policy. Read more

The Breachpocalypse Is Here (Sophos, Monday, October 26th, 2026)

Sophos CISO Ross McKerchar warns a breachpocalypse is underway and urges leaders to act before the data fully confirms it. Read more

More from Sophos · All section posts · This week