Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Sophos Fusion is not a platform. It's not a stack. It sees everything, connects everything, and enables your defenses to respond as one. It’s the industry’s most complete cyber defense system, engineered for a world where threats move at AI speed.

Richard Bejtlich joins Vince Stoffer to unpack the ideas behind his new book on network detection and response, starting with a practical distinction: NSM is a strategy, while NDR is a product. The conversation explores what teams should expect from network data, how alerts and threat hunting work together, why prevention eventually fails, and how AI can help practitioners investigate unfamiliar logs, alerts, and artifacts without replacing human judgment.

Sophos AI Defense helps you understand how AI is used across your organization, apply guardrails, and reduce risk using the Sophos security controls you already have.

Sophos Fusion sees everything, connects everything, and enables your defenses to respond as one. It’s the industry’s most complete cyber defense system, engineered for a world where threats move at AI speed.

Introducing Sophos CISO Advantage. Its agentic AI assesses your specific environment, identifies the gaps that actually matter to your business, and builds a structured, prioritized program of continuous improvement — one that business leaders can understand, support, and trust.

In this episode of Sophos Cyber Shorts, host Susie Evershed is joined by Ross McKerchar, Sophos CISO, to discuss the recent OpenAI and Hugging Face incident and what it reveals about the future of AI security. From containment failures and over-privileged AI workflows to faster AI-driven attacks, Ross shares practical advice for security leaders on how to strengthen resilience, response, and recovery.

Turn compliance complexity into your operational advantage. One system. Full historical context. Predictable cost. Sophos Next-Gen SIEM: Learn more at sophos.com/ng-siem.

With Next-Gen SIEM fully integrated with Sophos XDR, the same system that powers real-time defense can retain the data you need for up to 10 years at a predictable price based on users and servers, supporting your compliance efforts and enriching investigations with full historical context.

The Sophos Central Network Map shows a unified view of your connected Sophos Firewall, Switches, and AP6 access points. This helps you to visualize the topology of your infrastructure, search for devices, and navigate the relationships between your network devices across your entire account.

In this episode, host Richard Bejtlich sits down with Corelight Co-founder and Chief Strategy Officer Greg Bell to unpack groundbreaking research that quantifies exactly how data quality impacts AI-driven security automation. Moving past qualitative industry hype, Greg shares hard evidence from an empirical experiment pitting leading AI agents against real-world Capture the Flag (CTF) challenges and incident response report writing. The findings reveal a dramatic truth: basic firewall and flow logs place a hard cap on inference, throttling an LLM's capacity for deep insight.

AI speed. Human judgment. Fully managed. Sophos MDR: the world's largest agentic SOC.

Sophos Fusion is the industry’s most complete cyber defense system. It sees everything, connects everything, and enables your defenses to respond as one. In this real-world example, see how Sophos Fusion stopped a wire fraud attack using telemetry from multiple security vendors.

Everyone remembers WannaCry. WantToCry sounds like the same thing. It isn't. It encrypts your files remotely over SMB using nothing but stolen credentials and right now 1.5 million devices are sitting exposed on the public internet. In this episode we break down how remote ransomware works, why your antivirus and EDR never see it coming and what caught it in our Sophos telemetry.

In this episode, host Richard Bejtlich sits down with Corelight Senior Sales Engineers Adam Donadeo and Nico Roosenboom to unpack their firsthand experiences at Locked Shields, the world’s largest international live-fire cyber defense exercise. The conversation dives deep into the chaotic, real-world friction of defending a massive virtualized network alongside 4,000 global experts against aggressive red team waves.