Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Introducing Sophos CISO Advantage. Its agentic AI assesses your specific environment, identifies the gaps that actually matter to your business, and builds a structured, prioritized program of continuous improvement — one that business leaders can understand, support, and trust.

In this episode of Sophos Cyber Shorts, host Susie Evershed is joined by Ross McKerchar, Sophos CISO, to discuss the recent OpenAI and Hugging Face incident and what it reveals about the future of AI security. From containment failures and over-privileged AI workflows to faster AI-driven attacks, Ross shares practical advice for security leaders on how to strengthen resilience, response, and recovery.

Turn compliance complexity into your operational advantage. One system. Full historical context. Predictable cost. Sophos Next-Gen SIEM: Learn more at sophos.com/ng-siem.

With Next-Gen SIEM fully integrated with Sophos XDR, the same system that powers real-time defense can retain the data you need for up to 10 years at a predictable price based on users and servers, supporting your compliance efforts and enriching investigations with full historical context.

The Sophos Central Network Map shows a unified view of your connected Sophos Firewall, Switches, and AP6 access points. This helps you to visualize the topology of your infrastructure, search for devices, and navigate the relationships between your network devices across your entire account.

AI speed. Human judgment. Fully managed. Sophos MDR: the world's largest agentic SOC.

Sophos Fusion is the industry’s most complete cyber defense system. It sees everything, connects everything, and enables your defenses to respond as one. In this real-world example, see how Sophos Fusion stopped a wire fraud attack using telemetry from multiple security vendors.

Everyone remembers WannaCry. WantToCry sounds like the same thing. It isn't. It encrypts your files remotely over SMB using nothing but stolen credentials and right now 1.5 million devices are sitting exposed on the public internet. In this episode we break down how remote ransomware works, why your antivirus and EDR never see it coming and what caught it in our Sophos telemetry.

Our Red Team handed OpenClaw a penetration testing toolkit and pointed it at one of our own legacy Active Directory networks. 23 findings across 11 attack paths... But the findings aren't the interesting part. What's interesting is how it got there. Work that takes our human team three days took the agent three hours. Mid assessment it hit a wall, reasoned about its own limitations and proposed spinning up an EC2 GPU instance to crack a password hash. Nobody told it to.

Manage multi-factor authentication (MFA) methods in Sophos Central, including how to add, edit, remove, and reset authentication options to restore secure access.