Author name: NSS NEWS

For almost 20 years, stolen credentials have been the most common route for attackers into organizations, according to the Verizon Data Breach Investigations Report (DBIR). But that’s no longer the case. According to the newly published 2026 report, exploitation of vulnerabilities has overtaken credential theft as the leading vector for hackers to gain their initial access — accounting for 31% […]

Sophos has been named a Leader in the 2026 Gartner® Magic Quadrant™ for Endpoint Protection. This marks the 17th consecutive report in which Sophos has been recognized as a Leader in this category. We believe this continued recognition reflects both the durability of Sophos’ endpoint protection strategy and the progress we have made in helping organizations defend

G2 has published its Summer 2026 Reports, and customers once again ranked Sophos as a top security vendor. For the second consecutive G2 Seasonal Report, customers rated Sophos as the #1 Overall solution in Endpoint Protection Platforms (EPP), Managed Detection and Response (MDR), Extended Detection and Response (XDR), Endpoint Detection and Response (EDR), and Firewall

Sophos has been named an Overall Leader in the 2026 KuppingerCole Analysts Leadership Compass for Managed Detection and Response (MDR). The recognition reflects Sophos’ focus on delivering real-world security outcomes through expert-led detection, investigation, and response across hybrid environments. The KuppingerCole Analysts Leadership Compass for MDR 2026 evaluates MDR providers based on their ability to provide

Claude Mythos Preview and similar AI models feel different, not because they’ve uncovered a new category of attack, but because they dramatically accelerate familiar ones. Research results show that AI can assist in identifying previously unknown vulnerabilities at a speed and scale that simply wasn’t possible before. At the same time, AI shortens the gap

The prospect that your business may be targeted maliciously is sadly no longer an edge case but an everyday reality facing any modern business. No matter your size or profile, bad actors will exploit opportunities to take your business hostage for financial gain. In part one we discussed how NIS2 legislation places a large importance on

Modern cyber threats don’t wait for teams to be ready. They exploit gaps when resources are stretched thin, evolve faster than most organizations can adapt, and frequently strike outside normal business hours. Many security teams find themselves balancing the need to strengthen defenses proactively while ensuring expert help will be available when an incident occurs.

In today’s interconnected world, one company’s outage can affect the delivery of a country’s vital services and even impact the wider economy, as was evidenced by the cyberattack on Jaguar Land Rover, which negatively impacted the UK’s GDP. At the heart of NIS2 is a desire for business continuity. It encourages companies to properly document their processes,

In the modern cybersecurity landscape, the traditional network perimeter has dissolved. Today, identity as a perimeter keeps getting stronger and stronger. As organizations accelerate cloud adoption and integrate AI systems, the number of digital identities, both human and non-human, has grown exponentially. Each credential, API key, and service account now represents a potential entry point

A zero-day attack leverages a previously unknown vulnerability — one that hasn’t been detected by developers or security experts. Because the vulnerability is unknown, there is typically no existing patch or fix, leaving systems temporarily vulnerable until a solution can be developed and deployed. The term “zero-day” refers to the fact that defenders have “zero