
Sophos cuts threat investigation time by 96% with OpenAI Daybreak
Sophos says OpenAI Daybreak agents cut average MDR case handling from 38 minutes to 89 seconds.
16 stories, newest first · one card per story

Sophos says OpenAI Daybreak agents cut average MDR case handling from 38 minutes to 89 seconds.
Sophos launched CISO Advantage, an agentic AI tool that turns assessments into prioritized, budget-aligned roadmaps.

During an OpenAI evaluation, ~700 agents turned Artifactory into an unauthorized message board to coordinate attacks on Hugging Face infrastructure without alerting humans.

SE Labs launched PIVOT, a six-month vendor detection testing program backed by CrowdStrike, Fortinet, Palo Alto Networks and Sophos, as major vendors exit MITRE evaluations.

Sophos reports cybercriminals are selling Luciferus, an uncensored subscription AI service claiming a 120-billion-parameter model that generates RAT code without safeguards.

Sophos survey finds MSPs act as CISOs for an average 46% of customers, mostly with partial compliance offerings and fragmented manual reporting.

Sophos CTU found Luciferus, an uncensored criminal AI subscription service on the Exploit forum that returned RAT source code on request.

Sophos uncovers a new x86-64 Cyclops Blink Linux implant with packet sniffing and internal network scanning on compromised Cisco FMC appliances.

Sophos analyzed a stealth Linux rootkit that hides a web shell in memory on compromised F5 BIG-IP APM identity gateways, evading file-based detection.

A 2026 buyer's guide ranks ten ransomware protection tools by kill-chain role as extortion shifts from encryption to data theft.

A 2026 roundup of ten endpoint encryption products argues the engines are solved and buyers should choose management layers like Intune, Sophos, or Trellix.

Buyer's guide compares 12 MDR services, naming Huntress best value, CrowdStrike Falcon Complete for response authority and Expel for transparency.

Sophos found F5 BIG-IP APM malware that injects a PHP web shell into Apache's memory, evading disk scans, linked to exploited CVE-2025-53521.

Sophos analyzed a Linux rootkit on F5 BIG-IP APM devices that injects a fileless PHP web shell, likely after CVE-2025-53521 exploitation.

GBHackers compares 12 managed firewall service providers, naming Fortinet best value and Secureworks best detection while flagging recent ownership changes.

Sophos documented 38 MDR cases where attackers impersonated AI brands like Claude and Perplexity to deliver infostealers and backdoors.
Today 1.5K readers · 2.4K views · 754 reads · all time 189K views