Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

A step-by-step tutorial showing you how to define your Sophos Managed Detection and Response (MDR) authorized contacts and threat response mode in Sophos Central. As a Sophos MDR customer, assigning authorized contacts lets you fully utilize the service. This instructs the Sophos MDR Operations team who to contact and how to take action during an active threat. You're prompted to take these steps in Sophos Central after activating a new Sophos MDR license, and you can modify this information at any time.

A criminal talked commercial AI models past their guardrails. Then stood up a "company" of AI agents that engineered, tested and refined malware. It began when Sophos analysts found a folder named "test" on an endpoint nobody recognised. Inside was the front end of a machine: Cobalt Strike profiles, a Telegram command channel, a hidden Sliver server behind Cloudflare and scripts written with the help of AI.

Sophos Fusion is not a platform. It's not a stack. It sees everything, connects everything, and enables your defenses to respond as one. It’s the industry’s most complete cyber defense system, engineered for a world where threats move at AI speed.

Sophos AI Defense helps you understand how AI is used across your organization, apply guardrails, and reduce risk using the Sophos security controls you already have.

Sophos Fusion sees everything, connects everything, and enables your defenses to respond as one. It’s the industry’s most complete cyber defense system, engineered for a world where threats move at AI speed.

Introducing Sophos CISO Advantage. Its agentic AI assesses your specific environment, identifies the gaps that actually matter to your business, and builds a structured, prioritized program of continuous improvement — one that business leaders can understand, support, and trust.

In this episode of Sophos Cyber Shorts, host Susie Evershed is joined by Ross McKerchar, Sophos CISO, to discuss the recent OpenAI and Hugging Face incident and what it reveals about the future of AI security. From containment failures and over-privileged AI workflows to faster AI-driven attacks, Ross shares practical advice for security leaders on how to strengthen resilience, response, and recovery.