LAS VEGAS — August 8, 2023 —

Sophos, a global leader in innovating and delivering cybersecurity as a service, today announced that Sophos X-Ops will lead three presentations at Black Hat and DEF CON, taking place this week in Las Vegas. Speaker presentations from Sophos Managed Detection and Response (MDR) security operations experts, threat researchers, data scientists, and more will share unique insights into threat intelligence and unveil research findings – including new ways in which adversaries are leveraging AI to carry out attacks. Speakers will also address how organizations can sharpen their defenses to stay protected.

Sophos X-Ops, the cross-operational task force that includes SophosLabs, Sophos SecOps and SophosAI, today also unveiled new threat intelligence, “Clustering Attacker Behavior Reveals Hidden Patterns,” identifying distinct connections between three of the most prominent ransomware groups this past year: Royal, Hive and Black Basta. Sophos X-Ops forensics of four different ransomware attack investigations show distinct similarities, suggesting the three groups are sharing either affiliates or highly specific technical details of their activities. Sophos is tracking and monitoring the attacks as a threat activity cluster that defenders can use to speed up detection and response times.

The line-up of speakers includes:
 

Sophos at Black Hat: Booth #2132 – Ongoing Through Black Hat

Wednesday, Aug. 9 at 1:50 p.m. PDT

View from the SOC: Avoiding Death by a Thousand Data Sources

Mat Gangwer, Sophos vice president of Managed Detection and Response

Dave Mareels, Sophos senior director of product management

Mandalay Bay, K

 

Sophos at DEF CON 

Friday, Aug. 11 at 12 p.m. PDT

You're Not George Clooney, and This Isn't Ocean's Eleven 

Andrew Brandt, Sophos principal researcher

Harrah’s, War Stories - For The Record

 

Saturday, Aug. 12 at 1:30 p.m. PDT

The Sinister Synergy of Advanced AI: Automatically Orchestrating Large-scale Scam Campaigns with Large Generative Models  

Ben Gelman, Sophos senior data scientist

Younghoo Lee, Sophos principal data scientist

Caesars Forum, AI Village



Media can contact Sophos@WalkerSands.com for additional information about the sessions and the new threat activity cluster intelligence, and to arrange interviews with any of the researchers.

About Sophos

Sophos is a global leader and innovator of advanced security solutions for defeating cyberattacks. The company acquired Secureworks in February 2025, bringing together two pioneers that have redefined the cybersecurity industry with their innovative, native AI-optimized services, technologies and products. Sophos is now the largest pure-play Managed Detection and Response (MDR) provider, supporting more than 28,000 organizations. In addition to MDR and other services, Sophos’ complete portfolio includes industry-leading endpoint, network, email, and cloud security that interoperate and adapt to defend through the Sophos Central platform. Secureworks provides the innovative, market-leading Taegis XDR/MDR, identity threat detection and response (ITDR), next-gen SIEM capabilities, managed risk, and a comprehensive set of advisory services. Sophos sells all these solutions through reseller partners, Managed Service Providers (MSPs) and Managed Security Service Providers (MSSPs) worldwide, defending more than 600,000 organizations worldwide from phishing, ransomware, data theft, other every day and state-sponsored cybercrimes. The solutions are powered by historical and real-time threat intelligence from Sophos X-Ops and the newly added Counter Threat Unit (CTU). Sophos is headquartered in Oxford, U.K. More information is available at www.sophos.com.