Sophos Firewall v22 MR1 is now available
2026-04-20T20:51:39Z•206d7463efaf987110026919046a8c4e8ed5535cf2fe96b78bc394577ff265ea
Adobe ReaderCitrixBleed2GOLD ENCOUNTERMDRMicrosoft Patch TuesdayOpenClawPayoutsKingSophos Firewall v22 MR1active exploitationagentic AIfirewallhidden virtual machinespatchingqemuransomwarevirtual machine evasionvulnerabilitiesvulnerability floodzero-day
What happened
Sophos published multiple security updates and research: a detailed analysis of attackers abusing QEMU/hidden VMs to evade detection and deploy PayoutsKing ransomware (credential harvesting, long‑term access, data exfiltration); an Adobe Reader zero‑day reported in active exploitation; coverage of Microsoft April Patch Tuesday addressing 163 CVEs; commentary on an accelerating "vulnerability flood" and defensive guidance; an OpenClaw red‑team/agentic‑AI exercise on an internal network; and availability of Sophos Firewall v22 MR1. Recommended actions: prioritize patching (Microsoft and Adobe),监
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- sophos_news
- Record identifier
- 206d7463efaf987110026919046a8c4e8ed5535cf2fe96b78bc394577ff265ea
- Enrichment time
- 2026-04-20T20:51:39Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.