Hacktivist campaigns increase as United States, Iran, and Israel conflict intensifies

Sophos published multiple items covering an increase in regionally focused hacktivist activity tied to the U.S.–Iran–Israel escalation (including references to Operation Epic Fury) and issued a Cyber Advisory with defensive guidance from Sophos X‑Ops/CTU. They also reported active exploitation of Cisco SD‑WAN vulnerabilities (CVE‑2026‑20127 and CVE‑2022‑20775). In addition, Sophos released product/news updates including Sophos Workspace Protection and the 2026 Active Adversary Report with operational lessons and remediation guidance (MDR/XDR/identity/ITDR focused).