Telecom
Sophos Unveils Advanced Version of Endpoint Detection and Response
Sophos, a global leader in next-generation cybersecurity, has unveiled an updated version of its Endpoint Detection and Response (EDR), the first solution designed for both security analysts and IT administrators, available now in Sophos Intercept X Advanced and Intercept X Advanced for Server with EDR.
Significant advancements and new capabilities make it faster and easier than ever before for security analysts to identify and neutralize evasive threats, and for IT administrators to proactively maintain secure IT operations to reduce risk.
Sophos also published new research, “An Insider View into the Increasingly Complex Kingminer Botnet,” underscoring the use of servers in carrying out attacks and the importance of threat intelligence in detecting such activity.
The opportunistic Kingminer botnet attempts to gain server access by brute-forcing login credentials, and Sophos now finds that it’s using the infamous EternalBlue exploit in an attempt to spread malware among other attack mechanisms.
The new version of Sophos EDR offers a custom-built query engine to detect indicators of compromise.
Kingminer shares many of the attributes that advanced ransomware attackers use to gain access, evidence of the need for EDR with the ability to hunt active attacks.
As Sophos recently discovered in its State of Ransomware 2020 survey, only 24% of organizations breached in a ransomware incident were able to detect the intrusion and stop it before it was able to encrypt their files.
Sophos’ new EDR capabilities help security and IT teams detect threats and breaches that could otherwise take months to uncover.
Dan Schiappa, chief product officer, Sophos, said “Cybercriminals are raising the stakes, stopping at nothing to capitalize on expanded attack surfaces as organizations increasingly move to the cloud and enable remote workforces. Servers and other endpoints are all too insufficiently protected, creating vulnerable entry points that are ripe for attackers to exploit.
“Sophos EDR helps identify these attacks, preventing breaches and shining light on otherwise dark areas. Live querying capabilities only available with Sophos EDR in Intercept X enable organizations to search for past indicators of compromise and determine the current system state.
“This level of intelligence is critical in understanding changing attacker behaviors and reducing attacker dwell time.”
Sophos EDR now provides powerful visibility across an organization’s entire estate, enabling security and IT practitioners to quickly answer critical threat hunting and IT security operations questions, and easily respond. New features include:
Live Discover: Pinpoint past and present activity with up to 90 days of data retention. Out-of-the-box ready SQL queries allow administrators to answer threat hunting and IT questions, and can be selected from a library of pre-written options and fully customized by users. This flexible query engine provides access to some of the most granular and detailed endpoint activity recordings that are further enhanced with Sophos’ deep learning technology
Live Response: Remotely respond and access endpoints and servers using a command line interface to perform further investigation and remediate issues; easily reboot devices, install and uninstall software, terminate active processes, run scripts, edit configuration files, run forensic tools, isolate machines, and more
Ryan Miller, chief information security officer, Mission Search, said “Sophos EDR is a force multiplier that gives me the tools I need to do the job of an entire team without adding additional headcount.
“This new version drastically reduces the time it takes to detect and respond to incidents, saving me on average four to five hours per day. Easy to use SQL queries simplify the previously complex and time intensive process of investigating suspicious activity, and allow me to perform searches that are completely unique to my network.
“Unlike other EDR tools that are limited in what they can see and report on, Sophos EDR provides complete visibility into all of my endpoints with vast capabilities not available anywhere else.
“As the chief information security officer of a Joint Commission certified healthcare staffing firm, I am extremely sensitive to any time delays in receiving warnings related to suspicious activity that could be a precursor of a malicious attack designed to obtain sensitive data.”
Sophos EDR is powered by Sophos’ deep learning neural network, which is trained on hundreds of millions of samples to look for threat indicators.
Security analysts and IT administrators also gain on-demand access to curated threat intelligence from SophosLabs, which tracks, deconstructs and analyzes more than 400,000 malware samples every day.
Sam Heard, president, Data Integrity Services, said “The new version of Sophos EDR gives us the threat intelligence and security expertise needed to know how to prioritize and where to start our investigations so we can remediate issues requiring urgent action.
“The new features combine the strongest protections with the industry’s most powerful EDR to automatically detect, prioritize and investigate threats, so we can remotely respond to incidents with speed and precision.
“The pre-configured queries in particular are a game changer not only for security pros to threat hunt, but for IT admins to do their everyday jobs.”
Available now in Sophos Intercept X Advanced with EDR and Intercept X Advanced for Server with EDR at no added cost, Sophos EDR will support Windows, MacOS and Linux.
Its new Live Discover and Live Response features are easily managed in the threat analysis center on the cloud-based Sophos Central platform for real-time information sharing with Sophos’ entire portfolio of next-generation cybersecurity solutions via its unique Synchronized Security approach.
Combined with Sophos Managed Threat Response (MTR), a fully-managed threat hunting, detection and response service, organizations can boost capabilities with human analysis for a further evolved approach to proactive security protection.
WIOCC, Africa’s Carriers’ Carrier, has partnered with Galaxy Backbone Limited (GBB), a leading digital infrastructure and shared services provider, in a strategic infrastructure collaboration aimed at enhancing high-speed internet connectivity across the country. This partnership supports digital inclusion and drives Nigeria’s digital transformation.
By combining WIOCC’s extensive wholesale fibre network and expertise with GBB’s national fibre footprint, the collaboration will improve scalability, efficiency and service delivery for businesses and government institutions. It also aims to bridge the digital divide by expanding broadband access to underserved regions and foster partnerships with Mobile Network Operators (MNOs) to advance Nigeria’s digital economy.
A signing ceremony was held at Galaxy Backbone’s Corporate headquarters in Abuja, with Darren Bedford, Group Chief Development Officer at WIOCC and Managing Director/CEO of Galaxy Backbone, Professor Ibrahim A. Adeyanju.
They highlighted the strategic alignment of both organizations in driving digital transformation to accelerate Nigeria’s digital future, setting a benchmark for innovation and connectivity that addresses the evolving needs of Nigeria’s digital ecosystem..
Professor Ibrahim A. Adeyanju stated, “Our mission is to provide robust digital infrastructure that underpins Nigeria’s digital economy. This partnership with WIOCC is a testament to our commitment to enabling digital inclusion and providing a platform for collaboration that transforms how businesses, governments and communities operate in today’s world.”
Darren Bedford added, “This collaboration with Galaxy Backbone reflects our shared vision for driving digital transformation. Together, we are creating a platform for innovation and economic growth that will benefit the country with world-class connectivity.”
Schneider Electric, has reiterated its commitment to accelerate growth in the data centre market across East and West Africa regions that have become vital due to rapid digitalisation and increasing Internet penetration.
Commitment on the company’s drive, End User Sales Director, Anglophone Africa, Schneider Electric, Rohan de Beer, said, the African data centre market is witnessing unprecedented growth, creating a fertile ground for resellers and distributors to enhance their capabilities and foster stronger relationships with local end users.
De Beer explained that previously, Schneider Electric relied solely on external channels for market development, which sometimes led to missed opportunities and increased competition.
He noted that the new dual approach adopted by the firm seeks to address these gaps by enabling closer engagement with end users to influence technology decisions and secure a larger share of the market.
He added, “Crucially, these engagements will still be fulfilled through Schneider Electric’s extensive channel network.This strategy allows us to influence project lifecycles at an earlier stage while maintaining our channel-driven fulfilment model,” explained De Beer. “Our goal isn’t to increase direct business but to expand our market presence and share while empowering partners.”
“In addition to self-paced learning resources, we are hosting instructor-led training sessions across the Anglophone cluster. The first half of the year saw successful training completions in East, West, and Southern Africa, focusing on technical solutions for partners and distributors,” De Beer added.
Meta, the parent company of Facebook, Instagram, and WhatsApp, reportedly plans to invest over $10 billion in a privately owned subsea cable network spanning more than 40,000 kilometers.
This ambitious project aims to enhance Meta’s control over its vast internet traffic, reduce dependence on telecommunications companies, and mitigate geopolitical risks.
The proposed route is expected to connect the U.S. East Coast to India via South Africa, and then from India to the U.S. West Coast through Australia, forming a “W” shape around the globe.
The initiative reflects Meta’s strategic move to secure its infrastructure amid growing geopolitical tensions and concerns about the vulnerability of undersea cable.
According to sources close to the company, the initiative, still in its early phases, would be Meta’s first fully owned and operated subsea cable.
This bold move underscores Meta’s focus on strengthening infrastructure to support its platforms, which generate 10% of fixed and 22% of mobile internet traffic globally, as first reported by TechCrunch.
Sunil Tagare, industry expert, who reported the plans in October, noted that the project’s initial budget of $2 billion will likely increase significantly.
“This is a monumental project in both investment and scale. The shortage of cable-laying ships and resources could lead Meta to build the cable in phases,” Tagare explained.
Although Meta has yet to publicly confirm the plans, an official announcement regarding the route, capacity, and objectives is anticipated in early 2025.
Logistical Hurdles: Meta faces difficulties securing the resources needed for a project of this scale. Cable-laying ships are in limited supply, with tech giants like Google already monopolising contracts with firms such as SubCom.
Tight Market Conditions: Ranulf Scarborough, a submarine cable industry analyst, highlighted the constraints. “The tight market for specialised resources means Meta may need to adopt a phased construction approach, potentially extending the timeline.”
Meta’s infrastructure initiatives are led by Santosh Janardhan, its head of global infrastructure. Reports suggest the project is being developed from its South African operations, indicating the growing significance of emerging markets in Meta’s strategy.
Traditionally dominated by telecom carriers, subsea cable construction has seen a shift as content-driven companies like Meta seek greater control over the infrastructure delivering their services.
If successful, this cable will strengthen Meta’s ability to handle data traffic independently, reduce reliance on shared networks, and unlock opportunities in underserved regions.
IGP Confirms Prosecution of 113 Foreign Nationals for Alleged Cyber Crimes
ICPC Says 70 Percent of Nigerians Refused to Pay Bribes in 2023
SEC Flags Marino FX as Illegal Crypto Exchange
CBN Set to Retire 1,000 Staff, Earmarks N50Bn for Settlement
FG Begins N50 Electronic Levy Deductions from Moniepoint, Other Digital Banks
Echefu Launches LUFT TV, another Pay TV after Failed TSTV Project
UBA, Mastercard Launch Special Debit Card for 75th Anniversary
CBN to Sanction Banks Linked to Cash Hawkers
QNET’s Amezcua Workshop in Lagos: A Glimpse into Wellness & Innovation
UBA Group Sets Foot in France with Full Banking Services
E-Business1 day agoTD Africa Joins Forces with Check Point to Enhance Cybersecurity in Nigeria
Telecom1 day agoUBA Partners NIBSS on NQR Payment Solution
E-Financial1 day agoCBN Launches New Website Today
E-Financial1 day agoCBN to Penalize Banks for Failing to Address ATM Cash Shortages
Telecom1 day agoIkenna Ikechukwu Emerges Champion at MTN’s mPulse Spelling Bee
E-Business1 day agoNaija Shopping Festival: Konga Offers Unbeatable Christmas Deals
Telecom1 day agoMeta Plans $10Bn Subsea Cable Project to Boost Connectivity
E-Financial1 day agoCBN Governor Urges Nigerians to Stay and Rebuild Amid Economic Reforms