Connect with us

Telecom

Sophos Launches MDR for Microsoft Defender

Published

on

Kindly share this post

Sophos, a global leader in innovating and delivering cybersecurity as a service, today launched Sophos Managed Detection and Response (MDR) for Microsoft Defender, a fully-managed offering that provides the industry’s most robust threat response capabilities for organizations using Microsoft Security.

Sophos MDR for Microsoft Defender adds a critical layer of 24/7 protection across the Microsoft Security suite of endpoint, SIEM, identity, cloud, and other solutions to safeguard against data breaches, ransomware and other active adversary cyberattacks.

 “Baseline security technology alone is not enough to defeat determined attackers who will find a way in, as evidenced by the cases our incident response team manages. Attackers are extremely persistent, and organizations need a human layer of security to conduct threat hunts, identify attacker behaviors attempting to evade security tools, and respond to stop attacks with speed and precision,” said Raja Patel, senior vice president of products and managed services at Sophos.

“Rather than forcing them to rip and replace existing technologies, we support organizations with what they need, how and where they need it – regardless of what security solutions they already use. For channel partners delivering Microsoft Security offerings, there’s tremendous opportunity to ensure customers are fully protected and maximizing value from their existing deployments.”

 Sophos MDR for Microsoft Defender integrates telemetry from a broad range of Microsoft Security tools. Unlike other MDR offerings that limit support to Microsoft Defender for Endpoint or Microsoft Sentinel and provide minimal threat response capabilities, Sophos MDR fortifies the broader Microsoft Security suite, including:

§  Microsoft Defender for Endpoint

§  Microsoft Defender for Identity

§  Microsoft Defender for Cloud

§  Microsoft Defender for Cloud Apps

§  Identity Protection (Azure Active Directory)

§  Office 365 Security and Compliance Center

§  Microsoft Sentinel

§  Office 365 Management Activity

 Telemetry from these sources is automatically consolidated, correlated and prioritized with insights from the Sophos Adaptive Cybersecurity Ecosystem and the Sophos X-Ops threat intelligence unit of more than 500 security analysts, threat hunters, responders, data scientists, and other specialists across Sophos worldwide. This enables the Sophos MDR operations team to identify and stop more threats than Microsoft Security tools – or any security technology – can on their own.

Sophos (MDR)

Sixty-five percent of organizations have had a significant ransomware event in the last 12 months despite significant investments in cybersecurity tools, according to IDC research. It is often not a tool but a people problem. Most IT and security teams are generally overworked, understaffed and under resourced.

“They cannot triage and address the daily deluge of alerts and issues to get the desired protections promised from their current tool investments,” said Frank Dickson, group vice president for IDC’s Security and Trust research practice.

“For organizations leveraging the Microsoft security stack, Sophos MDR assists those to realize the outcomes hoped for from their existing cybersecurity investments.”

 “Our guiding principle is to deliver the best security outcomes possible for our customers. Advancements in technologies like extended detection and response (XDR) and generative AI are driving efficiencies in security operations, but the human element remains a critical component to stopping advanced threats,” said Kieron Newshamchief technologist – cyber security at Softcat.

“We’re really pleased with how Sophos MDR is helping our customers overcome the increasing talent shortage and widening skills gap to deliver the best cybersecurity outcomes possible, independent of the customer’s size, structure or previous technology investments.”

Sophos MDR is the most widely used MDR offering with more than 17,000 customers of all sizes and across all industries, and is the top-rated and most reviewed MDR solution on Gartner Peer Insights and G2. It is the only MDR service that can be delivered across end users’ existing third-party security deployments as well as Sophos offerings. In addition to Microsoft, organizations can also integrate telemetry sources from dozens of other vendors, including Amazon Web Services (AWS), Google, CrowdStrike, Palo Alto Networks, Fortinet, Check Point, Okta, Darktrace, and many others, through the Sophos Marketplace.

 Availability

Sophos MDR for Microsoft Defender is available now to all Sophos MDR Essentials customers using security technologies included in Microsoft 365 E3 and E5 licenses. The customizable offering with different threat response options is available through Sophos’ global channel of reseller partners and Managed Service Providers (MSPs).


Kindly share this post

Ugo Onwuaso is an ICT enthusiast. He believes technology should be used for general good. He holds a Master of Public Administration (MPA) degree from the Lagos state University. Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

Telecom

NITDA Empowers 50 Enugu Youths with Digital Tools, Hails Mbah’s Support

Published

on

Kindly share this post

In a significant step toward deepening digital inclusion in Enugu State, the National Information Technology Development Agency (NITDA) has empowered 50 young innovators with digital tools, while commending Governor Peter Mbah for his pivotal support of the Agency’s South-East Zonal Office.

NITDA Empowers 50 Enugu Youths with Digital Tools, Hails Mbah's Support

NITDA

Delivering the goodwill message at the event, NITDA Director General Kashifu Inuwa, represented by Dr. Aristotle Onumo, Director of Stakeholders Management and Partnerships, described the Governor’s commitment as instrumental to the successful launch and rapid performance of the Zonal Office, now recognised as one of NITDA’s top-performing offices nationwide.

“Inuwa noted that Enugu, historically known as Nigeria’s coal city, is undergoing a transition from natural-resource reliance to a knowledge-driven economy. ‘Enugu was once an energy capital powering industries from beneath the earth. Today, the energy driving Enugu is the creativity, talent, and determination of its young people,’” the DG’s message read.

Highlighting the role of digital technology in global economic growth, Inuwa cited projections that the digital economy could contribute up to $23 trillion to global GDP in the coming years, stressing that investment in digital skills today will shape national prosperity tomorrow.

As part of the initiative, over 900 youths registered on NITDA’s digital training platform, with 50 outstanding participants receiving digital tools to enhance their skills and foster innovation. Additionally, 250 participants were recognised for their dedication and excellence throughout the training.

“Nigeria must not only consume technology but create it. Innovation must become our currency, and digital skills must become the bridge to opportunity,” Inuwa emphasised, noting NITDA’s goal of achieving 70 percent digital literacy among Nigerians by 2027.

The initiative aligns with the Agency’s broader strategy to shift the nation from a resource-based economy to a knowledge-based economy driven by innovation, entrepreneurship, and technology.

Governor Peter Mbah, in his remarks, described the festival as more than a technology conference, calling it “a reinforcement of intent” and a validation of the state’s ambition to become a credible node in Nigeria’s growing innovation ecosystem.

Drawing a comparison between Enugu’s historic coal industry and its emerging digital future, he observed that while coal once powered industries across Europe and West Africa, the economic benefits largely left the state.

Today, he argued, Enugu’s greatest resource is its people—their creativity, skills, and innovative potential.

By investing in technology, education, and digital infrastructure, Mbah envisions a future where the state harnesses local talent to generate value, turning ideas into globally competitive solutions and establishing Enugu as a hub of knowledge and digital innovation.

Referencing global technology giants such as Apple, Microsoft, Amazon, Meta, and Tesla, he stressed that control over digital infrastructure is the key to economic leverage in the 21st century.

“Find what is broken, understand it deeply, and fix it properly,” he advised, underscoring that innovation is not about glamour but solving real problems.

He highlighted Enugu’s progress in embedding artificial intelligence in security operations, digitising core government functions, and introducing Geographic Information Systems in land administration to enhance efficiency and strengthen land rights.

Earlier, Dr. Prince Lawrence Ezeh, Enugu State Commissioner for Innovation, Science, and Technology, delivered the welcoming address, highlighting the progress made since the inaugural edition of the festival.

He noted that thousands of youths have been trained through digital skills initiatives, strategic partnerships have been launched—including Nigeria’s largest tech hub initiative—and technology clusters in blockchain and gaming have expanded, positioning Enugu as an emerging national tech leader.

Dr. Ezeh outlined the core objectives of ETF 2026: transforming businesses through innovative strategies aligned with the digital economy, and strengthening communities by fostering collaboration and resilience.

He also revealed ongoing reforms to embed technology across governance and public services, including advanced real-time security systems, smart green schools, and modernised public service platforms.

Other dignitaries in attendance included Anna Vesterholm, Ambassador of Sweden to Nigeria; Aminu Maida, Executive Vice Chairman of the Nigerian Communications Commission; alongside captains of industry and leading technology experts.


Kindly share this post
Continue Reading

Telecom

Sophos Report: Identity Attacks Drive 67% of Cyber Incidents as Threat Groups Surge in 2025

Published

on

Kindly share this post

Sophos, a global leader of innovative security solutions for defeating cyberattacks, today released the 2026 Sophos Active Adversary Report.

Sophos Report: Identity Attacks Drive 67% of Cyber Incidents as Threat Groups Surge in 2025

John Shier

It reveals that 67% of all incidents investigated by Sophos Incident Response (IR) and Managed Detection and Response (MDR) teams last year were rooted in identity-related attacks.

The findings highlight how attackers continue to exploit compromised credentials, weak or missing multifactor authentication (MFA), and poorly protected identity systems, often without needing to deploy new tools or techniques.

Key findings include:

  • A shift from exploited vulnerabilities toward compromised credentials, with brute-force activity (15.6%) drawing almost level with exploitation (16%) as an initial access method
  • Median dwell time declined to three days. This was driven by attackers’ movements, but also by defenders reacting more swiftly. This was particularly notable in MDR environments.
  • Attackers are getting faster at reaching Active Directory (AD). Once an attacker is inside an organization it takes them just 3.4 hours to get to the AD server.

·       Ransomware  remains a firmly off-hours activity. 88% of ransomware payloads are deployed out of hours, and 79% of data exfiltration actions take place out of hours, emphasising the continued need for 24/7 coverage.

  • Lack of telemetry undermines defense efforts. Missing logs due to data retention issues doubled over last year. This rise was largely driven by firewall appliances where the default was only seven days, and in some cases, 24 hours.

Identity Attacks Accelerate While MFA Gaps Persist

The report shows a continued rise in attacks rooted in identity compromise, including stolen credentials, brute-force activity, and phishing. 

While exploited vulnerabilities remain a factor, attackers increasingly rely on valid accounts to gain initial access, allowing them to bypass traditional perimeter defenses. 

There was also a lack of MFA in 59% of cases, facilitating the abuse of stolen and compromised credentials to penetrate an organization.

“The most concerning finding in the report has actually been years in the making: The dominance of identity-related root causes for successful initial access.

“Compromised credentials, brute-force attacks, phishing, and other tactics leverage weaknesses that can’t be addressed by simple patch hygiene. Organizations must take a proactive approach to identity security,” said John Shier, Field CISO and lead author of the report.

More Threat Groups, Broader Risk

Sophos researchers observed the highest number of active threat groups recorded in the report’s history, expanding the overall threat landscape and increasing the challenge of attribution.

  • Akira (GOLD SAHARA) and Qilin (GOLD FEATHER) were the most active ransomware brands observed, with Akira dominating across 22% of incidents
  • 51 ransomware brands appeared across cases, including 27 returning brands and 24 new ones
  • Only four brands or techniques, LockBit, MedusaLocker, Phobos, and abuse of BitLocker, have persisted continuously since 2020, the first year of Active Adversary Report data

“Law enforcement action continues to cause disruption in the ransomware ecosystem. Although we still see activity from LockBit, the dominance and reputation it once had has clearly been impacted.

“However, it means we are seeing a raft of other groups vying for dominance and many more emerging groups. For defenders, it’s important to understand the groups and their TTPs in order to best protect your organization,” continued Shier.

AI Hype Meets Reality

Despite widespread predictions, Sophos found no evidence of a major AI-driven transformation in attacker behavior. While generative AI has increased the speed and polish of phishing and social engineering, it has not yet produced fundamentally new attack techniques.

“AI is adding scale and noise but not yet replacing attackers. While in the future GenAI could be the next accelerator, right now the fundamentals still matter: strong identity protection, reliable telemetry, and the ability to respond quickly when something goes wrong,” said Shier.

Defensive Takeaways

Based on the findings of the 2026 Active Adversary Report, Sophos recommends organizations:

  • Deploy phishing-resistant MFA and validate its configuration
  • Reduce exposure of identity infrastructure and internet-facing services
  • Patch known vulnerabilities promptly, especially on edge devices
  • Ensure 24/7 monitoring through MDR or equivalent capabilities
  • Preserve and retain security logs to support rapid detection and investigation

 The 2026 Sophos Active Adversary Report analyzed 661 IR and MDR cases handled between November 1, 2024 and October 31, 2025, spanning organizations across 70 countries and 34 industries.

You can read the full report here[SE1] . https://www.sophos.com/en-us/blog/2026-sophos-active-adversary-report 


Kindly share this post
Continue Reading

Telecom

NDPC Urges Education Ministry to Prioritise Data Protection Compliance

Published

on

Kindly share this post

Nigeria Data Protection Commission (NDPC) has urged the Federal Ministry of Education to ensure strict compliance with data privacy regulations across Nigeria’s education sector to protect personal information and bolster the nation’s digital infrastructure.

NDPC Urges Education Ministry to Prioritise Data Protection Compliance

NDPC

National Commissioner and Chief Executive Officer of NDPC, Dr. Vincent Olatunji, issued the call during a working visit to the Minister of Education, Dr. Tunji Alausa, and the Minister of State, Dr. Suwaiba Said Ahmad.

Dr. Olatunji highlighted a significant compliance gap in how educational institutions manage sensitive data, noting that while data underpins President Bola Tinubu’s Renewed Hope Agenda, adherence to protection laws remains low in the sector.

“The significance of data protection cannot be overemphasized as Nigeria transitions to a digital economy,” Dr. Olatunji stated, calling on the Ministry to lead efforts in regulatory compliance.

He outlined NDPC initiatives to raise awareness, including the Digital Privacy Awareness Campaign, Data Privacy Clubs in universities, the Secondary School Data Challenge, and the Adopt-A-School programme, which reached about 8,000 students during National Privacy Week.

The NDPC boss urged the Minister to leverage his office for sector-wide enforcement.

Dr. Olatunji offered free induction training for Ministry staff, Virtual Privacy Academy (VPA) vouchers, and spots in a free certification programme. A joint working group was established to drive implementation.

In response, Dr. Alausa acknowledged that data protection has often been approached with levity but affirmed alignment with the government’s goal of producing 50 million digitally literate citizens.

“It is high time all Ministries, Departments, and Agencies prioritise data protection,” Dr. Alausa said, pledging commitment to elevate schools and educational bodies to global standards.


Kindly share this post
Continue Reading

Trending