Connect with us

Telecom

Sophos Launches Identity Threat Detection and Response to Combat Rising Credential-Based Cyberattacks

Published

on

Kindly share this post

Sophos, a global leader of innovative security solutions for defeating cyberattacks, today announced the launch of Sophos Identity Threat Detection and Response (ITDR).

This new solution for Sophos XDR and Sophos MDR continuously monitors customer environments for identity risks and misconfigurations and scans the dark web for compromised credentials.

It enables organizations to detect and respond to identity-based attacks rapidly and identify risky user behavior that could pose a threat to their business.

This launch is a significant milestone building on the Secureworks acquisition, broadening Sophos’ portfolio and is the first Secureworks solution that has been fully integrated into the Sophos Central platform, further enabling comprehensive security operations outcomes for its 600,000 customers.

Sophos ITDR addresses identity-based attacks, one of the fastest-growing threat vectors globally. Sophos X-Ops observed a 106 percent increase in stolen credentials for sale on the dark web between June 2024 and June 2025, underscoring the growing risk.

The Sophos Active Adversary Report further found that compromised credentials were the number-one root cause of attacks across MDR and incident response cases for the second year in a row, with 56 percent of incidents involving attackers logging into external remote services with valid accounts.

“Cloud and remote work have expanded the identity attack surface and created new opportunities for attackers,” said Rob Harrison, SVP, Product Management, Sophos. “Complex identity and access management systems with constantly changing settings and policies create gaps that attackers target. Sophos ITDR helps close those gaps by giving customers faster visibility into identity risks, monitoring for compromised credentials, and integrating with Sophos XDR and Sophos MDR for rapid, analyst-led response.”

Sophos ITDR uncovers identity risks and is designed to protect and detect against all known MITRE ATT&CK Credential Access techniques with detection rules for all of the techniques The solution performs more than 80 cloud identity posture checks, monitors for compromised credentials on the dark web, and uses AI-driven detections to identify identity-based attacks such as kerberoasting, privilege escalation, account takeover, brute force, and lateral movement. Response playbooks within Sophos ITDR, enable automated remediation actions, including account lock, password reset, multi-factor authentication refresh, and session revocation.

Key Features and Benefits in Sophos ITDR

·       Identity Catalog: Gain complete visibility across all identities across systems to reduce blind spots.

·       Identity Posture Dashboard: Get a single, prioritized view of identity risks, including compromised credentials on the dark web, to act faster.

·       Continuous Assessments: Strengthen security posture with ongoing detection of misconfigurations, dormant accounts, vulnerabilities, and MFA gaps.

·       Compromised Credential Monitoring: Protect users by detecting and alerting when stolen credentials surface in breach databases.

·       Dark Web Intelligence: Stay ahead of attackers with proactive monitoring of underground markets for leaked credentials.

·       User Behavior Analytics (UEBA): Spot insider threats and anomalous activity early to prevent account takeover and lateral movement.

·       Advanced Identity Detections: Detect sophisticated identity attacks such as kerberoasting, account compromise, stolen credentials, password spray, brute force, and impossible travel.

·       Identity Response Actions: Take immediate action on identity threats with integrated response actions to disable accounts, reset user sessions, reset passwords, or mark users as compromised in Microsoft Entra ID.

The Sophos ITDR solution integrates with Sophos XDR and Sophos MDR, automatically generating cases when identity-based threats or high-risk findings arise. With Sophos MDR, Sophos security analysts then investigate and take response actions on behalf of customers, accelerating remediation and reducing risk.

 “Sophos ITDR has improved visibility into our identity risks and streamlined how we manage them,” said an Information Security Director at a financial services firm. “Having identity risk data available within Sophos XDR is a game changer for strengthening our overall security posture.”

“Identity has become the new frontline of cyber defense, and Sophos ITDR delivers the visibility and automation needed to stay ahead of attackers. By covering the full spectrum of identities from users to service accounts and applications, it closes blind spots, strengthens our overall security posture, and provides clear remediation actions that help my team address risks quickly and effectively,” said a CISO at a financial services firm.

Sophos partners can access enablement materials and sales resources via the Sophos Partner Portal.


Kindly share this post

Ugo Onwuaso is an ICT enthusiast. He believes technology should be used for general good. He holds a Master of Public Administration (MPA) degree from the Lagos state University. Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

Telecom

Nigerians Lose N12.5bBn to Telecom-Related Financial Crimes – PwC

Published

on

Kindly share this post

Nigerians lost about N12.5 billion to telecom-related financial crimes from 2019 to January 2023, underscoring the scale and persistence of this threat to the telecommunications industry, PwC Nigeria has said, citing data from the Nigerian Communications Commission (NCC).

Nigerians Lose N12.5bBn to Telecom-Related Financial Crimes - PwC

PwC, in its latest report, ‘AI’s Dual Role in Telecom Fraud: Why Artificial Intelligence is Both a Threat and a Shield for Telcos’, said the growing adoption of AI by fraudsters is amplifying the frequency and impact of fraud.

The report said fraud has long been a persistent challenge in the telecoms landscape, leading to substantial financial losses for customers and reputational damages for telecommunication companies (telcos).

PwC’s latest report, ‘AI’s dual role in telecom fraud’, highlights global trends in how AI is reshaping both the threats and defences in telecommunications.

The publication examined what these shifts mean for operators in the local market and how they can stay ahead by adopting proactive, AI driven fraud management strategies.

It offered insights into how AI is enabling more sophisticated fraud schemes, from deepfake social engineering to automated attacks; the emerging role of AI powered detection and monitoring tools in strengthening fraud prevention frameworks.

The report also gave practical steps for telecom operators to balance innovation, resilience, and customer trust in an AI driven fraud ecosystem.

PwC noted that the impact of fraud on telecommunications companies is far-reaching, resulting in financial losses, reputational damage, and compliance issues.

The report said for instance, that in 2023, global telecom fraud was estimated at $38.95 billion.

It, however, stated that in Nigeria, where telecom acts as a key gateway to financial services through Unstructured Supplementary Service Data (USSD) and some are moving into fintech, these evolving risks place added pressure on operators.

The report stated that while operators have developed systems and controls to manage these risks, the sector’s expansion into adjacent domains (such as mobile money and payment service banking) is blurring the traditional boundaries of telecom fraud.

“The result is a more complex and interconnected risk environment, where both the frequency and impact of fraud are escalating. Adding to this complexity is the rapid pace of technological advancement.

For instance, Russian cybersecurity firm F6 reported a rise in SIM swapping incidents, particularly related to the shift to eSIM technology. These fraudsters are hijacking phone numbers and bypassing security measures to access bank accounts,” the report said.

The report, authored by Udochi Muogilim, Partner and Technology, Media and Telecommunications Leader,  PwC Nigeria, and Adeola Adekunle, associate director, Forensic Services,  however, said as AI continues to mature, it is reshaping the fraud landscape—introducing heightened threats and powerful new tools.

“On one hand, AI can be exploited to scale and automate fraud schemes with unprecedented sophistication. On the other, it equips telcos with advanced capabilities for fraud detection, prevention, and response.

“This dual role—AI as both a tool and a target—underscores the urgent need for Nigerian telecom players to adopt AI thoughtfully and strategically.

“Navigating this evolving landscape requires more than just investment in technology; it demands a deep understanding of what’s happening today in the world of technological disruption, and what’s to come,” the experts stated.

The report reiterated that telecom fraud affects a wide range of stakeholders, from individual consumers facing unauthorised charges to large corporations suffering reputation damage.

“The combination of AI and various fraud types significantly increases the success rate of these schemes.

“Furthermore, the global nature of telecommunications networks allows fraud to swiftly cross borders, complicating efforts to investigate and prosecute offenders, thus presenting a pressing concern for telecom companies and their regulators,” PwC said.

The firm, however, emphasised that AI has the potential to revolutionise how telecom companies and regulators combat fraud while enhancing the quality of service, ultimately fostering greater trust among consumers.

To fully harness this potential, PwC said it is crucial for industry players to stay informed about evolving technology trends and anticipate future challenges.

This awareness, it added, will empower them to leverage AI’s capabilities for more effective fraud prevention and the proactive management of emerging fraud types, all while adhering to responsible AI principles.

“A well-coordinated combination of the right resources and strategic alliances will enable the industry to make a significant impact in the fight against telecom fraud and build a safer, more efficient telecommunications ecosystem,” PwC affirmed.

The firm even went a notch higher by offering to help industry players and stakeholders turn fraud-related friction into forward movement, powered by the right technology.

“We bring trust and transparency to the heart of your decision-making, helping you use AI, data and tech to reduce the risk of fraud, respond swiftly to breaches, and emerge stronger—so you can prepare your business for what’s next,” PwC offered.

 


Kindly share this post
Continue Reading

Telecom

NITDA Showcases Nigeria’s Startup Framework as Model for Angola

Published

on

Kindly share this post

National Information Technology Development Agency (NITDA) has reaffirmed its commitment to building a coordinated and inclusive digital ecosystem in Nigeria, further strengthening its role as an ecosystem orchestrator.

NITDA Showcases Nigeria’s Startup Framework as Model for Angola

NITDA

This was disclosed during a working visit centred on Nigeria’s startup ecosystem framework, where the Director General of NITDA, Kashifu Inuwa, was represented by the Director of Stakeholders Management and Partnerships, Dr Aristotle Onumo.

Speaking during the visit, the DG said NITDA was established to drive coordinated and sustainable information technology development in Nigeria, leveraging both its regulatory and developmental mandates, serving as an ecosystem orchestrator that fosters collaboration, innovation, and growth across the digital economy.

He stated that these reforms are aligned with the Federal Government’s Eight-Point Agenda and reflected in NITDA’s Strategic Roadmap and Action Plan (SRAP 2.0), which is built around eight strategic pillars designed to accelerate the growth of Nigeria’s digital economy.

According to him, a key objective of the roadmap is to position Nigeria as a technologically driven nation that promotes inclusive economic development through innovation. He highlighted digital literacy as a major priority, with NITDA targeting 70 percent digital literacy by 2027 under the National Digital Literacy Framework, with a long-term goal of achieving 95 percent by 2030.

Other priority areas, he said, include ecosystem development, IT talent advancement, expansion of digital infrastructure, policy implementation, and research-driven innovation.

The visiting delegation from Angola’s National Institute of Support for Micro, Small and Medium Enterprises (INAPEM), led by Chairman of the Board of Directors (PCA) and Chief Executive Officer, Bráulio Augusto, commended Nigeria’s progress in implementing the Nigeria Startup Act and described the country as a valuable model for shaping Angola’s own startup legislation.

Augusto disclosed that Angola’s Startup Law has received initial parliamentary approval and is now entering the implementation stage. He expressed interest in understanding how Nigeria transitioned from legal adoption to practical execution, particularly in areas such as startup labelling, incentive management, ecosystem mapping, investor registration, and the operation of the Nigeria Startup Portal.

According to him, Angola is currently developing the Startup Angola Programme under its Digital Entrepreneurship Support Programme, aimed at building a structured and integrated startup ecosystem rather than isolated interventions.

The programme will focus on institutional strengthening, startup funding, support for business development service providers, expansion of innovation hubs, and partnerships with international accelerators.

He added that Nigeria’s experience is especially relevant as Angola seeks solutions to challenges including informality, limited access to finance, youth unemployment, digital inclusion gaps, and restricted market access for small and medium-sized enterprises.

The INAPEM chief also requested further technical insights into Nigeria’s National Startup Council, its member selection process, and the governance structure of the Nigeria Startup Portal.

The visit highlights growing collaboration among African nations in digital policy development and further reinforces Nigeria’s position as a reference point in shaping startup ecosystem frameworks across the continent.


Kindly share this post
Continue Reading

Telecom

NITDA, FMCIDE Deepen Collaboration on Nigeria’s Digital Transformation

Published

on

Kindly share this post

Kashifu Inuwa, National Information Technology Development Agency (NITDA), has reaffirmed the Agency’s commitment to deepening collaboration with the Federal Ministry of Communications, Innovation and Digital Economy (FMCIDE) to accelerate Nigeria’s digital transformation and strengthen policy alignment across the sector.

NITDA, FMCIDE Deepen Collaboration on Nigeria’s Digital Transformation

The Director General of the National Information Technology Development Agency (NITDA), Kashifu Inuwa, taking the Permanent Secretary of the Federal Ministry of Communications, Innovation and Digital Economy, Mr. Nadungu Gagare, on a tour of the newly commissioned Innovation Space during the Permanent Secretary’s working visit to the Agency’s corporate headquarters.

Speaking during a courtesy visit by the Permanent Secretary of the Ministry of Communications, Innovationand Digital Economy, Mr. Nadungu Gagare, to NITDA headquarters, Inuwa described the engagement as a significant demonstration of the Ministry’s support and leadership, noting that sustained collaboration between both institutions is essential to delivering Nigeria’s digital economy agenda.

The NITDA Director General recalled previous engagements with the Ministry, including a familiarisation visit during which the Agency shared its strategic roadmap and ongoing initiatives, noting that continuous dialogue has strengthened alignment between both institutions.

He highlighted key policy areas requiring continued collaboration, including the development of a national sovereign cloud infrastructure and a comprehensive cybersecurity policy framework.

“We are awaiting the Ministry’s guidance on how to move forward, particularly on the national cloud and cybersecurity policies,” he said, while emphasising the importance of clear institutional boundaries and mutual respect in enhancing operational effectiveness and inter-agency cooperation.

Inuwa also revealed that NITDA has been at the forefront of implementing the Performance Management System (PMS), having introduced the framework internally several years before its adoption across the Federal Civil Service.

“We started PMS about four years ago. What we have now at the national level actually originated from our internal reforms,” he disclosed, adding that initiatives such as Project NEXT have strengthened accountability, role clarity, and measurable outcomes across the Agency.

“If you perform well, you are rewarded. If not, there are consequences. Even promotions are tied to performance,” he added.

The Director General further highlighted NITDA’s transformation from a traditional regulatory institution into a dynamic ecosystem enabler focused on innovation, inclusion, and national development.

“We are building a high-velocity organisation—one that is agile, inclusive, and driven by innovation,” he said, explaining that the Agency is embracing a more flexible and entrepreneurial culture that empowers staff to contribute ideas and drive institutional growth.

In his remarks, the Permanent Secretary of the FMCIDE, Mr. Nadungu Gagare, reaffirmed the Ministry’s commitment to strengthening collaboration with its agencies, describing partnership as fundamental to achieving sustainable progress in Nigeria’s digital transformation journey.

“If there is no partnership, there is nothing that can be achieved. But with partnership and collaboration, a lot can be accomplished, and that is exactly what we are seeing now,” he stated.

Gagare explained that the visit forms part of the Ministry’s ongoing engagement with agencies under its supervision to strengthen policy coordination, assess progress, and address operational challenges requiring higher-level intervention.

He commended the management and staff of NITDA for their dedication to advancing Nigeria’s digital innovation ecosystem, acknowledging the Agency’s contributions to digital literacy, innovation, cybersecurity awareness, and the creation of opportunities for startups and young innovators.

“NITDA has continued to play a pivotal role in shaping Nigeria’s digital future through the promotion of information technology development, digital literacy, innovation, and regulatory standards,” he said.

The Permanent Secretary also stressed the importance of policy coherence among institutions within the Ministry, noting that agency mandates are interconnected and must be implemented seamlessly.

“Your mandates are inputs into one another. That is why we need tight collaboration so implementation can go smoothly,” he said, while assuring NITDA of the Ministry’s continued guidance and institutional support.

He further highlighted ongoing Federal Civil Service reforms, particularly the adoption of the Performance Management System, which promotes accountability, clear target-setting, and measurable performance outcomes.

“When everything needed for performance is made available and targets are not met, consequence management follows. Where targets are exceeded, there is reward. This is how we drive performance in the service,” he noted.

The visit showcases the shared commitment of both FMCIDE and NITDA to advancing Nigeria’s digital economy through stronger collaboration, innovation, and effective governance, with the strengthened partnership expected to play a critical role in delivering inclusive growth, improved service delivery, and sustainable national development.


Kindly share this post
Continue Reading

Trending