Connect with us

Telecom

Sophos XDR Achieves its Best-Ever Results in the MITRE ATT&CK Enterprise 2025 Evaluation

Published

on

Kindly share this post

Sophos, a global leader of innovative security solutions for defeating cyberattacks, has announced its best-ever results in the MITRE ATT&CK Enterprise 2025 Evaluation.

Sophos XDR Achieves its Best-Ever Results in the MITRE ATT&CK Enterprise 2025 Evaluation

MITRE ATT&CK Enterprise 2025 Evaluation

Sophos XDR detected 100% of adversary behaviors (sub-steps)1 across two complex attack scenarios: Scattered Spider, which Sophos X-Ops tracks as GOLD HARVEST, a financially motivated cybercriminal collective, and Mustang Panda, which Sophos X-Ops tracks as BRONZE PRESIDENT, a People’s Republic of China (PRC) espionage group.

The Scattered Spider scenario included activity across Windows, Linux, and AWS cloud environments, and the Mustang Panda scenario focused on Windows only.

Further, Sophos achieved the highest-possible “Technique”-level rating for 86 out of 90 total sub-steps in the evaluation, by generating high-fidelity detections with details on execution, impact, and adversary behavior, providing clear who, what, when, where, how, and why insights.

Sophos XDR achieved:

  • 100% detection coverage1 for all 90 adversary sub-steps across two complex attack scenarios across Windows, Linux, and AWS cloud environments
  • Highest possible (“Technique”) ratings for 86 of 90 sub-steps, demonstrating deep visibility and actionable detections
  • Highest possible (“Technique”) ratings for 61 out of 62 of sub-steps in the Scattered Spider scenario involving identity abuse, cloud exploitation, and data exfiltration

“Scattered Spider and Mustang Panda represent distinct threat profiles that challenge defenders in very different ways,” said Simon Reed, chief research and scientific officer, Sophos. “Achieving full detection coverage against both validates the accuracy and depth of Sophos’ analytics and demonstrates how the company’s AI-native XDR platform converts complex telemetry into clear, actionable intelligence, helping security teams detect, understand, and stop advanced attacks with confidence.

“Sophos’ consistently strong performance in these rigorous evaluations underscores the power and precision of our threat detection and response capabilities, and our commitment to stopping the world’s most sophisticated cyberthreats.

“Over the five years that Sophos has participated in ATT&CK Evaluations, we have continually invested in strengthening our platform, and that investment has translated into stronger results year after year – both in the evaluations, and in the security outcomes we deliver for our customers.”

These results demonstrate the power of the Sophos XDR platform to defend against sophisticated cyber threats. Every day, Sophos processes 223+ terabytes of telemetry in Sophos Central, generating 34+ million detections and automatically blocking 11+ million threats.

This scale of customer insights ensures that Sophos’ detections are being tested and improved to provide continuous protection while delivering stronger outcomes for organizations worldwide.

Understanding The Threat Actors

Sophos X-Ops has tracked GOLD HARVEST (Scattered Spider) since 2022, observing a loosely affiliated cybercriminal collective driven by both financial motives and a desire to elevate their reputations on underground forums.

Despite several arrests, operators and associates continue to launch high-profile attacks across the U.K. and U.S., at times partnering with major Russian-speaking ransomware groups.

Their sophisticated social engineering capabilities enable them to compromise even well-defended organizations, underscoring the importance of strong behavioral detections within modern security operations.

In parallel, Sophos X-Ops has monitored BRONZE PRESIDENT (Mustang Panda) for many years.

This long-running PRC espionage group conducts intelligence-led operations that align closely with priorities of China’s Ministry of State Security. Recent targeting includes activity against Tibetan communities surrounding the Dalai Lama’s 90th birthday, as well as intrusions on Thai government and military offices during periods of heightened regional tension.

BRONZE PRESIDENT remains one of the most active and persistent state-aligned threat actors operating today.

MITRE ATT&CK Evaluations are among the world’s most rigorous independent security tests.

They emulate the tactics, techniques, and procedures (TTPs) used by real-world adversaries to assess each participating vendor’s ability to detect, analyze, and articulate threats in alignment with the MITRE ATT&CK Framework.

These evaluations continually strengthen Sophos’ capabilities for the benefit of the organizations it protects. This was the seventh round of MITRE’s “Enterprise” ATT&CK Evaluation, a product-focused assessment designed to help organizations better understand how security operations solutions like Sophos EDR and Sophos XDR can help them defend against sophisticated, multi-stage attacks.

When evaluating EDR or XDR solutions, Sophos recommends reviewing MITRE ATT&CK Evaluations alongside other independent proof points.


Kindly share this post

Ugo Onwuaso is an ICT enthusiast. He believes technology should be used for general good. He holds a Master of Public Administration (MPA) degree from the Lagos state University. Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

Telecom

ALTON Rues Vandalism, Others as Critical Infrastructures Suffer Attacks

Published

on

Kindly share this post

Association of Licensed Telecoms Operators of Nigeria (ALTON), has decried persistent challenges such as vandalism, high operating costs, and regulatory bottlenecks threatening service delivery despite recent improvements in investment inflows.

ALTON Rues Vandalism, Others as Critical Infrastructures Suffer Attacks

Gbenga Adebayo, chairman, ALTON, warned that the continuous attack are putting strains on Nigeria’s telecom sector which serve as the backbone of the country’s economic and digital systems,

Adebayo, speaking in an interview on ARISE News, described telecommunications as the critical foundation supporting all sectors of the economy.

“Telecom operators are the infrastructure of infrastructures that supports all other sectors,” he said, stressing that the industry remains central to power, transport, security, and financial services.

Adebayo noted that the recent 50% tariff adjustment has helped restore investor confidence in the sector after years of underinvestment.

“It has restored confidence in the sector… we are seeing investment, we are seeing now the impact of that investment,” he said, adding that the sector is now beginning to recover gradually.

But, he warned that improvements in service quality remain constrained by multiple external challenges, including vandalism, insecurity, and regulatory bottlenecks.

“Things can be better… but there are also other external factors… vandalism, behavior of public actors, behavior of non-state actors,” he explained.

Adebayo highlighted the scale of infrastructure damage, particularly on fibre networks, noting a major disparity between international and domestic connectivity routes.

“The fiber optic in the Atlantic… has witnessed probably one outage in two years… the one running from Lagos to Kano, we record an average of about 40 cuts a day,” he said.

He explained that such disruptions significantly increase operating costs and affect service quality across the country.

Beyond vandalism, he pointed to theft of telecom equipment such as batteries and generators, as well as security challenges that prevent timely restoration of services in some regions.

“Issue of security… people are stealing batteries, they’re stealing generators,” he said, noting that some areas remain inaccessible during outages until security conditions improve.

Adebayo also called for urgent reforms in right-of-way charges and taxation policies, arguing that telecom infrastructure should be treated as essential national infrastructure.

“Right of way should become free of charge across the country… issue of multiple taxation… it has to be a thing of the past,” he stated.

On rising energy costs, he said operators are gradually adopting hybrid and renewable energy solutions, although the transition is slow and still exposed to vandalism risks.

“We are doing a lot on renewable energy and providing hybrid solution… but that takes time,” he said.

Adebayo concluded that while policy support and investment inflows are improving the outlook of the sector, sustainable progress will depend on stronger protection of telecom infrastructure and coordinated action among government, regulators, and communities to address vandalism, insecurity, and regulatory inefficiencies.

 

 


Kindly share this post
Continue Reading

Telecom

Uber Expands Beyond Rides, Launches Hotel Booking With Expedia

Published

on

Kindly share this post

Ride-hailing company Uber has introduced a new feature that allows users to book hotel rooms directly through its app, as part of its strategy to evolve into a broader lifestyle and services platform.

Uber announced that the hotel booking service is being launched in partnership with Expedia Group, giving users access to more than 700,000 hotel properties worldwide.

The company said the collaboration is also expected to expand in future to include short-term rental listings from Vrbo.

According to Uber, the hotel booking tool offers features similar to traditional online travel platforms, including destination search, maps, and filters based on pricing, amenities and guest ratings.

Users can also complete bookings using payment information already saved on the app.

Speaking during a presentation in New York City, Uber Chief Executive Officer, Dara Khosrowshahi, said the company was broadening its offerings beyond transportation and food delivery.

“We’re no longer just an app for rides, or even a family of apps for rides and eats. Uber is now an app for everything,” he said.

Chief Executive Officer of Expedia, Ariane Gorin, said the partnership was aimed at simplifying travel planning for users.

“Together, we can reduce the number of steps, save people time and money,” she said.

Uber’s latest move builds on its expansion strategy which began with the launch of Uber Eats in 2014.

Initially focused on food delivery, Uber Eats has since expanded into retail services, allowing customers to order products such as cosmetics, groceries and electronics.

Industry analysts say the development reflects the growing global trend toward “super apps” — digital platforms that combine multiple everyday services within one ecosystem.

This model is already widely adopted in markets such as China, where platforms like WeChat and Alipay integrate messaging, payments, travel bookings and e-commerce services.

Competitors are also broadening their offerings.

For instance, Airbnb has expanded beyond accommodation to include bookable local experiences, wellness services and mobility options.

Uber also disclosed plans to integrate more artificial intelligence-powered tools into its platform.

The company said upcoming features would enable users to plan meals, generate shopping lists and arrange deliveries through conversational prompts, while a voice assistant is also in development to support hands-free navigation within the app.


Kindly share this post
Continue Reading

Telecom

FG Okays 112 as Toll-Free National Emergency Response Number

Published

on

Kindly share this post

National Economic Council (NEC) of Nigeria has officially approved 112 as the unified, toll-free national emergency number to streamline responses to security, medical, fire, and natural disasters.

FG Okays 112 as Toll-Free National Emergency Response Number

It is part of measures to strengthen Nigeria’s emergency lifeline and build a unified and coordinated national response to emergencies.

NEC also approved the establishment of a multi-agency implementation committee and programme coordination led by the Office of the Vice President and the National Communications Commission (NCC).

The approval was part of decisions taken at the 157th meeting of the NEC held virtually and chaired by Vice President Kashim Shettima.

Shettima said the 112 emergency lifeline had become necessary to prevent delay caused by bureaucratic bottlenecks, noting that what the citizens seek urgently when confronted by a natural disaster or insecurity is an urgent response and not bureaucracy.

“This is not only a technical reform. It is a test of the state’s humanity. In moments of fire, accident, robbery, medical emergency, flood, violence, or panic, citizens do not need bureaucracy.

“They need a response. They need to know one number to call, one system to trust, and one coordinated chain of action that moves quickly enough to save lives,” he stated.

He explained that while Nigeria is not beginning from zero, as the emergency number had been in existence, what is required at the moment “is coordination, adoption, standard operating procedures, public awareness, institutional ownership, and trust”.

The vice president described NEC as the nation’s economic engine room, where the federal government and the states must convert the Renewed Hope Agenda of President Bola Tinubu into practical outcomes.

 

 


Kindly share this post
Continue Reading

Trending