Connect with us

Telecom

Cybersecurity: Sophos launches “Xstream” version of XG Firewall

Published

on

Kindly share this post

Sophos , a global leader in next-generation cybersecurity, has introduced a new “Xstream” architecture for Sophos XG Firewall with high performance Transport Layer Security (TLS) traffic decryption capabilities that eliminate significant security risk associated with encrypted network traffic, which is often overlooked by security teams due to performance and complexity concerns.

XG Firewall now also features AI-enhanced threat analysis from SophosLabs and accelerated application performance.

Sophos also published the SophosLabs Uncut article, “Nearly a Quarter of Malware now Communicates Using TLS,” which explains how 23% of malware families use encrypted communication for Command and Control (C2) or installation.

The article details, for example, three common and ever-present Trojans – Trickbot, IcedID and Dridex – that leverage TLS during the course of their attacks.

Cybercriminals also use TLS to hide their exploits, payloads and stolen content and to avoid detection. In fact, 44% of prevalent information stealers use encryption to sneak hijacked data, including bank and financial account passwords and other sensitive credentials, out from under organizations.

Dan Schiappa, chief product officer at Sophos, said “As SophosLabs’ research demonstrates, cybercriminals are boldly embracing encryption in an attempt to bypass security products.

 

“Unfortunately, most firewalls lack scalable TLS crypto capabilities and are unable to inspect encrypted traffic without causing applications to break or degrade network performance.

“With the new Xstream architecture in XG Firewall, Sophos is providing critical visibility into an enormous blind spot while eliminating frustrating latency and compatibility issues with full support for the latest TLS 1.3 standard.

“Sophos’ internal benchmark tests have clocked a two-fold performance boost in the new XG TLS inspection engine as compared to previous XG versions. This is a game changer.”

Latency too often deters IT admins from using decryption, as seen in an independent Sophos survey of 3,100 IT managers in 12 countries. The survey white paper, The Achilles Heel of Next-Gen Firewalls, reports that while 82% of respondents agreed TLS inspection is necessary, only 3.5% of organizations are decrypting their traffic to properly inspect it.

Sophos listed Key new features of XG Firewall to include:
Inspection of TLS 1.3 to detect cloaked malware: New port-agnostic TLS engine doubles crypto operation performance over previous XG versions

Optimized critical application performance: New FastPath policy controls accelerate performance of SD-WAN applications and traffic, including Voice over IP, SaaS and others, to up to wire speed

Adaptive traffic scanning: The newly enhanced Deep Packet Inspection (DPI) engine dynamically risk-assesses traffic streams and matches them to the appropriate threat scanning level, enhancing throughput by up to 33% across most network environments

Threat analysis with SophosLabs intelligence: Provides network administrators with the SophosLabs AI-enhanced threat analysis needed to understand and adjust defenses to protect against a constantly changing threat landscape

Comprehensive cloud management and reporting in Sophos Central: Centralized management and reporting capabilities in Sophos Central provide customers with group firewall management and flexible cloud reporting across an entire estate without additional charge

Integration with Sophos Managed Threat Response (MTR) service: Customers of XG Firewall who also subscribe to the Sophos MTR Advanced service will have deeper actionable intelligence to prevent, detect and respond to threats, as a result of the integration

“Sophos’ new XG Firewall offers a wide array of enterprise-caliber features, with a growing installed base that is now one of the industry’s most widely deployed next-generation firewalls,” Eric Parizo, senior analyst for enterprise IT strategy, (according to Omdia, Enterprise Decision Maker, January 2020. Results are not an endorsement of Sophos or SophosLabs. Any reliance on these results is at the third-party’s own risk).

“XG Firewall can win against industry competitors in large part because of Sophos Central, its SaaS-based, single-pane-of-glass management system for overseeing deployment, management, policy, updates, and response, with optional log management and analytics. This cloud management platform with the Firewall Management and Reporting feature, plus the TLS inspection, position Sophos XG Firewall as a compelling option for a wide variety of organizations.

Bruce Kneece, CTO of Columbia, S.C.-based Convergent Information Security Solutions said, “At Convergent Information Security Solutions, we are engaged in the management and monitoring of both perimeter and internal cybersecurity for our customers, and until now we were somewhat limited in our ability to monitor SSL/TLS encrypted data streams.

“Sophos XG Firewall helps us solve this problem efficiently and affordably with the new accelerated DPI engine in the latest version.

“This, combined with new automatically-managed custom IPS rule sets, gives us much more visibility into encrypted traffic going through the network than we ever had before.

“This feature will immensely improve our customers’ security and we consider this to be critical, based how broadly cybercriminals are capitalizing on TLS encryption to cover-up and carry out their attacks.

“We’re also aware of how fast cyberattacks are morphing. With the ability to scan for potentially dangerous files transported inside of SSL/TLS tunnels, in addition to the zero-day detection engine of Sandstorm, we can provide better, faster customer protection, detection and service.”

Sophos XG Firewall is available in the cloud-based Sophos Central platform alongside Sophos’ entire portfolio of next-generation cybersecurity solutions.

Sophos’ unique Synchronized Security approach empowers these solutions to work together for real-time information sharing and threat response.


Kindly share this post

Ugo Onwuaso is an ICT enthusiast. He believes technology should be used for general good. He holds a Master of Public Administration (MPA) degree from the Lagos state University. Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

Telecom

Nigerians Lose N12.5bBn to Telecom-Related Financial Crimes – PwC

Published

on

Kindly share this post

Nigerians lost about N12.5 billion to telecom-related financial crimes from 2019 to January 2023, underscoring the scale and persistence of this threat to the telecommunications industry, PwC Nigeria has said, citing data from the Nigerian Communications Commission (NCC).

Nigerians Lose N12.5bBn to Telecom-Related Financial Crimes - PwC

PwC, in its latest report, ‘AI’s Dual Role in Telecom Fraud: Why Artificial Intelligence is Both a Threat and a Shield for Telcos’, said the growing adoption of AI by fraudsters is amplifying the frequency and impact of fraud.

The report said fraud has long been a persistent challenge in the telecoms landscape, leading to substantial financial losses for customers and reputational damages for telecommunication companies (telcos).

PwC’s latest report, ‘AI’s dual role in telecom fraud’, highlights global trends in how AI is reshaping both the threats and defences in telecommunications.

The publication examined what these shifts mean for operators in the local market and how they can stay ahead by adopting proactive, AI driven fraud management strategies.

It offered insights into how AI is enabling more sophisticated fraud schemes, from deepfake social engineering to automated attacks; the emerging role of AI powered detection and monitoring tools in strengthening fraud prevention frameworks.

The report also gave practical steps for telecom operators to balance innovation, resilience, and customer trust in an AI driven fraud ecosystem.

PwC noted that the impact of fraud on telecommunications companies is far-reaching, resulting in financial losses, reputational damage, and compliance issues.

The report said for instance, that in 2023, global telecom fraud was estimated at $38.95 billion.

It, however, stated that in Nigeria, where telecom acts as a key gateway to financial services through Unstructured Supplementary Service Data (USSD) and some are moving into fintech, these evolving risks place added pressure on operators.

The report stated that while operators have developed systems and controls to manage these risks, the sector’s expansion into adjacent domains (such as mobile money and payment service banking) is blurring the traditional boundaries of telecom fraud.

“The result is a more complex and interconnected risk environment, where both the frequency and impact of fraud are escalating. Adding to this complexity is the rapid pace of technological advancement.

For instance, Russian cybersecurity firm F6 reported a rise in SIM swapping incidents, particularly related to the shift to eSIM technology. These fraudsters are hijacking phone numbers and bypassing security measures to access bank accounts,” the report said.

The report, authored by Udochi Muogilim, Partner and Technology, Media and Telecommunications Leader,  PwC Nigeria, and Adeola Adekunle, associate director, Forensic Services,  however, said as AI continues to mature, it is reshaping the fraud landscape—introducing heightened threats and powerful new tools.

“On one hand, AI can be exploited to scale and automate fraud schemes with unprecedented sophistication. On the other, it equips telcos with advanced capabilities for fraud detection, prevention, and response.

“This dual role—AI as both a tool and a target—underscores the urgent need for Nigerian telecom players to adopt AI thoughtfully and strategically.

“Navigating this evolving landscape requires more than just investment in technology; it demands a deep understanding of what’s happening today in the world of technological disruption, and what’s to come,” the experts stated.

The report reiterated that telecom fraud affects a wide range of stakeholders, from individual consumers facing unauthorised charges to large corporations suffering reputation damage.

“The combination of AI and various fraud types significantly increases the success rate of these schemes.

“Furthermore, the global nature of telecommunications networks allows fraud to swiftly cross borders, complicating efforts to investigate and prosecute offenders, thus presenting a pressing concern for telecom companies and their regulators,” PwC said.

The firm, however, emphasised that AI has the potential to revolutionise how telecom companies and regulators combat fraud while enhancing the quality of service, ultimately fostering greater trust among consumers.

To fully harness this potential, PwC said it is crucial for industry players to stay informed about evolving technology trends and anticipate future challenges.

This awareness, it added, will empower them to leverage AI’s capabilities for more effective fraud prevention and the proactive management of emerging fraud types, all while adhering to responsible AI principles.

“A well-coordinated combination of the right resources and strategic alliances will enable the industry to make a significant impact in the fight against telecom fraud and build a safer, more efficient telecommunications ecosystem,” PwC affirmed.

The firm even went a notch higher by offering to help industry players and stakeholders turn fraud-related friction into forward movement, powered by the right technology.

“We bring trust and transparency to the heart of your decision-making, helping you use AI, data and tech to reduce the risk of fraud, respond swiftly to breaches, and emerge stronger—so you can prepare your business for what’s next,” PwC offered.

 


Kindly share this post
Continue Reading

Telecom

NITDA Showcases Nigeria’s Startup Framework as Model for Angola

Published

on

Kindly share this post

National Information Technology Development Agency (NITDA) has reaffirmed its commitment to building a coordinated and inclusive digital ecosystem in Nigeria, further strengthening its role as an ecosystem orchestrator.

NITDA Showcases Nigeria’s Startup Framework as Model for Angola

NITDA

This was disclosed during a working visit centred on Nigeria’s startup ecosystem framework, where the Director General of NITDA, Kashifu Inuwa, was represented by the Director of Stakeholders Management and Partnerships, Dr Aristotle Onumo.

Speaking during the visit, the DG said NITDA was established to drive coordinated and sustainable information technology development in Nigeria, leveraging both its regulatory and developmental mandates, serving as an ecosystem orchestrator that fosters collaboration, innovation, and growth across the digital economy.

He stated that these reforms are aligned with the Federal Government’s Eight-Point Agenda and reflected in NITDA’s Strategic Roadmap and Action Plan (SRAP 2.0), which is built around eight strategic pillars designed to accelerate the growth of Nigeria’s digital economy.

According to him, a key objective of the roadmap is to position Nigeria as a technologically driven nation that promotes inclusive economic development through innovation. He highlighted digital literacy as a major priority, with NITDA targeting 70 percent digital literacy by 2027 under the National Digital Literacy Framework, with a long-term goal of achieving 95 percent by 2030.

Other priority areas, he said, include ecosystem development, IT talent advancement, expansion of digital infrastructure, policy implementation, and research-driven innovation.

The visiting delegation from Angola’s National Institute of Support for Micro, Small and Medium Enterprises (INAPEM), led by Chairman of the Board of Directors (PCA) and Chief Executive Officer, Bráulio Augusto, commended Nigeria’s progress in implementing the Nigeria Startup Act and described the country as a valuable model for shaping Angola’s own startup legislation.

Augusto disclosed that Angola’s Startup Law has received initial parliamentary approval and is now entering the implementation stage. He expressed interest in understanding how Nigeria transitioned from legal adoption to practical execution, particularly in areas such as startup labelling, incentive management, ecosystem mapping, investor registration, and the operation of the Nigeria Startup Portal.

According to him, Angola is currently developing the Startup Angola Programme under its Digital Entrepreneurship Support Programme, aimed at building a structured and integrated startup ecosystem rather than isolated interventions.

The programme will focus on institutional strengthening, startup funding, support for business development service providers, expansion of innovation hubs, and partnerships with international accelerators.

He added that Nigeria’s experience is especially relevant as Angola seeks solutions to challenges including informality, limited access to finance, youth unemployment, digital inclusion gaps, and restricted market access for small and medium-sized enterprises.

The INAPEM chief also requested further technical insights into Nigeria’s National Startup Council, its member selection process, and the governance structure of the Nigeria Startup Portal.

The visit highlights growing collaboration among African nations in digital policy development and further reinforces Nigeria’s position as a reference point in shaping startup ecosystem frameworks across the continent.


Kindly share this post
Continue Reading

Telecom

NITDA, FMCIDE Deepen Collaboration on Nigeria’s Digital Transformation

Published

on

Kindly share this post

Kashifu Inuwa, National Information Technology Development Agency (NITDA), has reaffirmed the Agency’s commitment to deepening collaboration with the Federal Ministry of Communications, Innovation and Digital Economy (FMCIDE) to accelerate Nigeria’s digital transformation and strengthen policy alignment across the sector.

NITDA, FMCIDE Deepen Collaboration on Nigeria’s Digital Transformation

The Director General of the National Information Technology Development Agency (NITDA), Kashifu Inuwa, taking the Permanent Secretary of the Federal Ministry of Communications, Innovation and Digital Economy, Mr. Nadungu Gagare, on a tour of the newly commissioned Innovation Space during the Permanent Secretary’s working visit to the Agency’s corporate headquarters.

Speaking during a courtesy visit by the Permanent Secretary of the Ministry of Communications, Innovationand Digital Economy, Mr. Nadungu Gagare, to NITDA headquarters, Inuwa described the engagement as a significant demonstration of the Ministry’s support and leadership, noting that sustained collaboration between both institutions is essential to delivering Nigeria’s digital economy agenda.

The NITDA Director General recalled previous engagements with the Ministry, including a familiarisation visit during which the Agency shared its strategic roadmap and ongoing initiatives, noting that continuous dialogue has strengthened alignment between both institutions.

He highlighted key policy areas requiring continued collaboration, including the development of a national sovereign cloud infrastructure and a comprehensive cybersecurity policy framework.

“We are awaiting the Ministry’s guidance on how to move forward, particularly on the national cloud and cybersecurity policies,” he said, while emphasising the importance of clear institutional boundaries and mutual respect in enhancing operational effectiveness and inter-agency cooperation.

Inuwa also revealed that NITDA has been at the forefront of implementing the Performance Management System (PMS), having introduced the framework internally several years before its adoption across the Federal Civil Service.

“We started PMS about four years ago. What we have now at the national level actually originated from our internal reforms,” he disclosed, adding that initiatives such as Project NEXT have strengthened accountability, role clarity, and measurable outcomes across the Agency.

“If you perform well, you are rewarded. If not, there are consequences. Even promotions are tied to performance,” he added.

The Director General further highlighted NITDA’s transformation from a traditional regulatory institution into a dynamic ecosystem enabler focused on innovation, inclusion, and national development.

“We are building a high-velocity organisation—one that is agile, inclusive, and driven by innovation,” he said, explaining that the Agency is embracing a more flexible and entrepreneurial culture that empowers staff to contribute ideas and drive institutional growth.

In his remarks, the Permanent Secretary of the FMCIDE, Mr. Nadungu Gagare, reaffirmed the Ministry’s commitment to strengthening collaboration with its agencies, describing partnership as fundamental to achieving sustainable progress in Nigeria’s digital transformation journey.

“If there is no partnership, there is nothing that can be achieved. But with partnership and collaboration, a lot can be accomplished, and that is exactly what we are seeing now,” he stated.

Gagare explained that the visit forms part of the Ministry’s ongoing engagement with agencies under its supervision to strengthen policy coordination, assess progress, and address operational challenges requiring higher-level intervention.

He commended the management and staff of NITDA for their dedication to advancing Nigeria’s digital innovation ecosystem, acknowledging the Agency’s contributions to digital literacy, innovation, cybersecurity awareness, and the creation of opportunities for startups and young innovators.

“NITDA has continued to play a pivotal role in shaping Nigeria’s digital future through the promotion of information technology development, digital literacy, innovation, and regulatory standards,” he said.

The Permanent Secretary also stressed the importance of policy coherence among institutions within the Ministry, noting that agency mandates are interconnected and must be implemented seamlessly.

“Your mandates are inputs into one another. That is why we need tight collaboration so implementation can go smoothly,” he said, while assuring NITDA of the Ministry’s continued guidance and institutional support.

He further highlighted ongoing Federal Civil Service reforms, particularly the adoption of the Performance Management System, which promotes accountability, clear target-setting, and measurable performance outcomes.

“When everything needed for performance is made available and targets are not met, consequence management follows. Where targets are exceeded, there is reward. This is how we drive performance in the service,” he noted.

The visit showcases the shared commitment of both FMCIDE and NITDA to advancing Nigeria’s digital economy through stronger collaboration, innovation, and effective governance, with the strengthened partnership expected to play a critical role in delivering inclusive growth, improved service delivery, and sustainable national development.


Kindly share this post
Continue Reading

Trending