Connect with us

Telecom

Sophos Reveals Key Findings: 56% of Cyberattacks Exploit Valid Credentials

Published

on

Kindly share this post

Sophos, a global leader of innovative security solutions for defeating cyberattacks, has released the 2025 Sophos Active Adversary Report, which details attacker behaviour and techniques from over 400 Managed Detection and Response (MDR) and Incident Response (IR) cases in 2024.

Sophos logo

The report found that the primary way attackers gained initial access to networks (56% of all cases across MDR and IR) was by exploiting external remote services, which includes edge devices such as firewalls and VPNs, by leveraging valid accounts.

The combination of external remote services and valid accounts aligns with the top root causes of attacks. For the second year in row, compromised credentials were the number one root cause of attacks (41% of cases). This was followed by exploited vulnerabilities (21.79%) and brute force attacks (21.07%).

Understanding The Speed of Attacks

When analyzing MDR and IR investigations, the Sophos X-Ops team looked specifically at ransomware, data exfiltration, and data extortion cases to identify how fast attackers progressed through the stages of an attack within an organization. In those three types of cases, the median time between the start of an attack and exfiltration was only 72.98 hours (3.04 days). Furthermore, there was only a median of 2.7 hours from exfiltration to attack detection.

“Passive security is no longer enough. While prevention is essential, rapid response is critical. Organizations must actively monitor networks and act swiftly against observed telemetry. Coordinated attacks by motivated adversaries require a coordinated defense. For many organizations, that means combining business-specific knowledge with expert-led detection and response. Our report confirms that organizations with proactive monitoring detect attacks faster and experience better outcomes,” said John Shier, field CISO.

Other Key Findings from the 2025 Sophos Active Adversary Report:

· Attackers Can Take Control of a System in Just 11 Hours: The median time between attackers’ initial action and their first (often successful) attempt to breach Active Directory (AD) – arguably one of the most important assets in any Windows network – was just 11 hours. If successful, attackers can more easily take control of the organization.

· Top Ransomware Groups in Sophos Cases: Akira was the most frequently encountered ransomware group in 2024, followed by Fog and LockBit (despite a multi-government takedown of LockBit earlier in the year).

· Dwell Time is Down to Just 2 Days: Overall, dwell time – the time from the start of an attack to when it is detected – decreased from 4 days to just 2 in 2024, largely due to the addition of MDR cases to the dataset.

· Dwell Time in IR Cases: Dwell time remained stable at 4 days for ransomware attacks and 11.5 days for non-ransomware cases.

· Dwell Time in MDR Cases: In MDR investigations, dwell time was only 3 days for ransomware cases and just 1 day for non-ransomware cases, suggesting MDR teams are able to more quickly detect and respond to attacks.

Ransomware Groups Work Overnight: In 2024, 83% of ransomware binaries were dropped outside of the targets’ local business hours.

· Remote Desktop Protocol Continues to Dominate: RDP was involved in 84% of MDR/IR cases, making it the most frequently abused Microsoft tool.

To shore up their defenses, Sophos recommends that companies do the following:

· Close exposed RDP ports

· Use phishing-resistant multifactor authentication (MFA) wherever possible

· Patch vulnerable systems in a timely manner, with a particular focus on internet-facing devices and services

· Deploy EDR or MDR and ensure it is proactively monitored 24/7

· Establish a comprehensive incident response plan and test it regularly through simulations or tabletop exercises

Read the full It Takes Two: The 2025 Sophos Active Adversary Report on Sophos.com.


Kindly share this post

Ugo Onwuaso is an ICT enthusiast. He believes technology should be used for general good. He holds a Master of Public Administration (MPA) degree from the Lagos state University. Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

Telecom

Amazon Axes 16,000 Jobs Worldwide in Major Restructuring Push

Published

on

AMAZON
Kindly share this post

Amazon, the world’s largest e-commerce and cloud computing powerhouse, announced plans Wednesday to eliminate 16,000 jobs globally, escalating a restructuring drive first flagged in October with 14,000 earlier cuts.

Amazon Axes 16,000 Jobs Worldwide in Major Restructuring Push

Amazon

The layoffs, hitting corporate ranks across multiple divisions, aim to slash management layers, boost accountability, and dismantle bureaucracy, Senior Vice President Beth Galetti stated in an internal memo. Despite booming holiday sales and $21 billion quarterly profits on $180 billion revenue, Amazon seeks to redirect resources toward massive artificial intelligence investments amid slower post-pandemic growth and rising costs.

Galetti explained that while some teams finalised October adjustments, others required extended reviews, pushing total reductions toward 30,000—the firm’s largest ever. CEO Andy Jassy, pursuing leaner operations since 2021, has long signalled AI’s role in shrinking white-collar headcount, with corporate staff—about 350,000 of 1.5 million total—bearing the brunt, sparing warehouses.

The move mirrors Big Tech’s broader belt-tightening as firms recalibrate pandemic-era hiring binges against economic headwinds, AI disruption, and policy uncertainties under President Donald Trump. Amazon’s October cuts struck 2,000 in Washington state—including engineers, recruiters, analysts—and 1,500 in California, with fresh impacts undisclosed by location.

Jassy emphasised culture over pure finances in prior notes, blaming rapid expansion for excess layers after workforce doubling during COVID lockdowns fueled online shopping surges. Recent U.S. hiring slowdowns—to 50,000 jobs in December—underscore corporate caution amid AI’s job-shifting potential and tariff worries.

Analysts note the cuts free capital for AI dominance, pitting Amazon against rivals in generative tools despite no immediate financial distress. Ex-workers have decried impersonal processes, often learning via media leaks, highlighting tensions in Earth’s “best employer” shedding talent en masse.

As tech pivots to AI frontiers, Amazon’s aggressive pruning signals a new era: fewer bodies, sharper focus, betting machine smarts eclipse human scale in the post-boom landscape.


Kindly share this post
Continue Reading

Telecom

Police Bust ₦7.7bn Telecom Hack Gang, Seize 400 Laptops in Massive Fraud Swoop

Published

on

Kindly share this post

Operatives of the Nigeria Police Force smashed a sophisticated cybercrime ring Wednesday, arresting six suspects accused of hacking a major telecommunications company and looting airtime and mobile data worth a staggering N7.7 billion.

Police Bust ₦7.7bn Telecom Hack Gang, Seize 400 Laptops in Massive Fraud Swoop

The Force Public Relations Officer, CSP Benjamin Hundeyin, disclosed in a statement that the suspects breached the telecom giant’s core billing and payment systems by compromising internal staff login credentials, enabling them to siphon off vast quantities of airtime and data for illicit resale.

Named in the arrests are Ahmad Bala, Karibu Mohammed Shehu, Umar Habib, Obinna Ananaba, Ibrahim Shehu, and Masa’ud Sa’ad – a mix of northern and southern names hinting at a cross-regional fraud network that preyed on Nigeria’s digital backbone.

Police swooped on the gang’s hideouts in coordinated raids across Kano and Katsina states in October 2025, with a final takedown in the Federal Capital Territory, recovering two mini-plazas masquerading as legitimate retail outlets stocked with over 400 laptops, about 1,000 mobile phones, and a Toyota vehicle.

Investigators also froze substantial sums in the suspects’ bank accounts, tracing the dirty money trail back to the diverted resources that left the unnamed telecom firm reeling from unauthorised activities reported in a desperate petition.

The breach, described by police as a “calculated assault on critical infrastructure,” allowed the hackers to manipulate the company’s systems undetected for months, offloading billions in airtime and data bundles through underground channels and raking in illicit profits.

Hundeyin vowed that the net was widening, with forensic experts combing through digital footprints and financial ledgers to expose any remaining accomplices or beneficiaries in what he called “one of the largest telecom heists in recent Nigerian history.”

Inspector-General of Police, IGP Kayode Adeolu Egbetokun, praised the crack team from the National Cybercrime Centre for their “relentless professionalism,” urging telecom firms to bolster cybersecurity amid a surge in digital predation.

As the suspects cool their heels awaiting arraignment under the Cybercrimes (Prohibition, Prevention) Act, the case underscores Nigeria’s growing battle against tech-savvy fraudsters targeting the N1.7 trillion telecom sector that powers millions of daily transactions.

Industry watchers warn that such breaches erode investor confidence and hike operational costs, ultimately passed onto consumers already grappling with soaring data tariffs in Africa’s most populous nation


Kindly share this post
Continue Reading

Telecom

ASVLP 2026: Africa, MENA VCs Gear Up as Tech Funding Hits $4.1bn Rebound

Published

on

Kindly share this post

As Africa and MENA’s startup ecosystems transition from post-correction resilience into a new phase of disciplined growth, the Africa Startup & VC Landscape Preview (ASVLP 2026) will convene leading founders, investors, policymakers, and ecosystem builders on January 29, 2026, for its second annual, agenda-setting virtual forum.

ASVLP 2026: Africa, MENA VCs Gear Up as Tech Funding Hits $4.1bn Rebound

Following a challenging global venture cycle, 2025 marked a notable rebound across the African ecosystem, with startups raising an estimated $3.2–$3.3 billion over the full year.

The recovery was accompanied by significant structural shifts: Kenya emerged as the leading destination among Africa’s “Big Four” markets for the first time, while Nigeria recorded a year-on-year funding decline, reflecting changing investor preferences, macroeconomic pressures, and a broader recalibration toward capital efficiency and sustainability.

Sectorally, fintech remained the most funded vertical, while climate & energy, AI-enabled solutions, healthtech, and infrastructure-adjacent businesses gained increasing attention. Across Africa and MENA, development finance institutions (DFIs) and family offices played a more pronounced role in anchoring funds, deploying catalytic capital, and supporting blended-finance structures, reshaping how early-stage and growth capital is mobilized.

ASVLP 2026 is designed to translate these data points into forward-looking strategy.

The forum will bring together venture capitalists, angel investors, LPs, DFIs, family offices, founders, corporate leaders, and regulators from Africa, MENA, Europe, and North America to assess 2025 outcomes and chart priorities for 2026.

The program will feature keynotes, fireside chats, panels, and deep-dive roundtables, including discussions on:

· The 2026 Africa & MENA FinTech Landscape, focusing on security, profitability, regulation, and growth frontiers

· Emerging Fund Managers, capital formation, and LP alignment

· Talent, operator depth, and institutional capacity as constraints to scale

· Regulatory evolution and cross-border market integration

A major highlight of ASVLP 2026 will be the Final DealRoom Pitch Session, where a curated group of high-potential startups will present to an experienced panel of investors.

• Founders can apply to pitch via: bit.ly/ASVLP-DR-Founders
• Investors seeking DealRoom access can request entry via: bit.ly/ASVLP-DR-Investors

Confirmed speakers for ASVLP 2026 include Khaled Ismail (HIMangel), Idris Ayodeji Bello (LoftyInc Capital), Zachariah George (Launch Africa), Tosin Faniro-Dada (Breega), Selma Ribica (FirstCircle Capital), Maha Mandour (COREangels MEA), Joe Kinvi (Borderless), Remi Prunier (Orange Ventures MEA), Karima El Hakim (Plug and Play Tech Center), Souheil Guessoum (President, The Confederation of Citizen Employers – Algeria (CAPC)), Remi Prunier (Partner, Orange Ventures, MEA), Maha Mandour (COREAngels MEA), Ali Hussein (President, Kenyan FinTech Association), Patrick Okebu (CIO, Interswitch Group) among other leading voices shaping capital, policy, and innovation across the region.

“The conversation has shifted,” said Uche Aniche, Convener of ASVLP. “It’s no longer about whether capital will return to Africa and MENA, but what kind of capital, deployed with what discipline, and in service of which long-term outcomes. ASVLP exists to help the ecosystem make sense of that transition.”

Participation in ASVLP 2026 is free but strictly by invitation.
Interested participants are encouraged to repost the official announcement on LinkedIn and comment #ASVLP2026 to receive a private registration link. They could also email [email protected] and request invite.


Kindly share this post
Continue Reading

Trending