Connect with us

Telecom

Sophos Unveils Advanced Version of Endpoint Detection and Response

Published

on

Kindly share this post

Sophos, a global leader in next-generation cybersecurity, has unveiled an updated version of its Endpoint Detection and Response (EDR), the first solution designed for both security analysts and IT administrators, available now in Sophos Intercept X Advanced and Intercept X Advanced for Server with EDR.

 

Significant advancements and new capabilities make it faster and easier than ever before for security analysts to identify and neutralize evasive threats, and for IT administrators to proactively maintain secure IT operations to reduce risk.

Sophos also published new research, “An Insider View into the Increasingly Complex Kingminer Botnet,” underscoring the use of servers in carrying out attacks and the importance of threat intelligence in detecting such activity.

 

The opportunistic Kingminer botnet attempts to gain server access by brute-forcing login credentials, and Sophos now finds that it’s using the infamous EternalBlue exploit in an attempt to spread malware among other attack mechanisms.

 

The new version of Sophos EDR offers a custom-built query engine to detect indicators of compromise.

Kingminer shares many of the attributes that advanced ransomware attackers use to gain access, evidence of the need for EDR with the ability to hunt active attacks.

As Sophos recently discovered in its State of Ransomware 2020 survey, only 24% of organizations breached in a ransomware incident were able to detect the intrusion and stop it before it was able to encrypt their files.

 

Sophos’ new EDR capabilities help security and IT teams detect threats and breaches that could otherwise take months to uncover.

Dan Schiappa, chief product officer, Sophos, said “Cybercriminals are raising the stakes, stopping at nothing to capitalize on expanded attack surfaces as organizations increasingly move to the cloud and enable remote workforces. Servers and other endpoints are all too insufficiently protected, creating vulnerable entry points that are ripe for attackers to exploit.

 

“Sophos EDR helps identify these attacks, preventing breaches and shining light on otherwise dark areas. Live querying capabilities only available with Sophos EDR in Intercept X enable organizations to search for past indicators of compromise and determine the current system state.

 

“This level of intelligence is critical in understanding changing attacker behaviors and reducing attacker dwell time.”

Sophos EDR now provides powerful visibility across an organization’s entire estate, enabling security and IT practitioners to quickly answer critical threat hunting and IT security operations questions, and easily respond. New features include:

 

Live Discover: Pinpoint past and present activity with up to 90 days of data retention. Out-of-the-box ready SQL queries allow administrators to answer threat hunting and IT questions, and can be selected from a library of pre-written options and fully customized by users. This flexible query engine provides access to some of the most granular and detailed endpoint activity recordings that are further enhanced with Sophos’ deep learning technology

 

Live Response: Remotely respond and access endpoints and servers using a command line interface to perform further investigation and remediate issues; easily reboot devices, install and uninstall software, terminate active processes, run scripts, edit configuration files, run forensic tools, isolate machines, and more

 

Ryan Miller, chief information security officer, Mission Search, said  “Sophos EDR is a force multiplier that gives me the tools I need to do the job of an entire team without adding additional headcount.

 

“This new version drastically reduces the time it takes to detect and respond to incidents, saving me on average four to five hours per day. Easy to use SQL queries simplify the previously complex and time intensive process of investigating suspicious activity, and allow me to perform searches that are completely unique to my network.

 

“Unlike other EDR tools that are limited in what they can see and report on, Sophos EDR provides complete visibility into all of my endpoints with vast capabilities not available anywhere else.

 

“As the chief information security officer of a Joint Commission certified healthcare staffing firm, I am extremely sensitive to any time delays in receiving warnings related to suspicious activity that could be a precursor of a malicious attack designed to obtain sensitive data.”

Sophos EDR is powered by Sophos’ deep learning neural network, which is trained on hundreds of millions of samples to look for threat indicators.

 

Security analysts and IT administrators also gain on-demand access to curated threat intelligence from SophosLabs, which tracks, deconstructs and analyzes more than 400,000 malware samples every day.


Sam Heard, president, Data Integrity Services, said “The new version of Sophos EDR gives us the threat intelligence and security expertise needed to know how to prioritize and where to start our investigations so we can remediate issues requiring urgent action.

 

“The new features combine the strongest protections with the industry’s most powerful EDR to automatically detect, prioritize and investigate threats, so we can remotely respond to incidents with speed and precision.

 

“The pre-configured queries in particular are a game changer not only for security pros to threat hunt, but for IT admins to do their everyday jobs.”

Available now in Sophos Intercept X Advanced with EDR and Intercept X Advanced for Server with EDR at no added cost, Sophos EDR will support Windows, MacOS and Linux.

 

Its new Live Discover and Live Response features are easily managed in the threat analysis center on the cloud-based Sophos Central platform for real-time information sharing with Sophos’ entire portfolio of next-generation cybersecurity solutions via its unique Synchronized Security approach.

 

Combined with Sophos Managed Threat Response (MTR), a fully-managed threat hunting, detection and response service, organizations can boost capabilities with human analysis for a further evolved approach to proactive security protection.

 


Kindly share this post

Ugo Onwuaso is an ICT enthusiast. He believes technology should be used for general good. He holds a Master of Public Administration (MPA) degree from the Lagos state University. Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

Telecom

NCC Orders Telcos Inform Subscribers of Data Breach within 48 Hours

Published

on

Kindly share this post

Nigerian Communications Commission (NCC) has directed telecom operators in the country to notify affected customers of any data breach within 48 hours ( that is two day) of detecting such unauthorised infringement.

NCC Orders Telcos Inform Subscribers of Data Breach within 48 Hours

This directive was  contained in the revised Internet Code of Practice 2026 by the NCC, on Friday.

The document seeks to define the rights and obligations of telecom operators in handing the rights of internet users to an open internet.

In the move to protect customer information, Mobile Network Operators (MNOs) and Internet Service Providers (ISPs) are to take necessary measures to protect customers’ data from unauthorised use, disclosure, access or breach.

Telecom operators must now notify affected customers within 48 hours of detecting a compromise through text message, email or any other effective means. As contained in Chapter 3.4 of the regulation titled “Data Breach Notifications,”

The telecoms companies are also directed to notify the NCC of such a breach not later than 48 hours after determining such a breach.

Where full details of the breach are not immediately available, the provider shall issue a preliminary notification within the same period and furnish a comprehensive update within Fourteen (14) days thereafter, or within such extended period as the Commission may approve,” part of the section reads.

The guidelines, according to NCC, are in tandem with the provisions contained in the Nigerian Data Protection Act 2023 and Part VI of Schedule 1 of the Consumer Code of Practice Regulations 2024.

The regulation also joins other agencies’ policies, ensuring protection. Agencies such as the Nigeria Data Protection Commission (NDPC) and the Federal Competition and Consumer Protection Commission (FCCPC) protect consumers against misuse of personal data, identity theft, financial loss, and reputation damage.

The review comes at a time when privacy becomes core amid frequent breaches and illegal harvest of data such as biometric, national IDs, financial information, traffic and usage, and others.

Regulations are necessary for the proper handling, consent, and regulatory compliance regarding sensitive data, ensuring it is only processed for legitimate purposes.

Under Chapter 3.5, the Internet Code of Practice 2026 addressed the handling of harvesting of transactional data by notifying and getting approval from the NCC of any usage by a third party. It noted that the NCC approval will be defined by a review and assessment of such access and “its potential effects on national considerations, consumer information and personal data.”


Kindly share this post
Continue Reading

Telecom

Globacom Promotes Valentine Gifting with Huge Discounts on Smartphones

Published

on

Kindly share this post

Globacom has announced a Valentine Smartphone promotion, which provides incredible savings on a variety of high-end smartphones from top manufacturers including Tecno, Samsung, and Infinix.

Starting on February 9, the promotion provides substantial price reductions on a number of Samsung models, including the Galaxy Z Fold 7, Galaxy A07, Galaxy A56 5G, Galaxy A36 5G, and Galaxy A26 5G. Customers who buy any of the phones will also receive a complimentary travel pouch and charger, as well as up to 18GB of extra data for six months, only available on the Glo network.

Along with other Infinix models, Tecno devices are also offered at attractive discounts, giving customers a large range of smartphones to fit a variety of tastes and price ranges.

The goal of the Glo Valentine promotion is to provide customers with the best possible deals on carefully chosen smartphones that are renowned for their cutting-edge technology, stylish designs, and dependable performance. The offer, which includes alternatives to suit a range of budgets and lifestyles, reaffirms Globacom’s dedication to customer happiness, digital adoption, greater data usage, and client centricity.

The company revealed that the promotion aligned with customers’ expectations during celebratory seasons, when demand is highest for quality smartphones at affordable prices. The company added that its partnership with trusted global and regional brands such as Samsung, Infinix, and Tecno ensures that customers enjoy premium features without compromising on value.

“The Valentine season is about connection, and what better way to stay connected than with a smartphone that fits your needs and aspirations,” the company stated. “This promo gives our customers the chance to get their dream smartphones at some of the best prices of the year, along with generous data bonuses to keep them connected,” the company disclosed.

Customers are encouraged to visit Gloworld outlets nationwide to take advantage of the Valentine Smartphone Promo while stocks last.

 


Kindly share this post
Continue Reading

Telecom

GBB Expands Broadband to 13 Underserved Communities In 2025

Published

on

Kindly share this post

Galaxy Backbone Limited (GBB) has recorded a significant milestone in Nigeria’s digital transformation journey by advancing broadband connectivity to 13 underserved institutions and communities nationwide in 2025, reinforcing its position as the nation’s digital backbone and a trusted partner in national development.

Guided by its mandate to enable a digitally inclusive Nigeria, GBB deliberately extended connectivity to locations within reach of its infrastructure footprint, particularly institutions with strong potential for productive use but limited readiness for immediate commercial engagement. Through this effort, the organisation continues to unlock opportunity, stimulate innovation, and support sustainable growth across critical sectors of the economy.

The expansion reached three Federal Universities, two Local Government Areas, and eight Federal Secretariats, strengthening digital capabilities in education and public administration while enhancing service delivery across the country.

GBB also extended reliable broadband connectivity to strategic and cultural landmarks such as the Nnamdi Azikiwe International Airport, Abuja, underscoring its commitment to supporting national infrastructure that drives economic activity, mobility, and global connectivity.

These deployments highlight Galaxy Backbone’s resolve to bridge the digital divide and empower institutions that shape Nigeria’s future. They demonstrate the measurable national impact of GBB’s infrastructure investments and reflect the tangible progress of the Integrated Digital Transformation Strategy (IDTS), further solidifying the organisation’s role as the platform upon which government institutions and communities can confidently build their digital future.

More importantly, the milestone illustrates that GBB’s work extends beyond technology by enabling education, improving governance, supporting economic participation, and connecting citizens to opportunity.

The initiative aligns with the Federal Government’s broadband penetration objectives and complements national programmes such as Project 774 – Universities’ Hostel Connectivity, ensuring coordinated, scalable, and sustainable impact across the country. Commenting on the achievement, Galaxy Backbone noted that every new connection brings Nigeria closer to a more inclusive digital economy while reinforcing the infrastructure required for innovation and national competitiveness.

As implementation continues, GBB remains committed to expanding access, pushing boundaries, and delivering on the promise of a fully digital nation, with further updates expected as additional phases of the deployment progress.

Galaxy Backbone Limited is the Federal Government’s digital infrastructure and shared services provider, dedicated to delivering secure, reliable, and scalable ICT solutions that support efficient governance, innovation, and sustainable national development.

 


Kindly share this post
Continue Reading

Trending