Connect with us

Telecom

Sophos XDR Achieves its Best-Ever Results in the MITRE ATT&CK Enterprise 2025 Evaluation

Published

on

Kindly share this post

Sophos, a global leader of innovative security solutions for defeating cyberattacks, has announced its best-ever results in the MITRE ATT&CK Enterprise 2025 Evaluation.

Sophos XDR Achieves its Best-Ever Results in the MITRE ATT&CK Enterprise 2025 Evaluation

MITRE ATT&CK Enterprise 2025 Evaluation

Sophos XDR detected 100% of adversary behaviors (sub-steps)1 across two complex attack scenarios: Scattered Spider, which Sophos X-Ops tracks as GOLD HARVEST, a financially motivated cybercriminal collective, and Mustang Panda, which Sophos X-Ops tracks as BRONZE PRESIDENT, a People’s Republic of China (PRC) espionage group.

The Scattered Spider scenario included activity across Windows, Linux, and AWS cloud environments, and the Mustang Panda scenario focused on Windows only.

Further, Sophos achieved the highest-possible “Technique”-level rating for 86 out of 90 total sub-steps in the evaluation, by generating high-fidelity detections with details on execution, impact, and adversary behavior, providing clear who, what, when, where, how, and why insights.

Sophos XDR achieved:

  • 100% detection coverage1 for all 90 adversary sub-steps across two complex attack scenarios across Windows, Linux, and AWS cloud environments
  • Highest possible (“Technique”) ratings for 86 of 90 sub-steps, demonstrating deep visibility and actionable detections
  • Highest possible (“Technique”) ratings for 61 out of 62 of sub-steps in the Scattered Spider scenario involving identity abuse, cloud exploitation, and data exfiltration

“Scattered Spider and Mustang Panda represent distinct threat profiles that challenge defenders in very different ways,” said Simon Reed, chief research and scientific officer, Sophos. “Achieving full detection coverage against both validates the accuracy and depth of Sophos’ analytics and demonstrates how the company’s AI-native XDR platform converts complex telemetry into clear, actionable intelligence, helping security teams detect, understand, and stop advanced attacks with confidence.

“Sophos’ consistently strong performance in these rigorous evaluations underscores the power and precision of our threat detection and response capabilities, and our commitment to stopping the world’s most sophisticated cyberthreats.

“Over the five years that Sophos has participated in ATT&CK Evaluations, we have continually invested in strengthening our platform, and that investment has translated into stronger results year after year – both in the evaluations, and in the security outcomes we deliver for our customers.”

These results demonstrate the power of the Sophos XDR platform to defend against sophisticated cyber threats. Every day, Sophos processes 223+ terabytes of telemetry in Sophos Central, generating 34+ million detections and automatically blocking 11+ million threats.

This scale of customer insights ensures that Sophos’ detections are being tested and improved to provide continuous protection while delivering stronger outcomes for organizations worldwide.

Understanding The Threat Actors

Sophos X-Ops has tracked GOLD HARVEST (Scattered Spider) since 2022, observing a loosely affiliated cybercriminal collective driven by both financial motives and a desire to elevate their reputations on underground forums.

Despite several arrests, operators and associates continue to launch high-profile attacks across the U.K. and U.S., at times partnering with major Russian-speaking ransomware groups.

Their sophisticated social engineering capabilities enable them to compromise even well-defended organizations, underscoring the importance of strong behavioral detections within modern security operations.

In parallel, Sophos X-Ops has monitored BRONZE PRESIDENT (Mustang Panda) for many years.

This long-running PRC espionage group conducts intelligence-led operations that align closely with priorities of China’s Ministry of State Security. Recent targeting includes activity against Tibetan communities surrounding the Dalai Lama’s 90th birthday, as well as intrusions on Thai government and military offices during periods of heightened regional tension.

BRONZE PRESIDENT remains one of the most active and persistent state-aligned threat actors operating today.

MITRE ATT&CK Evaluations are among the world’s most rigorous independent security tests.

They emulate the tactics, techniques, and procedures (TTPs) used by real-world adversaries to assess each participating vendor’s ability to detect, analyze, and articulate threats in alignment with the MITRE ATT&CK Framework.

These evaluations continually strengthen Sophos’ capabilities for the benefit of the organizations it protects. This was the seventh round of MITRE’s “Enterprise” ATT&CK Evaluation, a product-focused assessment designed to help organizations better understand how security operations solutions like Sophos EDR and Sophos XDR can help them defend against sophisticated, multi-stage attacks.

When evaluating EDR or XDR solutions, Sophos recommends reviewing MITRE ATT&CK Evaluations alongside other independent proof points.


Kindly share this post

Ugo Onwuaso is an ICT enthusiast. He believes technology should be used for general good. He holds a Master of Public Administration (MPA) degree from the Lagos state University. Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

Telecom

Amazon Axes 16,000 Jobs Worldwide in Major Restructuring Push

Published

on

AMAZON
Kindly share this post

Amazon, the world’s largest e-commerce and cloud computing powerhouse, announced plans Wednesday to eliminate 16,000 jobs globally, escalating a restructuring drive first flagged in October with 14,000 earlier cuts.

Amazon Axes 16,000 Jobs Worldwide in Major Restructuring Push

Amazon

The layoffs, hitting corporate ranks across multiple divisions, aim to slash management layers, boost accountability, and dismantle bureaucracy, Senior Vice President Beth Galetti stated in an internal memo. Despite booming holiday sales and $21 billion quarterly profits on $180 billion revenue, Amazon seeks to redirect resources toward massive artificial intelligence investments amid slower post-pandemic growth and rising costs.

Galetti explained that while some teams finalised October adjustments, others required extended reviews, pushing total reductions toward 30,000—the firm’s largest ever. CEO Andy Jassy, pursuing leaner operations since 2021, has long signalled AI’s role in shrinking white-collar headcount, with corporate staff—about 350,000 of 1.5 million total—bearing the brunt, sparing warehouses.

The move mirrors Big Tech’s broader belt-tightening as firms recalibrate pandemic-era hiring binges against economic headwinds, AI disruption, and policy uncertainties under President Donald Trump. Amazon’s October cuts struck 2,000 in Washington state—including engineers, recruiters, analysts—and 1,500 in California, with fresh impacts undisclosed by location.

Jassy emphasised culture over pure finances in prior notes, blaming rapid expansion for excess layers after workforce doubling during COVID lockdowns fueled online shopping surges. Recent U.S. hiring slowdowns—to 50,000 jobs in December—underscore corporate caution amid AI’s job-shifting potential and tariff worries.

Analysts note the cuts free capital for AI dominance, pitting Amazon against rivals in generative tools despite no immediate financial distress. Ex-workers have decried impersonal processes, often learning via media leaks, highlighting tensions in Earth’s “best employer” shedding talent en masse.

As tech pivots to AI frontiers, Amazon’s aggressive pruning signals a new era: fewer bodies, sharper focus, betting machine smarts eclipse human scale in the post-boom landscape.


Kindly share this post
Continue Reading

Telecom

Police Bust ₦7.7bn Telecom Hack Gang, Seize 400 Laptops in Massive Fraud Swoop

Published

on

Kindly share this post

Operatives of the Nigeria Police Force smashed a sophisticated cybercrime ring Wednesday, arresting six suspects accused of hacking a major telecommunications company and looting airtime and mobile data worth a staggering N7.7 billion.

Police Bust ₦7.7bn Telecom Hack Gang, Seize 400 Laptops in Massive Fraud Swoop

The Force Public Relations Officer, CSP Benjamin Hundeyin, disclosed in a statement that the suspects breached the telecom giant’s core billing and payment systems by compromising internal staff login credentials, enabling them to siphon off vast quantities of airtime and data for illicit resale.

Named in the arrests are Ahmad Bala, Karibu Mohammed Shehu, Umar Habib, Obinna Ananaba, Ibrahim Shehu, and Masa’ud Sa’ad – a mix of northern and southern names hinting at a cross-regional fraud network that preyed on Nigeria’s digital backbone.

Police swooped on the gang’s hideouts in coordinated raids across Kano and Katsina states in October 2025, with a final takedown in the Federal Capital Territory, recovering two mini-plazas masquerading as legitimate retail outlets stocked with over 400 laptops, about 1,000 mobile phones, and a Toyota vehicle.

Investigators also froze substantial sums in the suspects’ bank accounts, tracing the dirty money trail back to the diverted resources that left the unnamed telecom firm reeling from unauthorised activities reported in a desperate petition.

The breach, described by police as a “calculated assault on critical infrastructure,” allowed the hackers to manipulate the company’s systems undetected for months, offloading billions in airtime and data bundles through underground channels and raking in illicit profits.

Hundeyin vowed that the net was widening, with forensic experts combing through digital footprints and financial ledgers to expose any remaining accomplices or beneficiaries in what he called “one of the largest telecom heists in recent Nigerian history.”

Inspector-General of Police, IGP Kayode Adeolu Egbetokun, praised the crack team from the National Cybercrime Centre for their “relentless professionalism,” urging telecom firms to bolster cybersecurity amid a surge in digital predation.

As the suspects cool their heels awaiting arraignment under the Cybercrimes (Prohibition, Prevention) Act, the case underscores Nigeria’s growing battle against tech-savvy fraudsters targeting the N1.7 trillion telecom sector that powers millions of daily transactions.

Industry watchers warn that such breaches erode investor confidence and hike operational costs, ultimately passed onto consumers already grappling with soaring data tariffs in Africa’s most populous nation


Kindly share this post
Continue Reading

Telecom

ASVLP 2026: Africa, MENA VCs Gear Up as Tech Funding Hits $4.1bn Rebound

Published

on

Kindly share this post

As Africa and MENA’s startup ecosystems transition from post-correction resilience into a new phase of disciplined growth, the Africa Startup & VC Landscape Preview (ASVLP 2026) will convene leading founders, investors, policymakers, and ecosystem builders on January 29, 2026, for its second annual, agenda-setting virtual forum.

ASVLP 2026: Africa, MENA VCs Gear Up as Tech Funding Hits $4.1bn Rebound

Following a challenging global venture cycle, 2025 marked a notable rebound across the African ecosystem, with startups raising an estimated $3.2–$3.3 billion over the full year.

The recovery was accompanied by significant structural shifts: Kenya emerged as the leading destination among Africa’s “Big Four” markets for the first time, while Nigeria recorded a year-on-year funding decline, reflecting changing investor preferences, macroeconomic pressures, and a broader recalibration toward capital efficiency and sustainability.

Sectorally, fintech remained the most funded vertical, while climate & energy, AI-enabled solutions, healthtech, and infrastructure-adjacent businesses gained increasing attention. Across Africa and MENA, development finance institutions (DFIs) and family offices played a more pronounced role in anchoring funds, deploying catalytic capital, and supporting blended-finance structures, reshaping how early-stage and growth capital is mobilized.

ASVLP 2026 is designed to translate these data points into forward-looking strategy.

The forum will bring together venture capitalists, angel investors, LPs, DFIs, family offices, founders, corporate leaders, and regulators from Africa, MENA, Europe, and North America to assess 2025 outcomes and chart priorities for 2026.

The program will feature keynotes, fireside chats, panels, and deep-dive roundtables, including discussions on:

· The 2026 Africa & MENA FinTech Landscape, focusing on security, profitability, regulation, and growth frontiers

· Emerging Fund Managers, capital formation, and LP alignment

· Talent, operator depth, and institutional capacity as constraints to scale

· Regulatory evolution and cross-border market integration

A major highlight of ASVLP 2026 will be the Final DealRoom Pitch Session, where a curated group of high-potential startups will present to an experienced panel of investors.

• Founders can apply to pitch via: bit.ly/ASVLP-DR-Founders
• Investors seeking DealRoom access can request entry via: bit.ly/ASVLP-DR-Investors

Confirmed speakers for ASVLP 2026 include Khaled Ismail (HIMangel), Idris Ayodeji Bello (LoftyInc Capital), Zachariah George (Launch Africa), Tosin Faniro-Dada (Breega), Selma Ribica (FirstCircle Capital), Maha Mandour (COREangels MEA), Joe Kinvi (Borderless), Remi Prunier (Orange Ventures MEA), Karima El Hakim (Plug and Play Tech Center), Souheil Guessoum (President, The Confederation of Citizen Employers – Algeria (CAPC)), Remi Prunier (Partner, Orange Ventures, MEA), Maha Mandour (COREAngels MEA), Ali Hussein (President, Kenyan FinTech Association), Patrick Okebu (CIO, Interswitch Group) among other leading voices shaping capital, policy, and innovation across the region.

“The conversation has shifted,” said Uche Aniche, Convener of ASVLP. “It’s no longer about whether capital will return to Africa and MENA, but what kind of capital, deployed with what discipline, and in service of which long-term outcomes. ASVLP exists to help the ecosystem make sense of that transition.”

Participation in ASVLP 2026 is free but strictly by invitation.
Interested participants are encouraged to repost the official announcement on LinkedIn and comment #ASVLP2026 to receive a private registration link. They could also email [email protected] and request invite.


Kindly share this post
Continue Reading

Trending