Connect with us

GRTech

Sophos Partners with Tenable to Launch New Sophos Managed Risk Service

Published

4 months ago

on

Sophos Partners with Tenable

. New Fully Managed Solution Provides Visibility, Risk Monitoring, Prioritization, Investigation, and Proactive Notification to Prevent Cyberattacks  

April 4, 2024 – Sophos, a global leader of innovative security solutions that defeat cyberattacks, today announced a strategic partnership with Tenable, the Exposure Management company, to provide Sophos Managed Risk, a worldwide vulnerability and attack surface management service.

The new service features a dedicated Sophos team that leverages Tenable’s exposure management technology and collaborates with the security operations experts from Sophos Managed Detection and Response (MDR) to provide attack surface visibility, continuous risk monitoring, vulnerability prioritization, investigation, and proactive notification designed to prevent cyberattacks.

The modern attack surface has expanded beyond traditional on-premises IT boundaries, with organizations operating frequently unknown numbers of external and internet-facing assets that are unpatched or under protected, leaving them vulnerable to cyberattackers.

This is evident in the newest Sophos Active Adversary Report, also released, which identifies three tasks that organizations must prioritize to minimize the risk of brazen intrusions that lead to ransomware or other types of attacks.

These include closing exposed Remote Desktop Protocol (RDP) access, enabling multi-factor authorization and patching vulnerable servers, all of which were top entry points in breaches handled by Sophos Incident Response in 2023.

The Sophos Managed Risk service can assess an organization’s external attack surface, prioritize the riskiest exposures, such as open RDP, and provide tailored remediation guidance to help eliminate blind spots and stay ahead of potentially devastating attacks.

“Sophos and Tenable are two industry security leaders coming together to address urgent, pervasive security challenges that organizations continuously struggle to control. We can now help organizations identify and prioritize the remediation of vulnerabilities in external assets, devices and software that are often overlooked. It is critical that organizations manage these exposure risks, because unattended, they only lead to more costly and time-consuming issues and are often the root causes of significant breaches,” said Rob Harrison, senior vice president for endpoint and security operations product management at Sophos. “We know from Sophos’ worldwide survey data that 32% of ransomware attacks start with an unpatched vulnerability and that these attacks are the most expensive to remediate. The ideal security layers to prevent these issues include an active approach to improving security postures by minimizing the chances of a breach with Sophos Managed Risk, Sophos Endpoint, and 24×7 Sophos MDR coverage.”

“While the latest zero day may dominate the headlines, the biggest threat to organizations, by a large margin, is still known vulnerabilities – or vulnerabilities for which patches are readily available,” said Greg Goetz, vice president of global strategic partners and MSSP, Tenable. “A winning approach includes risk-based prioritization with context-driven analytics to proactively address exposures before they become a problem. Sophos Managed Risk, powered by the Tenable One Exposure Management Platform, delivers outsourced preventive risk management, enabling organizations to anticipate attacks and reduce cyber risk.”

Specific key benefits of Sophos Managed Risk include:

  • External Attack Surface Management (EASM): Advanced identification and classification of internet-facing assets, such as web and email servers, web applications, and public-facing API endpoints
  • Continuous monitoring and proactive notification of high-risk exposures: Proactive notification when a new critical vulnerability is identified in an organization’s internet-facing assets
  • Vulnerability prioritization and identification of new risks: Swift detection of high-risk and zero-day vulnerabilities, followed by real-time notification to ensure critical internet-facing assets are promptly identified, investigated and responded to by order of importance

“One of the biggest challenges organizations face when improving their security posture is prioritizing what to handle first. This type of guidance helps solve that issue and reduces the workload for security teams tasked with tackling vulnerability and exposure management,” said Craig Robinson, research vice president of Security Services, IDC. “Solutions such as Sophos Managed Risk can be a differentiator by enabling overwhelmed teams to take a more holistic approach to continuous monitoring and threat management.”  

Sophos Managed Risk is available as an extended service with Sophos MDR, which already protects more than 21,000 organizations globally. The Sophos Managed Risk team is Tenable-certified and works closely with Sophos MDR to share essential information about zero-days, known vulnerabilities and exposure risks to assess and investigate possibly exploited environments.

“Sophos Managed Risk simplifies the difficult and resource consuming task of identifying vulnerabilities, really understanding the extent of risk exposure, and prioritizing necessary remediations,” said Kieron Stone, cybersecurity business development manager at Phoenix Software Ltd. “As a trusted managed service provider (MSP), this is a service we’re proud to stand behind, and nearly all our customers using it have already discovered significant vulnerabilities that they were previously unaware of. For organizations that don’t already have a well-defined vulnerability patching cadence, this is a must-have service for the identification of vulnerabilities and building that schedule; and for organizations that are already managing vulnerabilities, it’s a second set of eyes for added peace of mind that they’re not missing anything.”

Organizations benefit through regular interaction, including scheduled meetings with Sophos experts to review recent discoveries, insights into the current threat landscape, and recommendations for remediation and prioritizing actions. Additionally, organizations can initiate inquiries via the Sophos Central platform, allowing users to directly engage with the Sophos Managed Risk team for tailored support, reports and to review their latest prioritized alerts.

“You can’t fix what you can’t see. Sophos Managed Risk is shining a light on areas of exposure that require remediation in order to keep customers protected. Combining Sophos’ elite MDR experts with Tenable’s industry-leading exposure management technology gives us a full picture view of vulnerabilities with the guidance we need to minimize risk,” said Brooks Roy, president at Communications Consulting, Inc. “The real value add for us as a channel partner is having the ability to easily manage Sophos Managed Risk’s prioritized alerts across our customer base on the Sophos Central dashboard.”

Sophos Managed Risk is available with a term license through Sophos’ global network of channel partners and Managed Service Providers (MSPs). A Sophos MSP Flex version will be available in 2024.

Related Topics:

GrassRoots.ng is on a critical mission; to objectively and honestly represent the voice of ‘grassrooters’ in International, Federal, State and Local Government fora; heralding the achievements of political and other leaders and investors alike, without discrimination. This daily, digital news publication platform serves as the leading source of up-to-date information on how people and events reflect on the global community. The pragmatic articles reflect on the life of the community people, covering news/current affairs, business, technology, culture and fashion, entertainment, sports, State, National and International issues that directly impact the locals.

Continue Reading

Startups

Scaleup with STEP: How STEP Empowering Startups & Talent in Africa

Published

5 days ago

on

July 22, 2024

By

Scaleup with STEP

Africa is rapidly becoming a hotbed for innovation, entrepreneurship, and technological advancements.

Yet, for many startups and talented individuals, the journey from concept to market traction and revenue is often fraught with challenges.

Enter the Startup and Talent Enhancement Program (STEP), a pioneering initiative by IDEA Africa, with support from the UK-Nigeria Tech Hub. STEP is not just a program; it’s a transformative force empowering startups and talent across Africa to scale up and achieve sustainable growth.

The vision of STEP is simple yet profound: to bridge the gap between potential and success for startups that have moved beyond the post-revenue stage but are struggling with technical debt, growth hacking, marketing, and other critical areas. How? By giving them access to a large pool of professionally trained talent, strategic market advice from industry experts with years of experience, and a community with like-minded people and fellow founders. By providing targeted intervention and strategic resources, STEP ensures that these startups are not just surviving but thriving.

STEP’s approach is holistic, providing support in multiple areas crucial for startup success. From offering technical assistance, helping startups overcome technical debt and improve their product offerings to providing growth hacking strategies and tools to drive rapid growth and scale operations, to offering marketing insights and resources to effectively market products and reach the right audience and also assisting startups in developing robust business strategies that ensure long-term success.

STEP is committed to empowering individual talent and helping mentors attain fulfilment. By connecting skilled professionals and experienced mentors with high-potential startups, STEP not only helps these individuals find meaningful work and fulfilment but also fosters a culture of innovation and collaboration. This creates a dynamic ecosystem where both startups, talent and mentors can thrive.

To maintain the quality and impact of the program, STEP employs a rigorous selection process. Startups are evaluated based on their growth potential, market fit, and alignment with STEP’s objectives. This ensures that only the most promising startups, ready to embrace transformative changes, are chosen. The result is a cohort of high-potential startups primed for success.

Why STEP?

We are not just another initiative, but an organisation committed to transforming lives and businesses. We believe in the power of local startups to drive economic growth and create jobs. With tailored support and resources, we help you overcome challenges and reach new heights. Also, we provide comprehensive talent and mentor support, connecting you with skilled professionals who can help take your business to the next level. At STEP, we are dedicated to the professional growth of individuals. Through our program, selected talent will receive upskilling opportunities and access to job placements that match their skills, ensuring a bright future for all.

Application Details:

Key Dates:

  • Application Period: July 22nd – August 31st, 2024

How to Apply for Startups, Talent and Mentors:

  1. Click www.steptech.ng
  2. Select your track
  3. Create an account with us
  4. Verify your email
  5. Log in to start your application

How to Apply for Hubs:

Join STEP in Transforming the Startup Ecosystem

We invite all innovators, from startups to mentors, talent, and hubs, to join us in this exciting journey. STEP is your opportunity to make a significant impact, drive innovation, and contribute to the growth of the startup ecosystem in Enugu, Rivers, and Ekiti states.

“Scaleup with STEP” is not just a call to action; it is a testament to the potential and resilience of African startups and talent. By providing targeted support, fostering connections, and driving innovation, STEP is paving the way for a brighter future in Africa’s tech landscape. Join STEP today and be a part of this incredible transformation.

Join the Community

Stay connected with us on LinkedIn, Twitter, Instagram, and Facebook for updates, success stories, and live Q&A sessions. One of the most vital parts of STEP is the community that we are creating. By joining STEP, you join a community of like-minded innovators, tech enthusiasts, and industry experts. This community is a place to collaborate, share experiences, and form long-term connections that can help your startup grow.

Follow STEP’s innovative and exciting journey on social media platforms @steptechnigeria on Instagram, Facebook, LinkedIn, and X.

For more information, visit the website or contact the team at [email protected].

About IDEA Africa:

IDEA Africa is a leading organization dedicated to fostering innovation and entrepreneurship across Africa.

Through various initiatives and partnerships, IDEA Africa supports the growth of startups and the professional development of talent, driving economic growth and technological advancement in the region.

Continue Reading

GRTech

Sophos Named Customers’ Choice for Endpoint Protection Platforms (EPP) by Gartner

Sophos Achieved a 4.8/5.0 Rating for Both Categories and Rated as a Customers’ Choice for all Available Segments Within the Reports

Published

1 week ago

on

July 19, 2024

By

Sophos Intercept X

Sophos, a global leader of innovative security solutions for defeating cyberattacks, today announced it has been named Customers’ Choice in the Gartner Peer Insights Voice of the Customer for Endpoint Protection Platforms (EPP) and Network Firewalls reports.

This achievement includes 4.8/5.0 scoring ratings in both categories. Sophos is also rated a Customers’ Choice for all available segments within the two reports.

“Winning one Gartner Customers’ Choice is a great achievement, but winning two in crucial interrelated categories is incredible and a strong reflection of our relentless focus to deliver optimal security outcomes for our customers,” said Rob Harrison, senior vice president, Product Management – SecOps and Endpoint Security. “Endpoint protection that works seamlessly with network security is a winning formula to defend against today’s innovative and persistent adversaries who are consistently devising new techniques to carry out ransomware and other potentially business-ending cyberattacks. This synergy enhances threat detection, reduces response times, and simplifies management, ultimately fortifying organizations against complex cyber threats that require proactive prevention and automated interventions at multiple points on the attack chain.”

Sophos Intercept X customer quotes from the endpoint protection platforms report include:

  • “Sophos endpoint provides the most robust anti ransomware protection in the industry,” IT manager in the manufacturing industry.
     
  • “Sophos endpoint protection combines multiple prevention techniques to reduce the attack,” IT manager in the education industry.

  • “Intercept X provides us protection against various cyber threats using its combination of signature-based, behavioral and machine learning methods enduring protection against malware, ransomware and other malicious activities,” network and security engineer in the manufacturing industry.

  • “It’s a great experience to work with Sophos Intercept X due to its robustness and unparalleled capability against any exploits and ransomware. It is truly amazing that this product works seamlessly while handling any threats at the system end,” manager in the media industry.

Sophos Firewall customer quotes from the network firewall report include:

A complimentary copy of the Gartner Peer Insights Voice of the Customer: Endpoint Protection Platforms report is available here.

A complimentary copy of the Gartner Peer Insights Voice of the Customer: Network Firewalls report is available here.

Continue Reading

GRTech

Ransomware Recovery Costs for Energy and Water Sectors Rise to $3m in 1 Year, Sophos Survey Finds

49% of Ransomware Attacks Against These 2 Critical Infrastructure Sectors Started with an Exploited Vulnerability

Published

1 week ago

on

July 17, 2024

By

Sophos’ Annual State of Ransomware

Sophos, a global leader of innovative security solutions for defeating cyberattacks, today released a sector survey report, “The State of Ransomware in Critical Infrastructure 2024,” which revealed that the median recovery costs for two critical infrastructure sectors, Energy and Water, quadrupled to $3 million over the past year.

This is four times higher than the global cross-sector median. In addition, 49% of ransomware attacks against these two critical infrastructure sectors started with an exploited vulnerability.

Data for the State of Ransomware in Critical Infrastructure 2024 report comes from 275 respondents at energy, oil and gas, and utilities organizations, which fall under the Energy and Water sectors of CISA’s 16 defined critical infrastructure sectors.

The results for this sector survey report are part of a broader, vendor-agnostic survey of 5,000 cybersecurity/IT leaders conducted between January and February 2024 across 14 countries and 15 industry sectors.

“Criminals focus where they can cause the most pain and disruption so the public will demand quick resolutions, and they hope, ransom payments to restore services more quickly. This makes utilities prime targets for ransomware attacks. Because of the essential functions they provide, modern society demands they recover quickly and with minimal disruption,” said Chester Wisniewski, global Field CTO.

“Unfortunately, public utilities are not only attractive targets but vulnerable to attacks on many fronts, including the requirement for high availability and safety, as well as an engineering mindset focused on physical security. There’s a preponderance of older technologies configured to enable remote management without modern security controls like encryption and multifactor authentication. Like hospitals and schools these utilities are frequently operating with minimal staffing and without the IT staffing required to stay on top of patching, the latest security vulnerabilities and the monitoring required for early detection and response.”

On top of growing recovery costs, the median ransom payment for organizations in these two sectors jumped to more than $2.5 million in 2024—$500,0000 higher than the global cross-sector median.

The Energy and Water sectors also reported the second highest rate of ransomware attacks. Overall, 67% of the organizations in these sectors reported being hit by ransomware in 2024, in comparison to the global, cross-sector average of 59%.

Other findings from the report include:

  • The energy and water sectors reported increasingly longer recovery times. Only 20% of organizations hit by ransomware were able to recover within a week or less in 2024, compared to 41% in 2023 and 50% in 2022. Fifty-five percent took more than a month to recover, up from 36% in 2023. In comparison, across all sectors, only 35% of companies took more than a month to recover
  • These two critical infrastructure sectors reported the highest rate of backup compromise (79%) and the third highest rate of successful encryption (80%) when compared to the other industries surveyed

“This once again shows that paying ransom payments almost always works against our best interests. An increasing number (61%) paid the ransom as part of their recovery, yet the amount time it took to recover was extended. Not only do these high rates and amounts of ransoms encourage more attacks on the sector, but they are not achieving the claimed goal of shorter recovery times,” said Wisniewski.

“These utilities must recognize they are being targeted and take proactive action to monitor their exposure of remote access and network devices for vulnerabilities and ensure they have 24/7 monitoring and response capabilities to minimize outages and shorten recovery times. Incident response plans should be planned in advance, the same as for fires, floods, hurricanes and earthquakes, and be rehearsed on a regular schedule.”
Read the full State of Ransomware in Critical Infrastructure on Sophos.com.

Continue Reading

Trending