News

Latest news about B2B cyber security >>> PR agencies: add us to your mailing list - see contact! >>> Book an exclusive PartnerChannel for your news!

IT Security Act 2.0: Implementation assistance for KRITIS organizations
IT Security Act 2.0: Implementation aid for KRITIS organizations

IT Security Act 2.0: Operators of critical infrastructures (KRITIS) are legally obliged to take “reasonable organizational and technical precautions” to prevent cyber attacks. With the passing of the "IT Security Act 2.0" (ITSiG 2.0) in spring 2021, these obligations were tightened again. From May 2023, the operators of critical infrastructures must implement these and, above all, have “attack detection systems” available. Sophos, as an APT response service provider (Advanced Persistent Threat) officially qualified by the BSI, has therefore created a solution brief for KRITIS that helps companies and organizations to adapt their security measures in good time in accordance with the new requirements. 144 million new malicious programs…

Read more

BSI ranks Sophos as a Qualified APT Response Provider
SophosNews

After an intensive examination, the Federal Office for Information Security (BSI) included Sophos in its list of qualified service providers in the APT area. The official list of the BSI makes it easier for operators of critical infrastructures to select suitable companies in the field of IT forensic services. After an extensive review process, Sophos is now on the list of qualified APT (Advanced Persistent Threat, or APT) response service providers for KRITIS companies. This overview supports operators of critical infrastructures in identifying suitable service companies that are able to uncover camouflaged cyber attacks that attack a network or system over a longer period of time without much research effort...

Read more

Complete server protection with Sophos Cloud Native Security
Complete server protection with Sophos Cloud Native Security

The new security solution with comprehensive protection coverage Sophos Cloud Native Security protects all servers in companies - from on-premises to multi-cloud, from Windows to Linux and offers full integration with Sophos Central. With Sophos Cloud Native Security, Sophos has introduced a solution that offers comprehensive security coverage across cloud environments, functions, services and identities. Sophos Cloud Native Security bundles the two products Sophos Intercept X Advanced for servers with XDR and Sophos Cloud Optix Advanced. It supports companies in securing cloud environments and offers high transparency, central administration...

Read more

Sophos X-Ops combines Labs, SecOps and AI
Sophos X-Ops brings together SophosLabs, Sophos SecOps and Sophos AI

Concentrated threat intelligence: Sophos announces Sophos X-Ops. Sophos X-Ops combines SophosLabs, Sophos SecOps and Sophos AI under one roof. Combination of three established Sophos cybersecurity expert teams helps companies to protect themselves even more effectively against cyber attacks. Sophos announces Sophos X-Ops, a new cross-functional unit of SophosLabs, Sophos SecOps and Sophos AI. The three established cybersecurity expert teams are being combined so that companies can be defended even more effectively against constantly changing and increasingly complex cyberattacks. Sophos X-Ops brings together the predictive, real-world, and deeply researched threat intelligence of all teams to collectively create stronger and more innovative protection, detection, and...

Read more

When Hive, LockBit, BlackCat attack one after the other
When Hive, LockBit, BlackCat attack one after the other

Multiple attacks by ransomware groups are catching on - Hive, LockBit and BlackCat ransomware gangs attack the same network one after the other. This is what the Sophos X-Ops Active Adversary Whitepaper shows: attacked company received three different ransomware reports for triple-encrypted files. In the current Sophos X-Ops Active Adversary whitepaper "Multiple Attackers: A Clear and Present Danger", Sophos reports that three well-known ransomware groups, Hive, LockBit and BlackCat, attacked the same network one after the other. The first two attacks occurred within two hours, with the third attack occurring two weeks later. Each ransomware group left their own ransom note and some of the…

Read more

Ransomware: BlackCat uses Brute Ratel as an attack tool
SophosNews

Sophos X-Ops presents the latest threat intelligence results. BlackCat ransomware gang uses the Brute Ratel pentesting tool as a new attack tool. Attack series shows how cybercriminals infect computers worldwide through unpatched firewalls and VPN services. Sophos X-Ops reveals in the new BlackCat Ransomware Attacks Not Merely a Byproduct of Bad Luck report that the ransomware gang has added the Brute Ratel pentesting tool to its arsenal of attack tools. The article describes a series of ransomware attacks in which BlackCat used unpatched or outdated firewalls and VPN services to penetrate vulnerable networks and systems in various industries worldwide. BlackCat with Ransomware-as-a-Service The…

Read more

Cyber ​​Insurance Guide – What Matters!
Cyber ​​Insurance Guide – What Matters!

Sophos has created a new guide on cyber insurance and gives useful tips on what companies should pay attention to. Cyber ​​insurance is like other insurance: first of all, it hurts because it causes costs, and when the damage occurs, you are happy to have one. But what exactly can be secured with cyber insurance and which rules apply? How can companies keep the sum insured low despite high coverage? And which coverage amount is the right one? The crux of the matter is that there are many variables involved in cyber insurance. decision support...

Read more

Sophos: Security Switch series with 2.5G models
SophosNews

Sophos offers two new security switches. The high-end switches of the 200 series with 24 and 48 ports extend Sophos' integrated cyber security ecosystem. After the launch of the first Sophos switches managed from the cloud in January 2022, the security specialist is now presenting two more 2.5G high-end models from the 200 series: the 24-port switch CS210-24FP and the 48-port switch CS210-48FP. Both models have been available through distribution and channel partners since June 14, 2022. For hybrid working environments and remote Especially for hybrid working environments and many remote workplaces, the simple setup streamlines and facilitates the…

Read more

86 percent want to increase their IT security budget by 2024
86 percent want to increase their IT security budget by 2024

Many companies are aware of the operational dangers of IT incidents. They are planning investments in technology and know-how and are also approaching new security approaches such as Zero Trust. In the current survey, 86 percent of companies state that they want to increase their IT security budget by 2024. A survey by techconsult, in which Sophos participated, shows what technical decision-makers from trade, industry or service providers expect from security solutions. Over 50 percent have had an attack More than half of all respondents (52 percent) have had under one (12 percent) or…

Read more

Triple penalty: ransomware extortion, data loss, fines
Triple penalty: ransomware extortion, data loss, fines

Negligent companies are quickly punished threefold: first ransomware extortion, then data loss, and last but not least, the penalty fee for a poor recovery plan. That's how complex ransomware can invade company resources. Last year, ransomware brought a US company that produces fuel to its knees. Behind this were criminal "partner companies" of the notorious DarkSide group. A typical example of a RaaS (ransomware as a service) attack: a small core team of criminals develops malware, makes it available to other bad guys, and handles victims' ransoms. However, they lead the actual attack...

Read more