Sophos Announces Intercept X for Server with Endpoint Detection and Response To Help Businesses Battle Cyberattacks

By Soko Directory Team / June 4, 2019



spam security

Sophos, a global leader in network and endpoint security, today announced Intercept X for Server with Endpoint Detection and Response (EDR). By adding EDR to Intercept X for Server, IT managers can investigate cyberattacks against servers, a sought-after target due to the high value of data stored there.

Cybercriminals frequently evolve their methods and are now blending automation and human hacking skills to successfully carry out attacks on servers. This new type of blended attack combines the use of bots to identify potential victims with active adversaries making decisions about who and how to attack.

The SophosLabs Uncut article, Worms Deliver Cryptomining Malware to Web Servers, underscores how easy it is for cybercriminals to leverage bots to discover soft targets. The report explains an automated attack that can deliver a wide range of malicious code to servers that, as a class, tend to lag behind normal update cycles.

Anatomy of a Blended Cyberattack

Once the bots identify potential targets, cybercriminals use their savvy to select victims based on an organization’s scope of sensitive data or intellectual property, ability to pay a large ransom or access to other servers and networks. The final steps are cerebral and manual: break in, evade detection and move laterally to complete the mission. This could be to quietly sneak around to steal intelligence and exit unnoticed, disable backups and encrypt servers to demand high-roller ransoms or use servers as launch pads to attack other companies.

“Blended cyberattacks, once a page in the playbook of nation-state attackers, are now becoming regular practice for everyday cybercriminals because they are profitable. The difference is that nation-state attackers tend to persist inside networks for long lengths of time whereas common cybercriminals are after quick-hit money making opportunities,” said Dan Schiappa, chief product officer, Sophos.

“Most malware is now automated, so it’s easy for attackers to find organizations with weak security postures, evaluate their payday potential, and use hand-to-keyboard hacking techniques to do as much damage as possible.”

Sophos explains how blended cyberattacks work in this video, Intercept X for Server with Endpoint Detection and Response (EDR).

Sophos Intercept X for Server with EDR

With Sophos Intercept X for Server with EDR, IT managers at businesses of all sizes now have visibility across an entire estate. This allows them to proactively detect stealthy attacks, better understand the impact of a security incident and quickly visualize the full attack history.

“When adversaries break into a network, they head straight for the server. Unfortunately, the mission-critical nature of servers restrains many organizations from making changes, often significantly delaying patch deployment. Cybercriminals are counting on this window of opportunity. If organizations do fall victim to an attack, they need to know the full context of what devices and servers were hit in order to improve security as well as answer questions based on stricter regulatory laws. Knowing this information accurately the first time can help businesses resolve issues much faster and prevent them from a repeat data breach,” said Schiappa. “If regulators rely on digital forensics as evidence of lost data, then businesses can rely on the same forensics to demonstrate their data has not been stolen. Sophos Intercept X for Server with EDR provides this required insight and security intelligence.”

Sophos Intercept X for Server with EDR expands Sophos’ offering of EDR, which was first announced for endpoints in October 2018. Sophos EDR is powered by deep learning technology for more extensive malware discovery. Sophos’ deep learning neural network is trained on hundreds of millions of samples to look for suspicious attributes of malicious code to detect never-before-seen threats. It provides broad, expert analysis of potential attacks by comparing the DNA of suspicious files against the malware samples already categorized in SophosLabs.

“Our research shows that concerns about security and skills shortages are top of mind with IT and security leadership at many organizations,” said Fernando Montenegro, a senior industry analyst at 451 Research. “With cyber threats coming from multiple vectors and at a constant rate, businesses can’t afford to have a gap in their visibility. We believe that, as security teams look for opportunities to enhance their protection, bringing together EDR features and visibility across endpoints and servers is a positive step towards greater efficiency.”

With Sophos’ EDR feature, IT managers also have on-demand access to curated intelligence from SophosLabs, guided investigations into suspicious events, and recommended next steps. To maintain full visibility into the threat landscape, SophosLabs tracks deconstructs and analyzes 400,000 unique and previously unseen malware attacks each day.

“Our customers use Sophos Intercept X with EDR for their endpoints, and the feedback we’ve had is that Sophos’ EDR is easy to implement, easy to use and easy to manage. This reduces the skills needed to manage EDR and makes our customers much more effective at their protecting servers, a critical factor considering the high rate of attacks there,” said Sam Heard, president of Data Integrity Services, a Sophos partner in Lakeland, Fla. “With EDR for servers, Sophos is building upon its industry leading Intercept X endpoint protection. Sophos is also the only vendor to bring all of its security products together on one cloud-based management platform, Sophos Central, and connect its endpoint and network protection through Synchronized Security. Adding EDR for servers is yet another key industry advancement that will protect our customers.”

 



About Soko Directory Team

Soko Directory is a Financial and Markets digital portal that tracks brands, listed firms on the NSE, SMEs and trend setters in the markets eco-system.Find us on Facebook: facebook.com/SokoDirectory and on Twitter: twitter.com/SokoDirectory

View other posts by Soko Directory Team


More Articles From This Author








Other Related Articles










SOKO DIRECTORY & FINANCIAL GUIDE

ARCHIVES

2019
  • January 2019 (256)
  • February 2019 (216)
  • March 2019 (287)
  • April 2019 (254)
  • May 2019 (273)
  • June 2019 (138)
  • 2018
  • January 2018 (291)
  • February 2018 (219)
  • March 2018 (278)
  • April 2018 (225)
  • May 2018 (238)
  • June 2018 (178)
  • July 2018 (257)
  • August 2018 (249)
  • September 2018 (256)
  • October 2018 (287)
  • November 2018 (284)
  • December 2018 (187)
  • 2017
  • January 2017 (183)
  • February 2017 (195)
  • March 2017 (207)
  • April 2017 (104)
  • May 2017 (169)
  • June 2017 (206)
  • July 2017 (190)
  • August 2017 (195)
  • September 2017 (186)
  • October 2017 (235)
  • November 2017 (253)
  • December 2017 (266)
  • 2016
  • January 2016 (165)
  • February 2016 (165)
  • March 2016 (190)
  • April 2016 (143)
  • May 2016 (246)
  • June 2016 (183)
  • July 2016 (271)
  • August 2016 (249)
  • September 2016 (234)
  • October 2016 (191)
  • November 2016 (243)
  • December 2016 (153)
  • 2015
  • January 2015 (1)
  • February 2015 (4)
  • March 2015 (166)
  • April 2015 (109)
  • May 2015 (117)
  • June 2015 (121)
  • July 2015 (150)
  • August 2015 (157)
  • September 2015 (189)
  • October 2015 (170)
  • November 2015 (174)
  • December 2015 (208)
  • 2014
  • March 2014 (2)
  • 2013
  • March 2013 (10)
  • June 2013 (1)
  • 2012
  • March 2012 (7)
  • April 2012 (15)
  • May 2012 (1)
  • July 2012 (1)
  • August 2012 (4)
  • October 2012 (2)
  • November 2012 (2)
  • December 2012 (1)
  • 2011
    2010
    2009
    2008
    2007
    2006
    2005
    2004
    2003
    2002
    2001
    2000
    1999
    1998
    1997
    1996
    1995
    1994
    1993
    1992
    1991
    1990
    1989
    1988
    1987
    1986
    1985
    1984
    1983
    1982
    1981
    1980
    1979
    1978
    1977
    1976
    1975
    1974
    1973
    1972
    1971
    1970
    1969
    1968
    1967
    1966
    1965
    1964
    1963
    1962
    1961
    1960
    1959
    1958
    1957
    1956
    1955
    1954
    1953
    1952
    1951
    1950