SOPHOS LAUNCHES ENHANCED LINUX CLOUD WORKLOAD PROTECTIONS>
Cyber Security Connect
These enhancements accelerate the detection and response of in-progress attacks and security incidents within Linux operating systems, to improve security operations and bolster application performance.

According to new SophosLabs research, distributed denial-of-service (DDoS) tools, cryptocurrency miners and various types of backdoors were the top three types of Linux threats detected by Sophos in a dataset from January through March 2022. DDoS tools accounted for nearly half of all Linux malware detections during this time, likely due to automated attacks attempting to reinfect updated servers rapidly and repeatedly.

Through the integration of Capsule8 technology, which Sophos acquired in July 2021, Sophos Cloud Workload Protection provides powerful and lightweight visibility into on-premise, data centre and cloud-based Linux hosts and containers, securing them from advanced cyber threats. It leverages analytics around attacker tactics, techniques and procedures (TTPs) to provide cloud-native threat detections, including: Container escapes: Identifies attackers escalating privileges from container access to hosts. Cryptominers: Detects behaviours commonly associated with cryptocurrency miners. Data destruction: Alerts that an attacker may be trying to delete indicators of compromise that are part of an ongoing investigation. Kernel exploits: Highlights if internal kernel functions are being tampered with on a host. Once threats are detected, Sophos XDR (extended detection and response) is designed to assign risk scores to incidents and provides contextual data that enable security analysts as well as the Sophos Managed Threat Response team to streamline investigations and focus on the highest priority incidents. Integrated Live Response further establishes a secure command line terminal to hosts for rapid remediation.
Link: https://www.cybersecurityconnect.com.au/commercial/7753-sophos-unveils-powerful-cloud-workload-protection-advancements-with-new-linux-and-container-security-offerings