Cyfer Tech Blog

Cyfer Tech Celebrates Excellence: Proud Sophos Gold Partners 

At Cyfer Tech, we’re committed to partnering with industry leaders who exemplify excellence and innovation in cybersecurity. That’s why we’re thrilled to highlight our partnership with Sophos, a company renowned for its dedication to channel excellence and commitment to empowering partners like us. 

Recently, CRN®, a leading authority in the technology industry, unveiled its prestigious 2024 Women of the Channel list, and we’re proud to announce that an impressive 19 Sophos executives have been recognized for their outstanding contributions to the channel. These remarkable women have demonstrated creative and strategic leadership that continues to shape the technology landscape and drive success for channel partners and customers alike. 

Among the distinguished honorees are Kendra Krause, Senior Vice President of Global Channels and Small Business Sales; Justine Lewis, Chief Marketing Officer; and Caralyn Stern, Vice President of Americas and Global Marketing – Channel, Brand, and Content. Their visionary leadership has propelled Sophos to the forefront of the cybersecurity industry, inspiring innovation and driving positive change. 

Notably, Krause, Lewis, and Stern have also been honored on CRN’s Power 100 Elite List of Distinguished Leaders, further underscoring their influence and impact within the IT channel ecosystem. This elite recognition acknowledges their advocacy, expertise, and unwavering dedication to advancing opportunities for their organizations and the broader channel community. 

At Cyfer Tech, we deeply value our partnership with Sophos and the exceptional leadership demonstrated by its executives. Kendra Krause aptly describes Sophos as a “channel-first, channel-best company,” and we wholeheartedly agree. With a steadfast commitment to providing innovative cybersecurity solutions and unparalleled support, Sophos enables us to deliver cutting-edge protection to our clients and stay ahead of evolving threats. 

We extend our heartfelt congratulations to all the Sophos executives recognized in CRN’s 2024 Women of the Channel list. Your remarkable achievements inspire us and drive us to continually raise the bar in cybersecurity excellence. Together, we’re shaping the future of technology and making the digital world safer for all. 

As we celebrate this milestone, we reaffirm our dedication to delivering Sophos’ industry-leading solutions and empowering our clients to navigate the ever-changing cybersecurity landscape with confidence. Cheers to a bright future of collaboration, innovation, and success with Sophos! 

Breaking News: Sophos Firewall v20 MR1 Unleashes Powerful New Features 

Attention all cybersecurity enthusiasts! Sophos has just unleashed its latest marvel: Sophos Firewall v20 MR1. This maintenance release packs a punch, boasting an array of groundbreaking features that rival even major firewall version updates. Here’s what you need to know: 

Enhanced Firewall Security and Access Control 

In the realm of cybersecurity, granular control is key. Sophos Firewall v20 MR1 introduces device access updates that provide meticulous control over WAN services, elevating your firewall’s security posture to unprecedented levels. Say hello to heightened security without the hassle. 

Furthermore, the Local ACL exceptions list welcomes new services, including AD SSO, Captive Portal, RADIUS SSO, and more. Flexibility reigns supreme with support for FQDN hosts, host groups, and MAC addresses in access rule exceptions. It’s security customization at its finest. 

Revamped VPN Capabilities 

Get ready to elevate your VPN game with the upgraded OpenVPN module to v2.6.0. This enhancement turbocharges SSL VPN security and performance, ensuring seamless connectivity and fortified defenses. Plus, enjoy SD-WAN and VPN enhancements that minimize traffic disruption and bolster gateway availability, making downtime a thing of the past. 

Effortless Deployment with Zero-Touch Technology 

Gone are the days of laborious on-site deployments. Sophos Firewall v20 MR1 introduces true zero-touch deployment via Sophos Central. Simply plug in your new firewall and let Sophos Central handle the rest. No USB key required. Its deployment is made easy, allowing you to focus on what matters most: safeguarding your network. 

Introducing the Generative AI Firewall Assistant 

Say hello to your new cybersecurity ally: the Generative AI Firewall Assistant. Powered by cutting-edge AI technology, this assistant is your go-to resource for firewall management. Need help configuring DNAT or navigating complex firewall settings? Simply ask, and the assistant will provide clear instructions and valuable resources, ensuring you’re always equipped to tackle any challenge. 

Seamless Language Detection and Firmware Updates 

Sophos Firewall v20 MR1 takes user experience to the next level with automatic language detection at login, catering to your preferences effortlessly. Plus, stay ahead of the curve with innovative hotfix capabilities that deliver urgent patches “over the air,” ensuring your firewall remains fortified against emerging threats. 

Upgrade Today for Unparalleled Cybersecurity 

Excited to harness the power of Sophos Firewall v20 MR1? Good news: this upgrade is free for all licensed Sophos Firewall customers. Don’t miss out on the opportunity to fortify your network defenses and stay one step ahead of cyber threats. Upgrade now and experience the future of cybersecurity with Sophos. 

In conclusion, Sophos Firewall v20 MR1 is more than just a maintenance release—it’s a game-changer. With groundbreaking features, seamless deployment, and unparalleled security, it’s time to elevate your cybersecurity strategy with Sophos Firewall v20 MR1. Upgrade today and unleash the full potential of your network defense. 

Defenders Assemble: Progress in the Fight Against Ransomware 

A New Era of Collaboration in Cybersecurity 

Ransomware is a menace that has terrorized businesses, governments, and individuals for years. But new research indicates a glimmer of hope. By strengthening public-private alliances and improving response strategies, we may be turning the tide against this ever-evolving threat. At Cyfer Tech, we’re excited to share the latest developments and discuss the crucial steps that have helped pave the way for this progress. 

Building Trust and Breaking Barriers 

Historically, victims of ransomware faced harsh criticism and public shaming for their perceived “failures.” This victim-blaming culture often resulted in the underreporting of incidents, preventing law enforcement from understanding the full scope of the problem. Fear of reputational damage, stock price drops, and fatalistic attitudes further contributed to the silence. 

However, regulatory efforts, such as the SEC’s latest guidance and the upcoming CIRCIA (Cyber Incident Reporting for Critical Infrastructure Act) rules from CISA, are changing the narrative. These initiatives encourage organizations to report cyber incidents, reducing stigma and increasing support for victims. 

The recent Sophos State of Ransomware survey reveals a remarkable shift: 98% of US organizations attacked by ransomware reported the incident to law enforcement or government regulators. Out of those, 65% received investigative help, and 63% received advice or assistance in recovering encrypted or stolen data. Despite this progress, 11% found it challenging to engage with law enforcement due to chaos during incident response or a lack of preparation. 

Reinforcing Our Defenses 

While the cooperation between victims and authorities is improving, significant challenges remain. Most organizations still struggle with prevention and deterrence, with exposed and unpatched vulnerabilities serving as gateways for attackers. In the “Sophos Active Adversary Report for H1 2024,” they found that in almost one-sixth of ransomware incidents, attackers exploited known vulnerabilities. Additionally, multifactor authentication (MFA), despite its proven effectiveness, is not widely deployed in small and mid-sized organizations. Stolen credentials were responsible for 56% of breaches in the 2023 data. 

To address these issues, we need a comprehensive approach involving improved incident response planning, better communication with law enforcement, and increased public awareness of security risks. 

Taking Action: A Roadmap for Success 

Here are the key strategies we believe will drive further progress against ransomware: 

• Leverage Data to Empower Law Enforcement: By demonstrating high levels of reporting, Sophos can advocate for dedicated ransomware-trained police investigators to expand efforts to dismantle criminal networks. Successful operations like QakBot, ALPHV/BlackCat, and LockBit disruptions show that concerted efforts can undermine ransomware infrastructure. 
• Enhance Security Practices: Organizations must adopt a proactive stance toward security, patching vulnerabilities, and deploying MFA. CISA’s “Secure by Design” initiative aims to encourage software vendors to create more secure products and ensure frictionless updates, reducing the need for constant user intervention. 
• Simplify Updates and Improve User Experience: Automatic security updates, like modern browsers, are essential. At Cyfer Tech, we use products with automatic emergency security fixes and continuous monitoring to reduce risks. 
• Increase Accountability for Private Data: Organizations must prioritize data protection and assess security risks related to stolen credentials and unpatched internet-facing equipment. CISA’s beta program for vulnerability scanning is a step in the right direction, providing a resource for organizations to identify and address security gaps. 
• Combat Cryptocurrency Abuse: Aggressive action against bitcoin mixers and tumblers is crucial to disrupt the ransomware money trail. The traceability of Bitcoin offers an opportunity to curb illicit cash flow if regulatory efforts can be applied globally. 

Moving Forward with Determination 

Though progress is being made, there’s no room for complacency. The battle against ransomware requires coordinated efforts across international boundaries, public and private sectors, and a commitment to constant improvement. By cutting off funding, dismantling criminal networks, enhancing our defenses, and cooperating globally, we can continue to make headway in the fight against ransomware. 

The path ahead is challenging, but the stakes couldn’t be higher. Let’s unite and take action. The time to act is now.