Sophos launches ITDR to combat growing identity-based cyberattacks

Sophos has announced the launch of Sophos Identity Threat Detection and Response (ITDR) — a new capability for Sophos XDR and Sophos MDR that helps organizations rapidly detect, investigate, and remediate identity-based attacks.

The launch marks a significant milestone following Sophos’ Secureworks acquisition, introducing the first Secureworks solution fully integrated into the Sophos Central platform. This integration strengthens Sophos’ security operations (SecOps) portfolio, delivering comprehensive identity protection for over 600,000 customers worldwide.

Identity-based threats are now among the fastest-growing attack vectors globally. The Sophos X-Ops Counter Threat Unit (CTU) observed a 106% increase in stolen credentials available for sale on the dark web between June 2024 and June 2025. The Sophos Active Adversary Report also found that compromised credentials were the top root cause of attacks for the second consecutive year, with 56% of incidents involving attackers using valid accounts to access remote services.

“Cloud and remote work have expanded ...