Sophos launches Fusion to unify security operations

Sophos launched Sophos Fusion, a unified cybersecurity platform spanning security operations, endpoint, network, identity, email and cloud protection. Built as a rebuild of Sophos Central, which is used by 625,000 organizations, Fusion moves the platform onto an open architecture and incorporates Taegis analytics from Secureworks.

The platform is designed to reduce fragmentation across security teams that often manage more than 45 separate security products. Sophos says Fusion uses a shared real-time data layer, Synchronized Security across control points, agentic AI for analyst-governed investigation and response, and threat intelligence that feeds back across its customer base. The company said its own agentic security operations center serves more than 40,000 customers, with AI resolving 52% of cases without human involvement and an average of 89 seconds from alert to automated response.

New Fusion components will roll out between August and October, including a next-generation SIEM, expanded managed detection and response, and a rebuilt XDR on Aug. 15. Sophos AI Defense enters early access in August and becomes generally available in October, while Sophos CISO Advantage is also planned for October.

Sophos also reported that compromised identities are now behind 79% of ransomware attacks. Its survey of 2,158 security and information technology leaders across 17 countries found multifactor authentication was enabled at least partly in 97% of breaches involving stolen credentials, while average cleanup costs reached $1.7 million per incident.