2025 Active Adversary Roundtable

Cyber attackers no longer need to break into your network — they simply log in. The 2025 Sophos Active Adversary Report, built on insights from over 500 real-world incidents handled by Sophos Incident Response and managed detection and response (MDR) teams, reveals how today’s threat actors are moving faster, smarter, and more silently than ever before.

Join our expert roundtable featuring John Shier, Field CISO – Threat Intelligence, Sophos; Hilary Wood, Senior Threat Analyst, Sophos; and Morgan Demboski, Threat Researcher, Sophos - as we break down the top five findings from the report and share how organizations can shift from a purely defensive posture to proactive detection and response.

Discover how early visibility into attacker behavior can stop breaches before damage is done.

In this session, we’ll cover:

• Why compromised credentials remain the most popular way for adversaries to obtain access to targeted networks.
• Dwell time being down across the board (and why that's a good thing).
• How to stop a ransomware attack in a short amount of time, before attackers can steal sensitive data.
• The continuing threat of ransomware targeting small businesses.
• Why attackers don't have to rely on custom-built malware as much as they once did, and what that means for detection.

Gain actionable insights and practical takeaways to strengthen your cybersecurity strategy for 2025 and beyond.

Can’t attend live? Register anyway and we’ll send you the recording to watch at your convenience.

‍