Kaspersky has released a new update to its Managed Detection and Response (MDR) service, introducing capabilities that further strengthen monitoring, threat detection and investigation across customer environments and give security teams broader context for faster, more confident decisions.
According to the Anatomy of a Cyber World: Global Report by Kaspersky Security Services, attacks leveraging valid accounts represent 25% of all initial attack vectors. Instead of exploiting software vulnerabilities, attackers increasingly rely on stolen or leaked legitimate credentials, making their activity appear as normal user behavior and significantly harder to detect.
To help organizations address this challenge, Kaspersky has integrated Digital Footprint Intelligence (DFI) data into Kaspersky Managed Detection and Response (MDR), so now the product automatically correlates intelligence on leaked credentials with security events in real time. This enables analysts to identify potential account compromise earlier, prioritize incidents more accurately and carry out more targeted threat hunting, helping security teams catch account misuse sooner and reduce the risk of unauthorized access before it escalates into a full-blown attack.
Operational visibility has also been enhanced with new Asset Status Notifications, which alert administrators whenever a protected asset needs attention, making it easier to spot telemetry collection or connectivity issues before they affect monitoring coverage. Administrators can also define expected host limits per tenant, giving service providers greater control over how licenses are distributed and managed across their customer base.
Platform coverage has grown as well, with support added for Kaspersky Embedded Systems Security for Linux 4.0, extending MDR protection to Linux-based embedded environments.
Alongside these enhancements, the latest release introduces a range of smaller usability and platform enhancements that round out the overall MDR experience. As the threat landscape continues to evolve, Kaspersky remains committed to expanding MDR’s capabilities, sharpening its threat detection and investigation tools, and delivering the innovations organizations need to stay resilient against emerging threats.
"We continuously evolve Kaspersky MDR to help organizations detect sophisticated threats earlier and respond to them more effectively. The integration of Digital Footprint Intelligence adds another important layer of context for our analysts by enabling them to correlate compromised credential intelligence with security events and proactively search for signs of account compromise. Together with improved operational visibility, these enhancements help security teams make faster, more informed decisions and strengthen their resilience against increasingly sophisticated attacks," comments Renat Turianov, Kaspersky MDR Product Owner at Kaspersky.
Kaspersky Managed Detection and Response (MDR) is an expert-led service that delivers 24/7 monitoring, detection, investigation and rapid response to sophisticated cyberthreats. Designed for organizations that lack the resources for around-the-clock security monitoring, the service augments existing security controls with global threat intelligence and experienced security analysts, providing continuous protection throughout the entire incident management lifecycle, from threat detection to remediation. Learn more about product capabilities on the dedicated page.
