E-Business
10 Cyber Security Trends to Watch in 2019
Biometric hacking, an increase in phishing attacks and sophisticated use of artificial intelligence (AI) are among the top cyber security threats to be expected in 2019, as attackers stop at nothing to steal identities and evade detection through new techniques.
- Attacks through theft of biometric data
While several major leaks of biometric data have already occurred globally, the Middle East and Africa regions could see the first attacks in the theft and use of biometric data in 2019, according to Kaspersky Lab.
“As more biometric systems for user identification and authentication are being implemented by various financial institutions in META (Middle East, Turkey and Africa), 2019 will see criminals exposing vulnerabilities in passcodes, touch ID sensors and facial recognition,” says Fabio Assolini, senior security researcher at Kaspersky Lab.
“While many financial organisations consider these emerging biometric-based solutions to improve security over current authentication methods, biometric data will increasingly be used to steal sensitive information.”
- AI and machine learning make attacks harder to detect
Manuel Corregedor, COO at Telspace Systems, says 2019 will see more advanced exploitation of AI to carry out and conceal new exploits.
“I believe we will see an increase in attackers utilising AI and machine learning as a means to make their attacks more difficult to detect or prevent,” says Corregedor.
However, AI will also change the way the industry deals with threats.
Brian Pinnock, cyber security specialist at Mimecast, says AI and machine learning will play a more prominent role as the velocity and variety of attacks makes conventional approaches – such as blacklists – outdated and ill-equipped to deal with modern cyber threats.
“Organisations will realise the importance of threat intelligence and will focus on the need for an ‘intelligence function’ to identify threats,” says Pinnock.
- Phishing scams to soar
As e-mail attacks grow more frequent and complex, more organisations will be left scrambling for new ways to reduce risk and better detect and remediate threats in 2019.
Pinnock says throughout 2019, the most insidious development won’t be new attack types, but, rather, improved execution of existing attack types, especially those delivered via e-mail.
“Phishing techniques like the use of homoglyphs, elongated URLs, legitimate certifications (green lock), and credetial-harvesting sites will increase. Flawless phishes will continue to prey on the gap in human firewalls, pivoting internally around organisations and intensifying efforts to better educate all staff.”
Dr Jabu Mtsweni, research group leader for cyber defence at the Council for Industrial and Scientific Research (CSIR), points out that phishing scams are still quite popular as cyber security awareness remains low.
“Denial-of-service attacks on government Web sites were also popular in 2018. This includes injection of malware on government Web sites that remain undetected. In 2019, malicious e-mail and links will continue to be used by criminals to get access to organisations’ networks.”
- Fake videos bring a new era of fake news
UK-based innovation foundation Nesta forecasts that 2019 will see a new level of malicious posts on social media as fake videos set the next stage in fake news.
Lifelike computer-generated graphics – appearing to show video footage of events that never really happened – will be used to mislead the public.
“We predict that within the next 12 months, the world will see the release of highly authentic-looking malicious fake videos, which could cause substantial damage to diplomatic relations between countries,” says Nesta. “Deepfakes, a new AI-based technology that makes it possible to create fake videos of individuals nearly indistinguishable from the real thing, will make this possible.”
The innovation foundation believes that Deepfakes have the potential to spark a geo-political incident if a politician or celebrity is maliciously impersonated.
- Improved execution of existing attack types
In 2018, cyber attacks and data breaches continued to increase in both frequency and intensity, and organisations can expect more of the same in 2019, according to experts.
Corregedor points out that the biggest cyber security event of 2018 is probably just the sheer number of data breaches that have occurred across industry sectors, some utilising advanced attacks, others as a result of mistakes made by the affected organisations.
Over 4.5 billion data records were compromised worldwide in the first half of 2018, according to Gemalto’s latest Breach Level Index.
Pinnock points out that better social engineering, increases in credential stuffing attacks, and more complicated malware with multiple stages and different form factors for transmission will make threats incredibly tricky to detect in 2019.
“With global cyber crime organisations growing in maturity and sophistication, many are now acquiring capabilities that were once the sole reserve of nation states,” notes Pinnock
“We’re likely to see these cyber criminals use stolen credentials from the past few years’ data breaches to compromise the security of even the most secure organisations. Even companies with good cyber protection have little protection against the reuse of passwords that have been collected in other breaches.”
- Slight decrease in crypto currency attacks
According to Kaspersky Lab, 2018 saw a rise in the malicious use of crypto currency miners, with virus attacks and malicious software against crypto miners growing almost fourfold.
Kaspersky predicts that crypto currencies as a means of payment will decline further in 2019, and this trend is expected to lead to a slight decline in crypto currency threats.
“In the face of huge commissions, slow transfers, a large price for integration, and, most importantly, a small number of customers, the use of crypto currency as a method of payment has declined steadily from 2017 and will continue to decline in 2019.”
However, those crypto currency threats that do occur will be focused on mining malware, with the intervention of new players and the continuation of the use of ransomware.
“In 2018, the META region became more appealing to cyber criminals, with financial and malicious crypto mining attacks taking centre stage,” notes Assolini.
“Illegal mining of crypto currencies increased dramatically to overtake the main threat of the last few years – ransomware. We believe the reason for this is that mining is silent and causes less impact that ransomware, making it less noticeable.”
- Mobile, in-the-app malware
While malware that runs on the Windows operating system vastly outnumbers malware for any other platform, users of mobile devices are increasingly subject to malicious activity that pushes malware apps to their phones, tablets, or other devices running Android and iOS, according to computer network security company Sophos’ 2019 Threat Report.
For some time, malicious versions of popular apps were predominantly found on third-party app stores. These can be sketchy places, hosting pirated and/or trojaned versions of legitimate apps, notes the report.
Unusual malicious campaigns affecting the Android platform – phishing-in-the-app – can be expected in 2019, warns Sophos.
“In 2018, we discovered one way that criminals can bypass the Play Market’s source code checks was by not including anything malicious in the app itself, but rather by making an app that, in essence, is a browser window to a phishing site. The apps, in this case, were designed in tandem with the phishing site so the user had a seamless experience,” notes the report.
- 5G deployments to fuel threats
A number of 5G network infrastructure deployments kicked off this year, and 2019 is expected to be a year of accelerating 5G activity. While it will take time for 5G networks and 5G-capable phones and other devices to become broadly deployed, experts predict growth will occur rapidly.
According to Symantec’s Cyber Security Predictions: 2019 and Beyond, growing 5G deployments and adoption will expand the cyber-attacks surface area.
“As a stepping stone to broad deployment of 5G cellular networks, some carriers are offering fixed 5G mobile hotspots and 5G-equipped routers for homes. Given the peak data rate of 5G networks is 10 Gbps, the shift to 5G will catalyse new operational models, new architectures, and, consequently, new vulnerabilities.
“Over time, more 5G IoT devices will connect directly to the 5G network rather than via a WiFi router. This trend will make those devices more vulnerable to direct attack.”
- IIoT attacks not slowing down
Industrial IoT (IIoT) attacks through cloud infrastructure and over-reliance on AI in cyber security systems are two critical risks for enterprises in 2019, according to Forcepoint’s 2019 Cyber security Predictions Report.
“In 2019, attackers will break into industrial IoT devices by attacking the underlying cloud infrastructure. This target is more desirable for an attacker – access to the underlying systems of these multi-tenanted, multi-customer environments represents a much bigger payday.”
Three elements expected to play a significant role in the increase of IIoT attacks, according to the report, are: increasing network connectivity to edge computing; the difficulty in securing devices as more compute moves out to the edge; and the exponential number of devices connecting to the cloud for updates and maintenance.
- The rise of SaaS
Gilad Peleg, CEO of cyber security firm SecBI, predicts that in 2019, the model of enterprise software deployed on-premises will gradually disappear as it’s replaced by Software-as-a-Service (SaaS).
Many of the resources once in the hands of corporates, like the database, e-mail server, ERP, CRM and others, will all move to the cloud, leaving enterprises vulnerable, he observes.
“SaaS’ greatest advantage is also its greatest weakness. With SaaS, you need much less IT. This is a benefit at first glance, but upon inspection, it becomes a problem – you don’t control the access, or the data. Therefore, you don’t know you were hacked, nor do you have the tools to know,” notes Peleg.
“The security implications here are that organisations will cease to have visibility into the perimeter and all the perimeter’s defences. As enterprises acknowledge, they are left blind by this change, and will thus need new visibility solutions.”
Galaxy Backbone (GBB) has unveiled a new corporate identity, signalling what the organisation described as a new phase of growth and readiness to support the future of digital governance in Nigeria.
The unveiling of the identity was part of activities marking 20 years of providing critical digital infrastructure and services to government institutions.
According to GBB, the rebranding signals the organization’s strategic evolution from a core government ICT infrastructure provider to a broad national digital transformation enabler connecting governments, businesses, and institutions.
Speaking at the 20th anniversary celebration and awards ceremony in Abuja, Senator George Akume, secretary to the Government of the Federation, urges GBB to lead the next phase of Nigeria’s digital transformation.
Represented by Dr Ibrahim Kana, permanent secretary, General Services Office, Akume, described the organisation as a key driver of modern governance, cybersecurity and digital service delivery across Nigeria.
He said Galaxy Backbone has evolved from a modest initiative into the nation’s foremost provider of secure government connectivity, cloud infrastructure, data hosting and shared ICT services, helping to improve efficiency, transparency and collaboration across Ministries, Departments and Agencies.
‘Digital transformation is no longer an option but a necessity. Nations that embrace technology and innovation are better positioned to achieve sustainable economic growth, improve governance outcomes and enhance the quality of life of their citizens,” he said.
Senator Akume stressed that digital transformation is now essential for economic growth and effective governance. He urged Galaxy Backbone to strengthen its role in emerging technologies, including artificial intelligence, cloud computing, blockchain and big data analytics, to support Nigeria’s digital economy and public sector modernisation.
“The next phase of Nigeria’s digital transformation will require greater innovation, stronger cybersecurity capabilities, expanded broadband infrastructure and deeper collaboration among stakeholders,” he added.
Earlier in his remarks, Professor Ibrahim Adeyanju, managing director of Galaxy Backbone, said the organisation’s journey began with a bold vision to connect government institutions and make digital infrastructure a strategic national asset. He noted that two decades later, the organisation has become a critical pillar of Nigeria’s digital ecosystem.
“Twenty years ago, a bold idea was born. An idea that government could be more connected, that technology could transform governance, and that digital infrastructure could become a strategic national asset,” Adeyanju said.
Professor Adeyanju said Galaxy Backbone’s achievements were made possible through the support of the Federal Government, stakeholders, partner agencies and generations of staff who helped build the institution.
He added that the organisation’s greatest strength remains its workforce and reaffirmed its commitment to innovation, service delivery and talent development.
Nigeria Data Protection Commission (NDPC) has said that it plans to seek a review of the Nigeria Data Protection Act (NDPA) 2023 to address emerging technologies such as Artificial Intelligence (AI), robotics and big data, amid growing concerns over privacy, cybersecurity and data governance in an increasingly digital economy.
The proposed review comes as regulators across the world grapple with the rapid adoption of AI-driven technologies and the challenges they pose to existing legal frameworks designed to protect personal data and privacy rights.
Experts believe the move signals Nigeria’s determination to align its data protection regime with global technological developments and emerging regulatory standards.
Speaking during activities marking the third anniversary of the signing of the Nigeria Data Protection Act into law, Dr. Vincent Olatunji, national commissioner and chief executive officer of the NDPC, said the current law requires updates to adequately reflect technological realities that have evolved significantly since its enactment.
According to him, the pace of innovation has made it necessary for policymakers to move beyond broad references to emerging technologies and provide clearer regulatory guidance.
“We are in the era of emerging technologies. At the time the law was drafted, we could only make broad references to emerging technologies, but today we can specifically mention Artificial Intelligence, robotics and big data,” Olatunji said.
The NDPC boss noted that technologies which were once considered futuristic have now become central to economic activities, digital services and public administration.
“Ten years ago, nobody was talking about AI the way we are doing now, but today it has become central to virtually every aspect of digital transformation. We need to be more specific about what constitutes emerging technologies and provide examples because the technologies keep evolving,” he added.
Industry stakeholders say the review is timely, given the increasing deployment of AI tools across sectors including banking, telecommunications, healthcare, education and public services.
They argue that clearer rules are needed to govern automated decision-making, algorithmic accountability, data ownership and cross-border data transfers.
The proposed amendment also aligns with the National Assembly’s ongoing work to assess the existing law and identify areas to strengthen in light of evolving cyber threats and technological advancements.
Senator Afolabi Salisu, chairman, Senate Committee on ICT and Cybersecurity, had earlier indicated that lawmakers were reviewing the legislation to ensure it remains relevant in addressing developments such as AI and emerging cybercrime threats.
Analysts believe the review could further strengthen investor confidence in Nigeria’s digital economy by providing clearer regulatory certainty for businesses operating in data-intensive sectors.
The NDPA 2023 established the NDPC as the country’s primary data protection regulator and created a legal framework for the collection, processing, storage and transfer of personal data.
Since its enactment, the Commission has ramped up enforcement, compliance monitoring, and awareness campaigns to strengthen data governance across public and private institutions.
Olatunji, however, cautioned against excessive reliance on AI technologies, stressing that human oversight remains critical in data processing and decision-making systems.
“We still need the human component. We should not leave everything to artificial intelligence,” he said.
He further noted that issues relating to digital footprints, privacy rights and responsible data use would continue to demand regulatory attention as technology becomes more integrated into everyday life.
Technology policy experts say the emergence of generative AI, machine learning systems and autonomous technologies has created new legal and ethical questions that many existing privacy laws were not originally designed to address.
These include concerns around automated profiling, bias in AI systems, consent management, surveillance and accountability for decisions made by intelligent systems.
Meanwhile, the NDPC has in recent months demonstrated a growing focus on AI governance, including participation in international initiatives aimed at promoting responsible and privacy-conscious deployment of artificial intelligence technologies.
Stakeholders believe that any amendment to the Act should strike a balance between protecting citizens’ privacy rights and supporting innovation within Nigeria’s rapidly expanding digital economy.
Hence, the proposed review signals the likelihood of stricter compliance obligations for business and increased scrutiny of how personal data is collected, processed and utilised.
While experts advise organisations to begin strengthening internal governance frameworks, data management systems and privacy compliance programmes in anticipation of future regulatory changes.
Consequently, the planned review of the Data Protection Act underscores the growing recognition that regulatory frameworks must evolve alongside technological innovation, while for policymakers, the challenge will be ensuring that the law remains flexible enough to encourage innovation while robust enough to protect citizens in an era increasingly defined by data and artificial intelligence.
Federal government has banned the use of personal email accounts, such as Gmail, Yahoo Mail, or Hotmail, for official public-sector transactions, mandating that civil servants transition to a secure, institutional digital platform.
This ban requires all government officials to use secure institutional platforms with the approved .gov.ng domain to safeguard sensitive data.
The announcement was made in Abuja by Didi Esther Walson-Jack, head, the Civil Service of the Federation, during a digital transformation summit held to celebrate the 20th anniversary of Galaxy Backbone.
According to Walson-Jack, the government has activated more than 115,000 official GovMail accounts to ensure that communication within the federal civil service remains secure, professional, and easy to track.
She said government activities should no longer rely on personal email services or informal channels that make record-keeping difficult.
The Head of service explained that official information must remain within government systems even when an officer leaves a position.
This, she said, will help preserve important records and prevent the loss of government information tied to individual workers.
The Head of Service also disclosed that the Federal Government achieved a major target by completing the digitalisation of work processes across all 38 federal ministries and extra-ministerial departments before the end of December 2025.
She described the development as proof that reforms can succeed when there is clear leadership and commitment from government institutions.
According to her, the achievement shows that the civil service is capable of adapting to modern methods of operation.
Walson-Jack recalled that in the past, government files could easily be delayed, misplaced, or trapped in lengthy approval processes.
She said the shift to digital systems now makes it easier to monitor documents, improve accountability, and measure progress in government operations.
Walson-Jack added that the paperless civil service initiative is aimed at making government work more efficient by cutting delays, reducing unnecessary bureaucracy, improving transparency, and allowing records to be retrieved and processed faster.
Galaxy Backbone @ 20, Unveils New Identity
ALTON Backs CBN on Local Data Hosting Rule for Banks, Fintechs
MTN Nigeria Commits to Ethical Conduct with IFRS S1, S2 Compliance
NDPC to Review Data Law to Address AI, Privacy Concerns
FG Moves to End Double Taxation
CBN Extends PoS Geo-Fencing Enforcement Deadline to August 2026
London Strengthens Global Investment Ties with Africa @ First Ever London-Africa Business Summit
FG Targets Alleged N3tn Capital Flight, Opens Airtime Credit Market to Nigerian Fintechs
Japan, UNESCO Boost Digital Learning in 15 CoEs with Donation of ICT Equipment
African Electric Vehicle Platform Raises $215m to Scale Electric Mobility in Nigeria, Others
Telecom3 days agoTikTok, ICC Gather Nigeria’s Entrepreneurs to Drive Small Business Growth and Digital Transformation
E-Business3 days agoPayaza Launches AI-powered Storefront Platform to Drive Cross-border Commerce
Telecom3 days agoNigeria Moves to End Solar Imports as NASENI, REA Seal Major Renewable Energy Deal
Telecom3 days agoHow a New NITDA-TikTok Partnership Could Transform Thousands of Nigerian Businesses
E-Business3 days agoFG Bans Use of Gmail, Other Personal Emails for Civil Service Operations
E-Financial3 days agoNAICOM’s 18 Months Management Spill @ African Alliance Ends
E-Financial3 days agoStandard Bank Targets $15.4b SME Growth in Nigeria, Others with Trade Expansion Drive
General News3 days agoIndwelt Studios Seeks Increased Awareness @ World Sickle Cell Day