Connect with us

E-Business

10 Cyber Security Trends to Watch in 2019

Published

on

Kindly share this post

Biometric hacking, an increase in phishing attacks and sophisticated use of artificial intelligence (AI) are among the top cyber security threats to be expected in 2019, as attackers stop at nothing to steal identities and evade detection through new techniques.

  1. Attacks through theft of biometric data

While several major leaks of biometric data have already occurred globally, the Middle East and Africa regions could see the first attacks in the theft and use of biometric data in 2019, according to Kaspersky Lab.

“As more biometric systems for user identification and authentication are being implemented by various financial institutions in META (Middle East, Turkey and Africa), 2019 will see criminals exposing vulnerabilities in passcodes, touch ID sensors and facial recognition,” says Fabio Assolini, senior security researcher at Kaspersky Lab.

“While many financial organisations consider these emerging biometric-based solutions to improve security over current authentication methods, biometric data will increasingly be used to steal sensitive information.”

  1. AI and machine learning make attacks harder to detect

Manuel Corregedor, COO at Telspace Systems, says 2019 will see more advanced exploitation of AI to carry out and conceal new exploits.

“I believe we will see an increase in attackers utilising AI and machine learning as a means to make their attacks more difficult to detect or prevent,” says Corregedor.

However, AI will also change the way the industry deals with threats.

Brian Pinnock, cyber security specialist at Mimecast, says AI and machine learning will play a more prominent role as the velocity and variety of attacks makes conventional approaches – such as blacklists – outdated and ill-equipped to deal with modern cyber threats.

“Organisations will realise the importance of threat intelligence and will focus on the need for an ‘intelligence function’ to identify threats,” says Pinnock.

  1. Phishing scams to soar

As e-mail attacks grow more frequent and complex, more organisations will be left scrambling for new ways to reduce risk and better detect and remediate threats in 2019.

Pinnock says throughout 2019, the most insidious development won’t be new attack types, but, rather, improved execution of existing attack types, especially those delivered via e-mail.

“Phishing techniques like the use of homoglyphs, elongated URLs, legitimate certifications (green lock), and credetial-harvesting sites will increase. Flawless phishes will continue to prey on the gap in human firewalls, pivoting internally around organisations and intensifying efforts to better educate all staff.”

Dr Jabu Mtsweni, research group leader for cyber defence at the Council for Industrial and Scientific Research (CSIR), points out that phishing scams are still quite popular as cyber security awareness remains low.

“Denial-of-service attacks on government Web sites were also popular in 2018. This includes injection of malware on government Web sites that remain undetected. In 2019, malicious e-mail and links will continue to be used by criminals to get access to organisations’ networks.”

  1. Fake videos bring a new era of fake news

UK-based innovation foundation Nesta forecasts that 2019 will see a new level of malicious posts on social media as fake videos set the next stage in fake news.

Lifelike computer-generated graphics – appearing to show video footage of events that never really happened – will be used to mislead the public.

“We predict that within the next 12 months, the world will see the release of highly authentic-looking malicious fake videos, which could cause substantial damage to diplomatic relations between countries,” says Nesta. “Deepfakes, a new AI-based technology that makes it possible to create fake videos of individuals nearly indistinguishable from the real thing, will make this possible.”

The innovation foundation believes that Deepfakes have the potential to spark a geo-political incident if a politician or celebrity is maliciously impersonated.

  1. Improved execution of existing attack types

In 2018, cyber attacks and data breaches continued to increase in both frequency and intensity, and organisations can expect more of the same in 2019, according to experts.

Corregedor points out that the biggest cyber security event of 2018 is probably just the sheer number of data breaches that have occurred across industry sectors, some utilising advanced attacks, others as a result of mistakes made by the affected organisations.

Over 4.5 billion data records were compromised worldwide in the first half of 2018, according to Gemalto’s latest Breach Level Index.

Pinnock points out that better social engineering, increases in credential stuffing attacks, and more complicated malware with multiple stages and different form factors for transmission will make threats incredibly tricky to detect in 2019.

“With global cyber crime organisations growing in maturity and sophistication, many are now acquiring capabilities that were once the sole reserve of nation states,” notes Pinnock

“We’re likely to see these cyber criminals use stolen credentials from the past few years’ data breaches to compromise the security of even the most secure organisations. Even companies with good cyber protection have little protection against the reuse of passwords that have been collected in other breaches.”

  1. Slight decrease in crypto currency attacks

According to Kaspersky Lab, 2018 saw a rise in the malicious use of crypto currency miners, with virus attacks and malicious software against crypto miners growing almost fourfold.

Kaspersky predicts that crypto currencies as a means of payment will decline further in 2019, and this trend is expected to lead to a slight decline in crypto currency threats.

“In the face of huge commissions, slow transfers, a large price for integration, and, most importantly, a small number of customers, the use of crypto currency as a method of payment has declined steadily from 2017 and will continue to decline in 2019.”

However, those crypto currency threats that do occur will be focused on mining malware, with the intervention of new players and the continuation of the use of ransomware.

“In 2018, the META region became more appealing to cyber criminals, with financial and malicious crypto mining attacks taking centre stage,” notes Assolini.

“Illegal mining of crypto currencies increased dramatically to overtake the main threat of the last few years – ransomware. We believe the reason for this is that mining is silent and causes less impact that ransomware, making it less noticeable.”

  1. Mobile, in-the-app malware

While malware that runs on the Windows operating system vastly outnumbers malware for any other platform, users of mobile devices are increasingly subject to malicious activity that pushes malware apps to their phones, tablets, or other devices running Android and iOS, according to computer network security company Sophos’ 2019 Threat Report.

For some time, malicious versions of popular apps were predominantly found on third-party app stores. These can be sketchy places, hosting pirated and/or trojaned versions of legitimate apps, notes the report.

Unusual malicious campaigns affecting the Android platform – phishing-in-the-app – can be expected in 2019, warns Sophos.

“In 2018, we discovered one way that criminals can bypass the Play Market’s source code checks was by not including anything malicious in the app itself, but rather by making an app that, in essence, is a browser window to a phishing site. The apps, in this case, were designed in tandem with the phishing site so the user had a seamless experience,” notes the report.

  1. 5G deployments to fuel threats

A number of 5G network infrastructure deployments kicked off this year, and 2019 is expected to be a year of accelerating 5G activity. While it will take time for 5G networks and 5G-capable phones and other devices to become broadly deployed, experts predict growth will occur rapidly.

According to Symantec’s Cyber Security Predictions: 2019 and Beyond, growing 5G deployments and adoption will expand the cyber-attacks surface area.

“As a stepping stone to broad deployment of 5G cellular networks, some carriers are offering fixed 5G mobile hotspots and 5G-equipped routers for homes. Given the peak data rate of 5G networks is 10 Gbps, the shift to 5G will catalyse new operational models, new architectures, and, consequently, new vulnerabilities.

“Over time, more 5G IoT devices will connect directly to the 5G network rather than via a WiFi router. This trend will make those devices more vulnerable to direct attack.”

  1. IIoT attacks not slowing down

Industrial IoT (IIoT) attacks through cloud infrastructure and over-reliance on AI in cyber security systems are two critical risks for enterprises in 2019, according to Forcepoint’s 2019 Cyber security Predictions Report.

“In 2019, attackers will break into industrial IoT devices by attacking the underlying cloud infrastructure. This target is more desirable for an attacker – access to the underlying systems of these multi-tenanted, multi-customer environments represents a much bigger payday.”

Three elements expected to play a significant role in the increase of IIoT attacks, according to the report, are: increasing network connectivity to edge computing; the difficulty in securing devices as more compute moves out to the edge; and the exponential number of devices connecting to the cloud for updates and maintenance.

  1. The rise of SaaS

Gilad Peleg, CEO of cyber security firm SecBI, predicts that in 2019, the model of enterprise software deployed on-premises will gradually disappear as it’s replaced by Software-as-a-Service (SaaS).

Many of the resources once in the hands of corporates, like the database, e-mail server, ERP, CRM and others, will all move to the cloud, leaving enterprises vulnerable, he observes.

“SaaS’ greatest advantage is also its greatest weakness. With SaaS, you need much less IT. This is a benefit at first glance, but upon inspection, it becomes a problem – you don’t control the access, or the data. Therefore, you don’t know you were hacked, nor do you have the tools to know,” notes Peleg.

“The security implications here are that organisations will cease to have visibility into the perimeter and all the perimeter’s defences. As enterprises acknowledge, they are left blind by this change, and will thus need new visibility solutions.”


Kindly share this post

Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

E-Business

NITDA Invites Public Input on Guidelines for IT Projects and Regulatory Instruments

Published

on

Kindly share this post

The National Information Technology Development Agency (NITDA) is seeking public feedback on several draft documents related to Information Technology (IT) projects and regulations. This aligns with NITDA’s commitment to an open and collaborative rulemaking.

The legal Documents Open for Public Review are:

  1. Guidelines for Licensing IT Projects Clearance Compliance Assurance Firms 2024;
  2. Regulatory Guidelines for Electronic Invoicing in Nigeria;
  3. Guidelines for Software Development; and
  4. Guidelines for Software Testing.

NITDA is also proposing the amendment of the Guidelines for Clearance of IT Projects for Federal Public Institutions (FPIs). guidelines, initially issued in 2018.

The Guidelines for Licensing IT Projects Clearance Compliance Assurance Firms 2024 aims to ensure that IT projects within Federal Public Institutions (FPIs) are managed and implemented according to approved and established standards, regulations, and best practices.

The instrument will regulate and professionalise the clearance of IT projects, ensuring that FPIs IT projects and initiatives are effectively conceptualised, designed, evaluated, and compliant with relevant Federal Government extant rules and standards in line with the Federal Government’s digital infrastructure goals and the Renewed Hope Agenda.

The Regulatory Guidelines for Electronic Invoicing is designed to promote transparency and deepen the use of technology for e-government automation as well as support the fiscal development of Nigeria through prudent administration of government revenue.

The guidelines will improve tax compliance, enhance efficiency and enhance standardisation and interoperability, thereby ensuring that Nigeria is ready for international digital commerce.

The Guidelines for Software Development establishes the minimum requirements for the development of software to be used by Nigerian government entities. It ensures that all software meets quality, security, and operational standards, promotes the growth of the local software testing market, and enhances the efficiency and effectiveness of government services.

The objectives of the guideline are to ensure that software is fit-for-purpose, meeting functional and non-functional requirements, and protect government institutions from operational risks through security, reliability, and performance standards.

To Participate:

These draft documents have undergone internal review and stakeholder consultations. NITDA now invites the public to contribute their feedback by reviewing the documents available for download at: https://nitda.gov.ng/draft-regulatory-instruments/

Public participation is crucial for NITDA to develop comprehensive and effective regulatory instruments.

By considering diverse perspectives, NITDA can ensure these guidelines best serve the needs of the IT industry and promote the development of a thriving digital economy in Nigeria.

Stakeholders are advised to  send in their review to [email protected] on or before 26th November 2024.

 


Kindly share this post
Continue Reading

E-Business

inq. Nigeria Celebrates Double Win at Tech Innovation Awards (TIA) 2024

Published

on

Kindly share this post

inq. Nigeria, the leading provider of Edge technology solutions in Nigeria, has achieved a remarkable double win at the 8th annual Technology Innovation Awards (TIA).

Known for delivering innovative, business-relevant solutions in Edge AI and IoT, SDN/NFV for Edge Cloud, Secure Access Service Edge (SASE), and Elastic Edge, inq. Nigeria was honoured as the “MVNO Provider of the Year” and received the “Cloud Product of the Year” award for its groundbreaking product, inq.Fabric.

The TIA Awards, one of the most prestigious accolades in the tech industry, celebrates exceptional individuals and organisations at the forefront of digital transformation. This year, inq. Nigeria was acknowledged for its comprehensive impact on the Nigerian tech landscape and its commitment to innovation.

The MVNO Provider of the Year award highlights inq. Nigeria’s leadership in delivering flexible, high-performance MVNO services in an emerging market.

Through its adaptable network platform, inq. empowers licensed MVNO providers with seamless, scalable connectivity solutions for data-driven applications and IoT, bypassing traditional infrastructure needs. This enables them to meet critical network demands and integrate efficiently across diverse environments in Nigeria’s evolving market.

The Cloud Product of the Year award celebrates inq. Nigeria’s inq.Fabric, a pioneering cloud connectivity solution that automates provisioning and routing for cloud access. This software-defined networking solution provides secure, agile, and reliable connectivity, supporting rapid deployment and scalability, which is critical for multinationals, government bodies, and SMEs in Nigeria.

Reflecting on this achievement, Ifeanyi Akosionu, Managing Director of Anglophone West Africa, inq. Nigeria, expressed his gratitude, stating, “These awards reflect our commitment to excellence and innovation. At inq., we are dedicated to continuously advancing our solutions, contributing to Nigeria’s economic growth by empowering businesses to thrive.”

He highlighted inq.’s leadership in supporting Nigeria’s emerging MVNO industry, noting, “Our MVNO solutions equip licensed providers with the agility, tools, and support needed to enter the market confidently and succeed in a dynamic landscape.” Akosionu also acknowledged Fabric by inq., which offers a flexible, cloud-based environment designed to boost productivity and streamline decision-making for clients.

Akosionu attributed inq.’s success to its close partnerships with a diverse clientele, whose collaboration inspired the development of forward-thinking solutions that address critical needs in connectivity and digital transformation across Nigeria.

Akosionu also extended appreciation to inq.’s dedicated team, saying, “Our thanks go to our valued customers for their trust and to our team at inq. Nigeria, whose dedication ensures that we consistently deliver world-class solutions.”

Previously, at the 7th edition of the TIA Awards, inq. Nigeria also received recognition as “IoT Solutions Provider of the Year” and “Digital Services Provider of the Year”, further solidifying its leadership in digital and IoT solutions.


Kindly share this post
Continue Reading

E-Business

NDPC Partners Adeoluwa, Digital Influencer on Protection Awareness

Published

on

Kindly share this post

Nigeria Data Protection Commission (NDPC) has taken a significant step forward in its mission to promote data protection and privacy awareness in Nigeria by signing a Memorandum of Understanding (MoU) with Enioluwa Adeoluwa, renowned social media influencer.

NDPC Partners Adeoluwa, Digital Influencer on Protection Awareness

L-r: Enioluwa Adeoluwa, renowned social media influencer andDr. Vincent Olatunji, national commissioner, NDPC, at the signing of the MoU

This partnership aims to harness the power of social media to educate Nigerians on the importance of data protection and privacy.

The MoU, which will last for six months and is subject to renewal, is also aimed at creating a safer digital landscape for all Nigerians.

Speaking in Abuja, Dr. Vincent Olatunji, national commissioner, NDPC, stressed that with over 40 million Nigerians using social media daily, data protection and privacy have become crucial concerns.

He noted that this number highlights the immense importance of safeguarding personal information in Nigeria’s digital landscape.

“The Nigerian government is really taking this up to ensure that Nigerians are protected. More importantly, we know that about 40 million Nigerians go online every day, which is significant considering there are about 120 million people in total. That is huge. For this reason, we have to ensure adequate measures for safety to safeguard the data within our country.

“And Nigerians know their rights under the Nigeria Data Protection Laws and understand the kind of measures they need to implement to protect their data,” he stated.

Dr. Olatunji explained that the MoU was signed to increase awareness about data protection and privacy in Nigeria, helping individuals understand their privacy rights and ensuring that data controllers and processors are aware of their obligations.

The National Commissioner emphasised that, with Enioluwa’s social media following, this partnership will aid in educating the public about the Commission’s mandate and in advancing its roadmap for awareness creation.

“This partnership with Enioluwa Adeoluwa marks a significant milestone in our efforts to promote data protection and privacy awareness in Nigeria. We believe that social media has the power to shape public discourse and influence behaviour, and we’re excited to leverage this platform to drive positive change,” Olatunji said.

On his part, Adeoluwa emphasised that his motivation for collaborating with the Commission is not driven by financial gain, but rather by a desire to contribute meaningfully to Nigeria’s development. He encouraged more young people to participate in nation-building to ensure that Nigeria can become great again.

The Nigeria Data Protection Act, which established the Commission, was signed into law on June 12, 2023, by President Bola Tinubu.

Since then, the Commission, led by Dr. Olatunji, has been working actively to ensure that every Nigerian understands his or her privacy rights.

The Commission’s mandate includes protecting the rights of data subjects, promoting data protection best practices, and ensuring compliance with data protection regulations.

 

 

 

 

 


Kindly share this post
Continue Reading

Trending