Connect with us

E-Business

50 million Users Affected in Facebook Security Breach

Published

on

Kindly share this post

The world’s largest social network announced this evening that 50 million of its users were affected by a security breach that occurred earlier this week on Tuesday, 25 September.

Facebook says it has sorted the issue, but as a result many users will find they have to sign back into their accounts this weekend.

“We’re taking this incredibly seriously and wanted to let everyone know what’s happened and the immediate action we’ve taken to protect people’s security,” says Guy Rosen, Facebook VP of product management.

“Our investigation is still in its early stages. But it’s clear that attackers exploited a vulnerability in Facebook’s code that impacted ‘View As’, a feature that lets people see what their own profile looks like to someone else.

This allowed them to steal Facebook access tokens which they could then use to take over people’s accounts. Access tokens are the equivalent of digital keys that keep people logged in to Facebook so they don’t need to re-enter their password every time they use the app.”

Earlier this year the company reached two billion monthly active users for its main Facebook platform.

In a post on Facebook, CEO Mark Zuckerberg said: “We do not yet know whether these accounts were misused but we are continuing to look into this and will update when we learn more.”

Rosen says the vulnerability has been fixed and law enforcement has been informed.

He says all 50 million accounts affected have had their tokens reset, as well as a further 40 million accounts that have been subject to a ‘View As’ look-up in the last year.

“As a result, around 90 million people will now have to log back in to Facebook, or any of their apps that use Facebook Login. After they have logged back in, people will get a notification at the top of their News Feed explaining what happened.”

The company says it will also be temporarily turning off the ‘View As’ feature while they conduct a thorough security review.

Rosen says the attack exploited the complex interaction of multiple issues in Facebook’s code.

“It stemmed from a change we made to our video uploading feature in July 2017, which impacted ‘View As’. The attackers not only needed to find this vulnerability and use it to get an access token, they then had to pivot from that account to others to steal more tokens.

“Since we’ve only just started our investigation, we have yet to determine whether these accounts were misused or any information accessed. We also don’t know who’s behind these attacks or where they’re based. We’re working hard to better understand these details – and we will update this post when we have more information, or if the facts change.”

He says that if more affected accounts are found their access tokens will also be immediately reset.

“People’s privacy and security is incredibly important, and we’re sorry this happened,” says Rosen.

He says there is no need for anyone to change their passwords, but users who are having trouble logging back into Facebook, for example because they’ve forgotten their password, should visit the site’s Help Centre.


Kindly share this post

Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

E-Business

NITDA to Integrate of Digital Literacy into School Curriculum

Published

on

Kindly share this post

Kashifu Abdullahi, director general of the National Information Technology Development Agency (NITDA), announced plans to integrate digital literacy into Nigeria’s education system, to achieve a 70% literacy rate by 2027 and 95% by 2030.

NITDA to Integrate of Digital Literacy into School Curriculum

Kashifu Abdullah, DG, NITDA

The NITDA’s DG made the announcement on Wednesday in Abuja during a media parley.

He stated that in order to include digital literacy in the curriculum at all educational levels, from kindergarten to university, the Agency was collaborating with the Federal Ministry of Education.

Abdullahi, said that this program would equip Nigerians with the digital know-how and abilities they need to succeed in the digital economy.

He emphasized that NITDA would also launch the “Digital Literacy for All Initiative” to educate Nigerians outside the formal education system and provide access to quality digital content.

Nigeria would train over two million young people in in-demand IT skills in order to become significant global outsourcing hub

NITDA is also collaborating with the Defence Headquarters and security agencies to develop digital solutions to address security concerns, including the use of drones, artificial intelligence, and other digital resources to combat banditry, abduction, and terrorism, he said.

 

According to him, the agency’s draft SRAP 2.0 plan aims to establish Nigeria as a digitally empowered nation, with a focus on innovation, national prosperity, and inclusivity.

The director general of NITDA added that, if successfully implemented, this strategy could propel Nigeria into a new phase of digital empowerment and leadership in the global digital economy.


Kindly share this post
Continue Reading

E-Business

Experts Highlight Trusted Relationships as Key Vector

Published

on

Kindly share this post

In 2023, more than 1/5 of cyberattacks persisted for over a month, the annual Kaspersky Incident Response 2023 report has revealed, with trusted relationships emerging as one of the main attack vectors in these prolonged cases.

The report draws on the results of Kaspersky’s cyberattack investigations throughout the year, gathered when supporting organisations sought incident response assistance or when hosting expert events for their internal incident response teams.

Primary reasons of organisations approaching Kaspersky Incident Response team with service requests were encrypted files (32.8% of requests), suspicious activities (31%), data leakage (20%), and also included non-authorised accesses (3%), service unavailability (3%) and money theft (1.6%).

Among initial attack vectors of the investigated incidents were exploiting public facing application (42.4%), compromised accounts and BruteForce attacks (28.8% in total), trusted relationships (6.78%), phishing (5%), insider’s activity (3.4%).

Kaspersky Incident Response 2023 report indicates that long-lasting cyberattacks that persist for more than a month constituted 21.85% of the total, increasing from 2022 by 5.55%.

One notable trend observed in these attacks was the exploitation of trusted relationships as a primary vector. Compromises leveraging trusted relationships have occurred previously, but in 2023 their frequency increased.

As this method of attack enables threat actors to infiltrate multiple victims through a single compromised organisation, investigative teams face several additional challenges. Firstly, initially targeted organisations don’t always recognise the importance of thorough investigations and may be reluctant to cooperate.

Secondly, attacks initiated through trusted relationships often require more time to progress from the initial intrusion to the final incursion phase. Therefore 50% of these attacks lasted more than a month. A similar proportion of attacks exceeding one month were exclusively registered within the insider and phishing vectors.

“Our latest findings underscore the critical role of trust in cyberattacks. In 2023 and for the first time in recent years, attacks through trusted relationships were among the three most used vectors. Half of these incidents were discovered only after a data leak had been found.

“By exploiting trusted relationships, threat actors can prolong attacks and infiltrate networks for extended periods, posing significant risks to organisations. It’s imperative for businesses to remain vigilant and prioritise security measures to safeguard against such sophisticated tactics,” comments Konstantin Sapronov, Head of Global Emergency Response Team at Kaspersky.

 


Kindly share this post
Continue Reading

E-Business

OmniRetail Emerges First in Financial Times’ Ranking of Africa’s Fastest-Growing Companies

Published

on

Kindly share this post

Omniretail, a B2B enablement platform focusing on digital infrastructure in Sub-Saharan Africa, is proud to announce it has secured the top position in the Financial Times (FT) ranking of Africa’s Fastest-Growing Companies for 2024.

The ranking, now in its third year, continues to highlight the dynamism and growth of companies in sectors including fintech, renewable energy, healthcare, e-commerce, and agriculture.

The FT presents Africa’s Fastest Growing Companies list comprising innovative, modern, companies growing at scale, that are the driving force of the international economy in the 21st century.

The Financial Times partners with Statista, to produce similar rankings for companies in Europe, Asia, and America. The inclusion of OmniRetail as part of this prestigious list is a testament to its success and exceptional performance.

Similar to the ranking for other markets, the Africa list places companies by their compound annual growth rate (CAGR) in revenue between 2019 and 2022. OmniRetail has grown by 772.39% over these 3 years, making it Africa’s fastest-growing company in 2024.

Launched in 2019, OmniBiz is the flagship product of OmniRetail, a distribution platform that digitises the supply chain from distributors to retailers by embracing a retailer-first, asset-light approach.

OmniBiz enables retailers to place orders directly from manufacturers. These orders are fulfilled by partner distributors, who specialise in warehousing, while transportation responsibilities are delegated to third-party logistics providers, ensuring delivery to retailers within 24 hours.

OmniRetail is building a collaborative platform that includes other innovative tools like OmniPay and Mplify, which equips retailers with essential resources and tools to procure products, build and access credit, and optimise their business for higher profitability and scale. With over 140,000 small retailers and over 200 brands onboarded, OmniRetail aims to redefine the retail industry in Africa.

Deepankar Rustagi, CEO of OmniRetail, said, “We’re proud to enter the FT Africa’s fastest-growing list for the first time and even more so to be at the top of the list.

This is a tribute to the hard work and perseverance of everyone at OmniRetail. Africa deserves a robust digital infrastructure layered on top of the existing informal retail sector, and we’re proud of the progress we’ve made so far.

We are equally proud of our work towards empowering and supporting more retailers previously excluded by the financial ecosystem and those experiencing cash flow issues to enhance their supply chain processes.

Through OmniRetail, we help retailers grow through our integrated digital infrastructure providing access to essential goods and capital. We will continue to improve infrastructure for efficient product distribution, envisioning more product variety and efficient distribution to even more remote areas.

As a company, we are on a journey to completely eliminate the inefficiencies of traditional trade by digitising the key stakeholders across the value chain”.

OmniRetail’s business model revolves around the OmniBiz platform, which digitises the supply chain, while OmniPay processes over $50 million in transactions.

This emphasises high-margin product categories and offers structured rebates and incentives.  To optimise delivery van loads, OmniRetail uses an algorithm and operates with a robust model that includes decentralised warehousing.

At least 78% of OmniRetail’s retailers and distributors are women, reflecting robust financial inclusion by providing access to banking services, working capital, and genuine digitisation.

The company works with more than 4800 distributor partners and 1100 committed vehicles and compensates partners based on delivered value. OmniRetail recently achieved profitability, boasting gross margins of 9% and net contribution margins of 5% as of January 2024, with a registered retailer base of 144,000.


Kindly share this post
Continue Reading

Trending