E-Business
HP Threat Research Shows Attackers Exploiting Zero-Day Vulnerability Before Enterprises Can Patch
HP Inc. has released its latest global HP Wolf Security Threat Insights Report, providing analysis of real-world cybersecurity attacks. By isolating threats that have evaded detection tools and made it to user endpoints, HP Wolf Security has a unique insight into the latest techniques being used by cybercriminals.
The HP Wolf Security threat research team found evidence that cybercriminals are mobilizing quickly to weaponize new zero-day vulnerabilities.
Exploits of the zero-day CVE-2021-40444 – a remote code execution vulnerability that enables exploitation of the MSHTML browser engine using Microsoft Office documents – were first captured by HP on September 8, a week before the patch was issued on September 14.
By September 10 – just three days after the initial threat bulletin – the HP threat research team saw scripts designed to automate the creation of this exploit being shared on GitHub.
Unless patched, the exploit enables attackers to compromise endpoints with very little user interaction. It uses a malicious archive file, which deploys malware via an Office document.
Users don’t have to open the file or enable any macros, viewing it in File Explorer’s preview pane is enough to initiate the attack, which a user often will not know has happened. Once the device is compromised, attackers can install backdoors to systems, which could be sold on to ransomware groups.
Other notable threats isolated by the HP Wolf Security threat insight team include a rise in cybercriminals using legitimate Cloud and web providers to host malware, JavaScript malware slipping past detection tools, and targeted campaign found posing as the Ugandan National Social Security fund. The team also that switching to HTA files spreads malware in a single click.
“The average time for a business to apply, test and fully deploy patches with the proper checks is 97 days, giving cybercriminals an opportunity to exploit this ‘window of vulnerability’.
While only highly capable hackers could exploit this vulnerability at first, automated scripts have lowered the bar for entry, making this type of attack accessible to less knowledgeable and resourced threat actors.
This increases the risk to businesses substantially, as zero-day exploits are commoditized and made available to the mass market in venues like underground forums,” explains Alex Holland, Senior Malware Analyst, HP Wolf Security threat research team, HP Inc.
“Such novel exploits tend to be effective at evading detection tools because signatures may be imperfect and become obsolete quickly as the understanding of the scope of an exploit changes.
“We expect threat actors to adopt CVE-2021-40444 as part of their arsenals, and potentially even replace common exploits used to gain initial access to systems today, such as those exploiting Equation Editor.”
“We are also seeing major platforms like OneDrive allowing hackers to conduct ‘flash in the pan’ attacks.
While malware hosted on such platforms are generally taken down quickly, this does not deter attackers because they can often achieve their objective of delivering malware in the few hours the links are live,” Holland continues. “Some threat actors are changing the script or file type they are using every few months.
“Malicious JavaScript and HTA files are nothing new, but they are still landing in employee inboxes, putting the enterprise at risk. One campaign deployed Vengeance Justice Worm, which can spread to other systems and USB drives.”
The findings are based on data from the millions of endpoints running HP Wolf Security. HP Wolf Security tracks malware by opening risky tasks in isolated, micro Virtual Machines (micro VMs) to understand and capture the full infection chain, helping to mitigate threats that have slipped past other security tools.
This has let customers click on over 10 billion email attachments, web pages, and downloads with no reported breaches. By better understanding the behavior of malware in the wild, HP Wolf Security researchers and engineers can bolster endpoint security protection and overall system resilience.
“We can’t keep relying on detection alone. The threat landscape is too dynamic and, as we can see from the analysis of threats captured in our VMs, attackers are increasingly adept at evading detection,” comments Dr. Ian Pratt, Global Head of Security for Personal Systems, HP Inc.
“Organizations must take a layered approach to endpoint security, following zero trust principles to contain and isolate the most common attack vectors like email, browsers, and downloads. This will eliminate the attack surface for whole classes of threats, while giving organizations the breathing room needed to coordinate patch cycles securely without disrupting services.”
An artificial intelligence (AI) application has been developed to help combat the spread of fake news, misinformation and political propaganda as political activities gradually build toward the 2027 general elections in Nigeria.
The app, known as BAT-BOT AI, was unveiled in Abuja by Mr. Gunu Usman, its founder, who said the platform is designed to assist the federal government in addressing the growing challenge of false information within nation’s digital space.
Mr Usman explained that the new platform was created to ensure that factual information circulates faster than falsehood.
He noted that the rapid spread of misinformation, disinformation, hate speech and manipulated narratives targeting the administration of Bola Tinubu, the ruling All Progressives Congress, and national institutions poses risks to democratic stability and public trust.
According to Mr. Usman, BAT-BOT AI was developed to support public access to verified information while countering misleading narratives online.
The Technology expert described the system as a sovereign AI-powered civic information and fact-verification platform designed to strengthen Nigeria’s digital information ecosystem ahead of the 2027 general election.
He added that the initiative aligns with the government’s policy direction under the Renewed Hope Agenda of President Tinubu, which seeks to promote transparency and encourage informed civic participation.
The founder further explained that the platform is currently accessible to Nigerians through multiple digital channels, enabling users to verify claims, seek clarification on government policies and obtain information on national development initiatives.
Mr. Usman expressed optimism that the tool would help curb the spread of false information and contribute to a more credible digital environment as the country prepares for the next electoral cycle.
Over the past four years, gold has risen by more than 400%. The precious metal has long been one of the most traded assets in global financial markets. From its role as a traditional store of value to its sensitivity to inflation, interest rates, and geopolitical uncertainty, gold continues to attract traders seeking efficient and predictable trading opportunities during a period of global uncertainty and high volatility.
JustMarkets
For traders looking to effectively access gold markets, choosing the right trading environment is as important as timing their entry. One of the most popular and effective gold trading platforms is JustMarkets, offering the tools, conditions, and infrastructure to enable traders to achieve their most ambitious gold trading goals.
Tight Spreads on XAU/USD
Cost efficiency is a critical factor in gold trading, especially for active day traders. JustMarkets offers extremely competitive XAU/USD spreads, allowing traders to open and close positions with reduced transaction costs. Lower spreads can significantly impact short-term strategies, where precision and timing are key to effectively entering a trade. By minimizing trading costs, JustMarkets helps traders focus more on market analysis and finding the ideal entry point, and less on overhead.
Fast and Reliable Execution
Gold is recognized for its volatility, especially during the day, especially with economic announcements or geopolitical events. Speed is of the essence in volatile markets. JustMarkets provides high-speed execution of orders, which helps minimize the risks of delays, especially during periods of high volatility. This ensures that traders are able to respond better to market conditions, thereby having better control over trade management.
Flexible Trading Conditions
Each trader has their own approach to gold, ranging from intraday trading to position trading. JustMarkets offers flexible leverage and account types, enabling traders to adjust their exposure based on their risk tolerance and trading style. This flexibility is suitable for both conservative and aggressive traders while still allowing them to access the same global gold market.
Advanced Platforms and Tools
Successful gold trading is based on thorough technical and fundamental analysis. JustMarkets provides access to industry-standard trading platforms equipped with advanced charting tools, multiple timeframes, and a wide range of indicators for recognizing divergences and clear entry points. These features help traders analyze price trends, identify key levels, and plan their trades with greater confidence.
Accessibility via mobile devices and computers via the JustMarkets Mobile Trading app also ensures traders can monitor positions and market movements from anywhere and at any time.
Education and Market Support
Gold is also affected by factors such as inflation rates, central bank policies, and currency fluctuations. Understanding these factors is important for developing a structured trading strategy.
JustMarkets offers resources for traders, which provide information on how global events can impact the price of gold like case studies, daily, bank and weekly analysis. This is a knowledge-based system, which enables the trader to make more informed decisions rather than relying on the price movements of gold.
Trading Activities That Keep Gold Traders Engaged
In addition to the competitive trading environment, JustMarkets also runs various special activities and campaigns that aim to make the trading experience more interesting. At certain intervals, the special activities may include trading contests on specific trading instruments, such as gold, which are highly sought after by traders. This will give the traders an added impetus to keep trading.
The special activities are designed to encourage trading, consistency, and skill-building among the traders, along with the additional motivation for the trading strategies. This is also in line with the overall philosophy of JustMarkets to create a dynamic trading environment where trading, learning, and motivation are linked together.
A Trading Environment Built for Gold Traders
Gold is still one of the most dynamic markets with the greatest number of opportunities in the world. With tight spreads on XAU/USD, fast execution, flexible trading terms, and access to advanced analytical tools, JustMarkets creates an optimal trading environment for those who want to trade gold efficiently.
In addition to the comprehensive educational assistance, JustMarkets continues to position itself as a strong competitor for traders who are looking for professional trading conditions combined with growth opportunities.
Microsoft is stepping up its push to expand artificial-intelligence adoption across Africa as competition intensifies with Chinas DeepSeek for influence in one of the worlds youngest and fastest-growing digital markets.
The company plans to train 3 million Africans on its AI technologies this year through partnerships with schools, universities and other institutions, with a focus on South Africa, Kenya, Nigeria and Morocco.
The effort reflects Microsofts broader attempt to accelerate adoption of its AI ecosystem across emerging markets where developers and enterprises are increasingly experimenting with generative AI tools.
Alongside the training initiative, Microsoft is working with MTN Group (MTNOY), Africas largest telecommunications company, to distribute Microsoft 365 and its Copilot digital assistant to about 300 million subscribers.
The Elevate program is designed to expand AI literacy and reduce cost barriers that might otherwise limit adoption, according to regional leadership.
The push comes as Chinese technology firms expand their footprint across the continent, with DeepSeeks open-source models accounting for roughly 11% to 14% of chatbot use in several African markets and reaching about 20% in countries such as Ethiopia and Zimbabwe following investments tied to digital infrastructure and telecom networks.
Microsoft is also increasing its infrastructure investment in the region.
In South Africa, the company plans to invest 5.4 billion rand, or about $330 million, to expand its cloud and AI capacity by the end of next year, while it is also exploring plans for a geothermal-powered data center in Kenya.
Early corporate adoption is emerging across the continent, with South African grocer Spar Group using Copilot in ways that save more than 700 employee hours annually and Nigerias Access Holdings integrating AI into daily workflows.
Regional leadership has suggested broader AI adoption could potentially contribute up to $1.5 trillion to Africas gross domestic product by 2030 if governments and businesses continue investing in digital infrastructure and AI skills.
Tech Expert Unveils BAT-BOT AI App to Curb Fake News ahead of 2027 Elections
MTN Nigeria Races Ahead in Fibre Broadband Market
CBN Tightens BVN Rules to Curb Fraudulent Banking Transactions
Nova Bank Appoints Jude Anele as Managing Director/CEO
CBN Rolls Out New Rules for Safer Instant Payments, More Customer Control
Kaspersky Discovers New Phishing Campaign Exploiting Google Tasks Notifications to Steal Corporate Credentials
esentry 2025 Report Shows Healthcare, Financial Services and Telecoms as Staging Grounds for Increased Cyberattacks in Africa
AfDB, UNDP Launch $10Bn AI Initiative for Africa
Mutual Benefits Assurance Settles ₦5.9bn Claims in January 2026
Pheelz Shares His Journey on Glo-Sponsored African Voices
General News3 days agoInterswitch Advocates Trust-Driven Infrastructure as Cornerstones of Africa’s Cross-Border Capital Future
News3 days agoNLNG Advances Media Excellence with Change Your Story Workshop
E-Business3 days agoWhy JustMarkets Is a Strong Choice for Gold Trading
E-Financial3 days agoCBN Orders Banks to Restrict Access to Banking Services for Loan Defaulters
E-Financial3 days agoUBA Business Series Celebrates ‘Gen.W: The Evolved Woman’ in Push for Female Empowerment
Telecom3 days agoNDPC Warns Content Creators Against Privacy Violations in Viral Videos
General News3 days agoFCCPC Launches Fuel Price Surveillance, Probes Airline Price Gouging, Resolves N10bn Complaints
Telecom2 days agoVDT Communications Achieves Two Prestigious Certifications ISO /IEC 27001:2022, ISO/IEC 27032:2023 Reinforcing its Leadership in Broadband Service Provision