E-Business
HP Wolf Security Survey Reveals IT Leader Concern Over Firmware Attacks
HP Inc. has released research from HP Wolf Security showing changing workforce dynamics are creating new challenges for IT teams around firmware security. As business workforces become increasingly distributed, IT leaders say it’s harder than ever to defend against firmware attacks.
The shift to hybrid work models has transformed how organizations manage endpoint security, while also highlighting new challenges for IT teams around securing device firmware. The HP Wolf Security global survey of 1,100 IT leaders reveals that:
- The threat of firmware attacks is a growing concern for IT leaders now that hybrid workers are connecting from home networks more frequently: With hybrid or remote work now the norm for many employees there is a greater risk of working on potentially unsecure home networks meaning that the level of threat posed by firmware attacks has risen.
More than eight-in-ten (83%) IT leaders say firmware attacks against laptops and PCs now pose a significant threat, while 76% of ITDMs said firmware attacks against printers pose a significant threat.
- Managing firmware security is becoming harder and taking longer in the era of hybrid work, leaving organizations exposed: More than two-thirds (67%) of IT leaders say protecting against, detecting, and recovering from firmware attacks has become more difficult and time-consuming due to the increase in home working, with 64% saying the same of analyzing the security of firmware configuration.
As a result, 80% of IT leaders are worried about their capacity to respond to endpoint firmware attacks.
Dr. Ian Pratt, Global Head of Security for Personal Systems at HP Inc. comments: “Firmware attacks are very disruptive and much harder to detect or remediate than your typical malware – often requiring expert and even manual intervention to fix.
“This increases the cost and complexity of remediation considerably, particularly in hybrid environments where devices are not on site for IT teams to access.
“Having more endpoints sitting outside of the protection of the corporate network also reduces visibility and increases exposure to attacks coming in via unsecured networks.”
“At the same time, we are seeing a rise in destructive attacks – such as wiper malware. Last year, our research team saw attackers conducting reconnaissance on firmware configurations, with the likely intent of exploiting unsecured configurations to weaponize for financial gain.
“Once an attacker has gained control over the firmware configuration, they can exploit their position to gain persistence and hide from anti-malware solutions that live in the Operating System (OS).
“This gives them an advantage, allowing them to stealthily maintain persistence on target devices, so they can gain access to infrastructure across the enterprise and maximize their impact.”
Despite the clear risks that firmware attacks pose to organizations, device security is not always a major consideration in the hardware procurement process, with many organizations continuing to use technologies that are not built with security in mind.
This issue is being exacerbated by the new shadow IT whereby employees are purchasing and connecting devices outside of IT purview while working remotely. HP Wolf Security’s Out of Mind and Out of Sight report found that 68% of office workers that purchased devices to support remote work said security wasn’t a major consideration in their purchasing decision. Furthermore, 43% didn’t have their new laptop or PC checked or installed by IT or security.
Boris Balacheff, Chief Technologist for Security Research and Innovation at HP Labs comments: “Security must become part of the procurement process when purchasing new IT devices. Organizations need to play the long game, because the devices you procure today will be the environment you have to manage and protect tomorrow.
“State-of-the-art device security delivers protection for firmware against malware as well as physical tampering, with detection both below and above the OS and autonomous self-healing recovery from the hardware up – but this will only help address the issue for organizations that know to ask the right questions when they procure new devices.”
HP warns that one of the key issues that businesses face is that many organizations are still reliant on legacy devices that were built to older industry standards, where design for manageable security and resilience at scale was not a focus for hardware and firmware design. This is leaving a gap in enterprise security that could take years to close.
Balacheff concludes: “As attackers continue to invest in the capability to attack and disrupt PCs and other OT and IoT devices at the firmware level, organizations also need to learn how to monitor the state of the art in device security to keep updating procurement security requirements accordingly.
“This is what will enable leading organizations to stay ahead of emerging threats and protect, detect and remediate firmware attacks at scale in the era of hybrid work.”
Over the past four years, gold has risen by more than 400%. The precious metal has long been one of the most traded assets in global financial markets. From its role as a traditional store of value to its sensitivity to inflation, interest rates, and geopolitical uncertainty, gold continues to attract traders seeking efficient and predictable trading opportunities during a period of global uncertainty and high volatility.
JustMarkets
For traders looking to effectively access gold markets, choosing the right trading environment is as important as timing their entry. One of the most popular and effective gold trading platforms is JustMarkets, offering the tools, conditions, and infrastructure to enable traders to achieve their most ambitious gold trading goals.
Tight Spreads on XAU/USD
Cost efficiency is a critical factor in gold trading, especially for active day traders. JustMarkets offers extremely competitive XAU/USD spreads, allowing traders to open and close positions with reduced transaction costs. Lower spreads can significantly impact short-term strategies, where precision and timing are key to effectively entering a trade. By minimizing trading costs, JustMarkets helps traders focus more on market analysis and finding the ideal entry point, and less on overhead.
Fast and Reliable Execution
Gold is recognized for its volatility, especially during the day, especially with economic announcements or geopolitical events. Speed is of the essence in volatile markets. JustMarkets provides high-speed execution of orders, which helps minimize the risks of delays, especially during periods of high volatility. This ensures that traders are able to respond better to market conditions, thereby having better control over trade management.
Flexible Trading Conditions
Each trader has their own approach to gold, ranging from intraday trading to position trading. JustMarkets offers flexible leverage and account types, enabling traders to adjust their exposure based on their risk tolerance and trading style. This flexibility is suitable for both conservative and aggressive traders while still allowing them to access the same global gold market.
Advanced Platforms and Tools
Successful gold trading is based on thorough technical and fundamental analysis. JustMarkets provides access to industry-standard trading platforms equipped with advanced charting tools, multiple timeframes, and a wide range of indicators for recognizing divergences and clear entry points. These features help traders analyze price trends, identify key levels, and plan their trades with greater confidence.
Accessibility via mobile devices and computers via the JustMarkets Mobile Trading app also ensures traders can monitor positions and market movements from anywhere and at any time.
Education and Market Support
Gold is also affected by factors such as inflation rates, central bank policies, and currency fluctuations. Understanding these factors is important for developing a structured trading strategy.
JustMarkets offers resources for traders, which provide information on how global events can impact the price of gold like case studies, daily, bank and weekly analysis. This is a knowledge-based system, which enables the trader to make more informed decisions rather than relying on the price movements of gold.
Trading Activities That Keep Gold Traders Engaged
In addition to the competitive trading environment, JustMarkets also runs various special activities and campaigns that aim to make the trading experience more interesting. At certain intervals, the special activities may include trading contests on specific trading instruments, such as gold, which are highly sought after by traders. This will give the traders an added impetus to keep trading.
The special activities are designed to encourage trading, consistency, and skill-building among the traders, along with the additional motivation for the trading strategies. This is also in line with the overall philosophy of JustMarkets to create a dynamic trading environment where trading, learning, and motivation are linked together.
A Trading Environment Built for Gold Traders
Gold is still one of the most dynamic markets with the greatest number of opportunities in the world. With tight spreads on XAU/USD, fast execution, flexible trading terms, and access to advanced analytical tools, JustMarkets creates an optimal trading environment for those who want to trade gold efficiently.
In addition to the comprehensive educational assistance, JustMarkets continues to position itself as a strong competitor for traders who are looking for professional trading conditions combined with growth opportunities.
Microsoft is stepping up its push to expand artificial-intelligence adoption across Africa as competition intensifies with Chinas DeepSeek for influence in one of the worlds youngest and fastest-growing digital markets.
The company plans to train 3 million Africans on its AI technologies this year through partnerships with schools, universities and other institutions, with a focus on South Africa, Kenya, Nigeria and Morocco.
The effort reflects Microsofts broader attempt to accelerate adoption of its AI ecosystem across emerging markets where developers and enterprises are increasingly experimenting with generative AI tools.
Alongside the training initiative, Microsoft is working with MTN Group (MTNOY), Africas largest telecommunications company, to distribute Microsoft 365 and its Copilot digital assistant to about 300 million subscribers.
The Elevate program is designed to expand AI literacy and reduce cost barriers that might otherwise limit adoption, according to regional leadership.
The push comes as Chinese technology firms expand their footprint across the continent, with DeepSeeks open-source models accounting for roughly 11% to 14% of chatbot use in several African markets and reaching about 20% in countries such as Ethiopia and Zimbabwe following investments tied to digital infrastructure and telecom networks.
Microsoft is also increasing its infrastructure investment in the region.
In South Africa, the company plans to invest 5.4 billion rand, or about $330 million, to expand its cloud and AI capacity by the end of next year, while it is also exploring plans for a geothermal-powered data center in Kenya.
Early corporate adoption is emerging across the continent, with South African grocer Spar Group using Copilot in ways that save more than 700 employee hours annually and Nigerias Access Holdings integrating AI into daily workflows.
Regional leadership has suggested broader AI adoption could potentially contribute up to $1.5 trillion to Africas gross domestic product by 2030 if governments and businesses continue investing in digital infrastructure and AI skills.
Kaspersky Global Research and Analysis Team (GReAT) has uncovered a new Android malware campaign in which cybercriminals distributed the BeatBanker Trojan under the guise of the Starlink application for Android.
Threat actors primarily target users from Brazil; nevertheless, Kaspersky experts don’t rule out that users from other countries may also face this threat.
The Trojan employs a Monero cryptocurrency miner and additionally installs a BTMOB remote administration tool (RAT) on the infected devices. To maintain its persistence, BeatBanker uses an uncommon mechanism involving a nearly inaudible looped audio file.
“At first we saw BeatBanker being distributed under the guise of a public services app; it installed a banking Trojan in addition to a cryptocurrency miner. However, our recent detection efforts uncovered a new campaign with another BeatBanker variant that deploys the BTMOB RAT instead of the banker module.
The attackers appear to be using a fresh lure with the Starlink app to reach more victims from different countries. Therefore, it is important for users to stay vigilant and use advanced solutions to protect their smartphones,” comments Fabio Assolini, Head of the Americas & Europe units at Kaspersky GReAT.
Initial vector of infection
Kaspersky experts believe that cybercriminals distribute a fake Starlink application containing the BeatBanker Trojan through phishing pages that mimic the Google Play Store. After execution on a compromised device, the Trojan displays a user interface that also mimics Google Play. Cybercriminals trick victims into granting installation permissions, thus allowing the download of additional hidden malicious payloads.
Crypto mining and BTMOB RAT module
When a user clicks UPDATE on the fake Google Play page, a Monero cryptocurrency miner deploys. BeatBanker monitors battery percentage and the temperature of an infected smartphone, as well as user activity after which a hidden cryptocurrency miner is started or stopped.
The Android Trojan also installs a BTMOB RAT on the compromised device. BTMOB enables full remote control and is sold as Malware-as-a-Service.
It is capable of automatic granting of permissions, hide system notifications and has mechanisms designed to capture screen lock credentials, including PINs, patterns and passwords on compromised devices. The malware also gives cybercriminals access to the front and rear cameras, GPS location monitoring and constant collection of sensitive data.
To ensure persistence and hinder uninstallation, BeatBanker maintains a fixed notification in the foreground and activates a foreground service with silent media playback. This tactic is designed to prevent the operating system from removing the malicious process.
Kaspersky’s products detect this threat as HEUR:Trojan-Dropper.AndroidOS.BeatBanker and HEUR:Trojan-Dropper.AndroidOS.Banker.*.
VDT Communications Achieves Two Prestigious Certifications ISO /IEC 27001:2022, ISO/IEC 27032:2023 Reinforcing its Leadership in Broadband Service Provision
CBN Orders Banks to Restrict Access to Banking Services for Loan Defaulters
NLNG Advances Media Excellence with Change Your Story Workshop
Interswitch Advocates Trust-Driven Infrastructure as Cornerstones of Africa’s Cross-Border Capital Future
Why JustMarkets Is a Strong Choice for Gold Trading
Kaspersky Discovers New Phishing Campaign Exploiting Google Tasks Notifications to Steal Corporate Credentials
esentry 2025 Report Shows Healthcare, Financial Services and Telecoms as Staging Grounds for Increased Cyberattacks in Africa
AfDB, UNDP Launch $10Bn AI Initiative for Africa
Mutual Benefits Assurance Settles ₦5.9bn Claims in January 2026
Pheelz Shares His Journey on Glo-Sponsored African Voices
General News3 days agoCourt Freezes Bank Accounts of Petrocam, Founder over Alleged N9Bn Zenith Bank Debt
Telecom3 days agoTecheconomy Unveils IWD 2026 Power List Celebrating 100 Women Shaping the Future
General News3 days agoFCCPC Says Telcos, Energy Firms Lead Consumer Complaints in Nigeria
E-Business3 days agoKaspersky Uncovers a New Android Malware Campaign Disguised as Starlink Application
General News2 days agoInterswitch Advocates Trust-Driven Infrastructure as Cornerstones of Africa’s Cross-Border Capital Future
News2 days agoNLNG Advances Media Excellence with Change Your Story Workshop
E-Business2 days agoWhy JustMarkets Is a Strong Choice for Gold Trading
E-Financial2 days agoCBN Orders Banks to Restrict Access to Banking Services for Loan Defaulters