Connect with us

E-Business

Cybercrime is Spiking and Security Skills are Scarce

Published

on

Kindly share this post

The world generates an estimated 2.5 quintillion bytes of data every day.

Cybercrime is Spiking and Security Skills are Scarce

Amidst this mind-boggling amount of chatter, a very real threat is lurking: cybercrime, which has increased by 600 percent since the start of the pandemic, the United Nations reports.

This surge in nefarious cyber activity kicked off when global lockdowns saw millions of employees working remotely and logging in from their unsecured home computers.

According to the Fortinet Global Threat Landscape Report, 80 percent of organisations experienced one or more data breaches during 2021, with a tenfold increase in ransomware attacks alone.

Patrick Evans, chief executive officer of SLVA Cybersecurity, said that cyber threats are increasing at a rate far greater than the industry is able to cope with, and small and medium enterprises (SMEs) are particularly vulnerable as the financial impact falling victim to these security breaches can result in their total collapse.

A sobering thought when you consider that 43 percent of cyberattacks are aimed at small businesses, according to Accenture’s Cost of Cybercrime Study, and only 14 percent are adequately prepared to defend themselves.

As the business landscape rapidly evolves, simply keeping abreast of technology advancements and security vulnerabilities is no longer enough, Evans warned.

Data breach risks need to be managed strategically, and this requires a very specific skill set. “Previously CIOs and CTOs were expected to take data security into their fold, but if anything is clear from the increasing threats in recent years, it is that there is a need for a separate security role,” he states.

The importance of a CISO

This is where a Chief Information Security Officer (CISO) comes in, and business owners are starting to realise the importance of this role in their organisations. “Even if a company has an accomplished and technically skilled team on board, utilising the services of an advisor with decades of experience on how to mitigate the risks and implement up-to-date security measures is invaluable,” says Evans.

Not all organisations, however, have the budget or even the need for a full-time CISO, and there is currently a shortage of skilled cybersecurity professionals.

The answer to this is a virtual or fractional CISO – an outsourced security practitioner who, drawing on a wealth of experience in the cybersecurity industry, can provide valuable insight, advice and mentorship to help prevent an attack or recover from one, usually part-time and remotely.

Evans outlined some of the challenges facing organisations and how a virtual CISO can help:

•        Cyberthreats are increasing rapidly

There is a huge increase in the number of threats facing organisations, with ransomware becoming increasingly more prevalent.

The LexisNexis True Cost of Fraud Study reports that cyberfraud in South Africa has increased by 41.5 percent since 2019, and new data from Mimecast’s State of Email Security 2022 report found that 60 percent of South African organisations had suffered a ransomware attack in 2021, up from 47 percent in 2020.

“Ransomware does not select the type of company that is attacked; it looks for the weakest attack surfaces. SMEs, educational institutions, and those in manufacturing and other verticals are often the subjects of the most severe attacks, which can be financially crippling.” This is partly because these industries have been slow to adopt a security-first approach or do not have the funds to onboard a full-time information security officer. “It’s a catch-22 situation. The most vulnerable are the ones who do not have the resources to adequately protect and mitigate attacks,” says Evans.

•          Financial impacts are severe

The financial impact of falling victim to a cybercrime, especially as an SME, can be devastating.

The average cost of recovering from a ransomware attack is approximately USD$1.85 million, according to research from cybersecurity firm Sophos. Businesses, especially small and medium ones, can ill-afford such an attack.

According to Evans, “Cyberattacks do not simply take down a website. They can completely shut down business processes and, worse still, hold a company’s entire IP or customer database for ransom.”

The result is a complete shutdown in order to recover the business, and the added risk of penalties and fines from regulators as a result of data protection laws. In many instances, these risks are not quantified nor are there adequate risk mitigation and recovery procedures put in place. “

Many times, it is a tick-box exercise without ongoing processes to ensure continued compliance and protection.”

•          Shortage of skills

There is a dire shortage of cybersecurity skills globally. Fortinet reports that 60 percent of organisations struggle to recruit cybersecurity talent, and South African skills are at an all-time low, with many CISOs leaving for lucrative opportunities abroad. Combine the increase in cybercrime with the shortage in cyber skills, and we have a perfect storm brewing.

The answer? A virtual or fractional CISO

Fortunately, there is a solution. Virtual or fractional CISOs (vCISOs) provide those that need it most with solutions to fit their needs and budget and go several steps further than simply box-ticking. “

SLVA Cybersecurity offers this service to SMEs and other businesses that have neither the need nor the funds for a full-time security officer.

These virtual CISOs are industry veterans and offer expert advice for a fraction of the cost,” shares Evans.

SLVA works with customers to develop fit-for-purpose, fit-for-budget solutions, ensuring that they receive exactly the CISO service they need to remain on top of the industry’s most pressing challenges, no matter their size or budget. “

There are different CISOs for different purposes. Together with my co-founders, Steve Jump and Andrew Odendaal, each with over 20 years’ experience in the information and cybersecurity industries, we identified the different CISO roles that organisations typically need.”

These include:

Interim vCISO: Your organisation may require an acting vCISO while you source someone new for the role. The interim vCISO can fix urgent issues and put in an action plan to take your company to the next level of cyber resilience. They can also assist in finding a suitable full-time CISO.

Shadow vCISO: If you have decided to employ someone with only a few years’ experience and “grow” your own CISO, a shadow vCISO can be provided to nurture and groom the unseasoned employee.

Mentor vCISO: If you are worried about your company’s current security function, you can hire an industry expert to coach and mentor your current CISO or CIO.

Post-compromise vCISO: After an attack or security breach, you may need to bring in someone with extensive, post-compromise recovery experience to help you deal with the aftermath while your CISO carries on with business as usual. A post-compromise vCISO, who has weathered many breaches, including ransomware, can offer invaluable assistance.

 

 


Kindly share this post

Nigeria CommunicationsWeek believes that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. So since 2007, we have devoted our energy to independent reportage of technology and how they affect lives.

Continue Reading
Advertisement
Comments

E-Business

Study Reveals Majority of IT Professionals Show Openness to Cyber Immunity

Published

on

Kindly share this post

The cybersecurity landscape is evolving rapidly, with organisations seeking more robust ways to protect their digital assets. A recent global study conducted by Kaspersky reveals a growing shift toward proactive security strategies, particularly the adoption of Secure by Design development and Cyber Immunity – an innovative approach that embeds resilience directly into system architecture.

The study highlights that 90% of cybersecurity professionals surveyed in the Middle East, Turkiye and Africa (META) region are familiar with Secure by Design development. This methodology integrates security into the very fabric of a system from its inception, rather than treating it as an afterthought.

Such an approach is already employed in high-stakes industries like aerospace, where security cannot be bolted on later – it must be intrinsic. Despite its advantages, however, adoption has been slow due to challenges related to standardisation and cost.

Cyber Immunity is the next frontier in cybersecurity

Building on Secure by Design principles, Cyber Immunity takes cybersecurity a step further by creating systems that inherently resist attacks without the need for constant patching or additional security layers. The study reveals that most experts are familiar with Cyber Immunity but interpret it differently.

When asked what they associate with the term, 64% of respondents in the META region linked it to Secure by Design systems that remain resilient under attack, while 56% viewed it as a combination of technology and policy measures that block cybercriminal access. Another 48% connected it to highly skilled cybersecurity teams, indicating that while awareness is high, a unified understanding is still developing.

The growing demand for proactive security

One of the most striking findings is the optimism surrounding inherently secure systems. Over half of respondents in the META region (63%) believe it is already possible or definitely achievable to design systems capable of withstanding cyberattacks without relying on additional security solutions.

Another 32% think it might be possible, reflecting openness to this idea despite some uncertainty. This shift in mindset aligns with a broader industry trend: traditional reactive security measures are no longer sufficient.

With AI-powered threats and increasingly sophisticated attacks, organisations need solutions that do more than just detect breaches—they must prevent them by design.

Integrating Cyber Immunity into security strategies

The study emphasises that resilience, expertise, and flexibility will define the next generation of cybersecurity. While Secure by Design provides the methodology, Cyber Immunity represents the ultimate goal—systems so robust that they minimise reliance on external defences.

“For companies looking ahead, Cyber Immunity offers more than just protection — it brings clear business benefits. When systems are built to be secure from the ground up, there’s less need for constant updates, patches, and extra security tools. That means fewer costs, less strain on IT teams, and stronger, more reliable protection over time,” said Dmitry Lukiyan, Head of KasperskyOS Business Unit.

Most importantly in today’s threat landscape, Cyber Immunity offers robust protection against next-generation challenges — including AI-driven attacks capable of outmaneuvering traditional security measures.

When security becomes an intrinsic property of system architecture rather than an external addition, businesses gain more than just protection—they secure a competitive market advantage.

This proactive approach future-proofs critical infrastructure, enabling organisations to operate confidently even as threats evolve. It transforms cybersecurity from a defensive necessity into a strategic differentiator that accelerates digital transformation while mitigating risk.

As the cybersecurity environment becomes more complex, Cyber Immunity is emerging as a vital strategy. Organisations that adopt it now will not only enhance their protection but also position themselves ahead of the curve in an increasingly volatile digital world.

 


Kindly share this post
Continue Reading

E-Business

Konga launches Jara sales with 25% discount on Starlink kits, free delivery

Published

on

Kindly share this post

Konga, Nigeria’s leading composite e-commerce platform, has launched its inaugural 2026 shopping campaign, Konga Jara, offering 25 per cent discount on Starlink internet kits alongside free nationwide delivery.

Konga launches Jara sales with 25% discount on Starlink kits, free delivery

Konga

The campaign, drawing from the Nigerian concept of “jara” — the extra value traders add to purchases — aims to deliver exceptional deals across categories, helping shoppers turn new year aspirations into reality through affordable technology and value-driven shopping.

To qualify for the Starlink discount, customers must purchase kits on Konga.com, activate them at starlink.com/activate, and email activation details to [email protected] for verification against Starlink’s records. Discounts are subject to terms and conditions.

Konga said spotlighting Starlink underscores reliable internet’s role in Nigeria’s digital economy, supporting work, learning, entrepreneurship and communication for households and businesses.

Mr Onochie Melvin, Head of Commercial Planning at Konga, said: “We listened carefully to what Nigerians said they needed to truly kickstart 2026 on the right footing. Reliable internet connectivity emerged as the foundation upon which other aspirations depend.”

He added: “Students need it for online learning, entrepreneurs need it to scale digital businesses, and professionals rely on it for remote work. This Starlink offer is not just about selling products; it is about removing barriers that prevent Nigerians from fully participating in the digital economy.”

Beyond connectivity, Konga Jara provides genuine products from original equipment manufacturers (OEMs) with transparent pricing, warranties and authenticity guarantees.

As a composite e-commerce ecosystem, Konga integrates shopping, payments and logistics for seamless nationwide access, with exclusive deals shared via its social media channels throughout the campaign.

Shoppers can explore offers at www.konga.com and follow Konga’s official pages for updates across the Konga Group.


Kindly share this post
Continue Reading

E-Business

Firm Identifies Global Scam Activity Linked to the Release of Avatar 3

Published

on

Kindly share this post

The premiere of Avatar 3 has taken place in several countries and has been accompanied by a noticeable increase in online interest. Amid the heightened attention surrounding the release, Kaspersky experts identified an increase in cyber-scam campaigns that exploit the movie’s launch and users’ desire to watch it online. The fraudulent websites target users across multiple regions, indicating attempts by attackers to reach a global audience.

The scam operates as follows: cybercriminals create suspicious websites that offer online access to the Avatar 3 movie. Attackers place particular emphasis on localisation, publishing the sites in multiple languages to attract users from different countries. However, the translations are often poorly executed and contain grammatical errors and inconsistencies, which may serve as indicators of fraudulent activity.

When users attempt to start the video, they are presented with a fake media player and prompted to register in order to obtain “full” or “unlimited” access to the film. As part of the registration process, users are asked to provide personal information, including an email address and mobile phone number.

At later stages, scammers may request additional data, including payment details, under the guise of activating a “free trial.” This creates risks of credential compromise, particularly if users reuse passwords across multiple services, and may also lead to financial losses.

“Cybercriminals consistently exploit major movie premieres to capture users’ attention and increase the effectiveness of their schemes. We advise accessing films only through official platforms and exercising caution when encountering websites that request personal or payment information. It is also important to use reliable security solutions to protect all devices, including mobiles,” comments Olga Altukhova, Senior web content analyst at Kaspersky.

 


Kindly share this post
Continue Reading

Trending