E-Business
Check Point Expands its Cloud Native Application Protection Platform with Risk Management Engine

Check Point Software Technologies, a leading provider of cybersecurity solutions globally, introduces a new risk management engine along with enhanced capabilities to the Check Point CloudGuard Cloud Native Application Protection Platform (CNAPP).

The new capabilities add intelligent risk prioritization, agentless scanning, entitlement management and pipeline security. With a focus on context, speed and automation, the new capabilities operationalize cloud security, removing complexities and overhead noise associated with traditional standalone cloud security alerts, allowing security teams to focus on comprehensive threat preventions from code-to-cloud across the entire application lifecycle, while supporting DevOps’ agility.
Cloud adoption and digital transformation continues to accelerate. The 2022 Cloud Security Report revealed that 35% of respondents are running more than 50% of their workloads in the cloud.
However, 72% are extremely concerned about cloud security, and 76% are hindered by the complexity of managing multiple cloud vendors, which often results in misconfigurations, lack of visibility, and exposure to cyberattacks.
Moreover, the study revealed that misconfiguration is seen as the number one cause of security related incidents, which can be attributed to the need for around-the-clock security operations and alert fatigue.
“It is challenging for organizations to manage security risk while supporting faster cloud-native development cycles,” says Melinda Marks, Senior Analyst, Enterprise Strategy Group (ESG), “As development teams grow, organizations are looking for a unified platform to help them prioritize and efficiently take the actions that are the most impactful in reducing security risk so they can effectively manage security instead of falling behind.”
With the launch of Effective Risk Management (ERM), in addition to Cloud Identity & Entitlement Management (CIEM), Agentless Workload Posture (AWP), and pipeline security tools, Check Point CloudGuard now provides smart risk prioritization that allows teams to quickly eliminate critical vulnerabilities, such as misconfigurations and over-privileged access, based on severity throughout the software development lifecycle.
The collaborative output that enterprises receive is simple, easy to understand and focused on the threats that matter to them, thereby reducing the complexity that was once a challenge. By minimizing this complexity, the threat landscape is also reduced.
“Cloud adoption continues to accelerate and the ability to streamline cloud security has become vital,” explains TJ Gonen, VP Cloud Security at Check Point Software.
“By adding Effective Risk Management and amplifying Check Point CloudGuard’s CNAPP offering, we are making it possible for organizations to shift CNAPP left and take a prevention-first approach to their cloud security that’s easy to manage.
“With our contextual AI and risk scoring engine, security teams no longer have to manually figure out which alerts to remediate first—the machine will do it for them. By removing this burden, customers can focus on migrating their critical workloads to the cloud with confidence.”
Check Point CloudGuard combines the latest tools into a new generation of CNAPP capabilities to aid security professionals, while removing barriers to DevSecOps with ShiftLeft tools.
Check Point CloudGuard utilizes the power and potential of unification along with operational value to end users including:
- Effective Risk Management: CloudGuard’s ERM engine prioritizes risks and provides actionable remediation guidance based on full context including workload posture, identity permissions, attack path analysis and the application business value.
Security teams can now focus on the critical threats and administer “minimal effective dose” of security for maximum impact.
- Cloud Identity & Entitlement Management: The CIEM capabilities understand effective permissions of users and cloud services, identify exposure and risks, and automatically generates explicit least privilege role recommendations to reduce access and revoke unused permissions.
With CIEM built into ERM, users can understand their permissions and enforce least privilege across their cloud environments.
- Agentless Workload Posture: AWP extends CloudGuard’s agentless infrastructure visibility into workloads. AWP scans and identifies risks including misconfigurations, malware detection, vulnerabilities and secrets across all cloud workloads including virtual machines, container and serverless functions.
With this agentless deployment model, security teams gain deep workload security visibility at scale without impacting performance.
- Pipeline Security: The pipeline security capabilities fully integrate the Spectral offering to detect and resolve misconfigurations, secrets, and vulnerabilities within CloudGuard.
The developer-first security extends workload protection to the CI/CD to pipeline to remediate issues before reaching production. Security teams can shift CNAPP left and secure cloud applications from the start.
E-Business
Nigerian Terra Industries Secures $11.8m for Expansion

Terra Industries, a Nigerian defence technology startup, has raised $11.75 million to expand its development of defensive systems that protect critical facilities across Africa.

The fundraising round was led by Silicon Valley venture firm 8VC, which was founded by Palantir co-founder Joe Lonsdale.
Other investors in the round include Valour Equity Partners, Lux Capital, SV Angel, and Nova Global, as well as African-focused funds Tofino Capital, Kaleo Ventures, and DFS Lab.
Terra Industries, founded in Abuja by Nathan Nwachuku and Maxwell Maduka, provides multi-domain security solutions for both air and land. Its solutions are intended to detect and respond to threats including terrorism, sabotage, and armed attacks on infrastructure.
The company’s product portfolio includes surveillance drones, ground-based robotic systems, and fixed monitoring towers deployed around sensitive locations.
Co-founder and CEO Nathan Nwachuku said the company has now fully embraced its identity as a defence-focused startup, citing the growing urgency of security challenges across Africa.
He said safeguarding critical infrastructure from terrorist threats has become unavoidable.
Nwachuku argues that protecting Africa’s infrastructure requires a different approach, one that combines local manufacturing, end-to-end system control, and software capable of independently identifying and responding to threats over large areas.
The company aims to position itself as a defence prime, similar to the role played by firms such as Anduril Industries and Palantir in the United States.
Nwachuku also disclosed that the company had earlier raised $800,000 in pre-seed funding.
With the new funding, Terra plans to increase manufacturing capacity within Africa, establish additional defence production facilities, and expand its artificial intelligence and software teams.
While software offices are planned for San Francisco and London, the company said manufacturing operations will remain on the continent.
E-Business
Cybersecurity Firm Warns Telecom Threats from 2025 will Carry into 2026 as New Technology Adds New Risk

Kaspersky Security Bulletin reviews what shaped telecom cybersecurity in 2025 and what is likely to persist in 2026. Advanced Persistent Threat (APT) activity, supply-chain compromise, DDoS disruption and SIM-enabled fraud continued to pressure operators in 2025, while newer technology deployments introduce additional operational risk.

In 2025, telecom operators faced four broad threat categories. Targeted intrusions (APTs) continued to focus on gaining stealthy access to operator environments for long-term espionage and leverage through privileged network positioning.
Supply chain vulnerabilities remained an entry point: telecom ecosystems rely on many vendors, contractors and tightly integrated platforms, so weaknesses in widely used software and services can provide a path into operator networks. Finally, DDoS remained a practical availability and capacity problem.
Kaspersky Security Network showed that last year, between November 2024 and October 2025, 12,79% of users in the telecommunications sector encountered web threats and 20,76% faced on-device threats. 9,86% of telecom organisations worldwide experienced ransomware.
At the same time, the telecommunications sector is moving from rapid technological development to broad implementation — and the report argues that this shift creates new opportunities and new operational risks for 2026.
Kaspersky highlights three areas where technology transitions could introduce disruption if rolled out unevenly or without strong controls: AI-assisted network management, where automation can amplify configuration errors or act on misleading data; post-quantum cryptography transitions, where rushed deployment of hybrid and post-quantum approaches could cause interoperability and performance issues across IT, management and interconnect environments; and 5G-to-satellite integration (NTN), where expanding service footprints and partner dependencies introduce new integration points and potential failure modes.
“The threats that dominated 2025 — APT campaigns, supply chain attacks, DDoS floods — aren’t going away. But now they intersect with operational risks from AI automation, quantum-ready cryptography, and satellite integration.
Telecom operators need visibility across both dimensions: maintaining strong defences against known threats while building security into these new technologies from day one. The key is continuous threat intelligence that spans from endpoint to edge to orbit,” said Leonid Bezvershenko, senior security researcher at Kaspersky Global Research & Analysis Team.
E-Business
Study Reveals 88.5% of Phishing Attacks Focus on Stealing Account Credentials

Kaspersky analysed phishing and scam campaigns observed from January through September 2025 and found that 88.5% of attacks globally sought credentials for various online accounts.

Another 9.5% targeted personal data such as names, addresses, and dates of birth, while 2% focused on bank card details.
According to data from Kaspersky, over 38 million phishing links were clicked in Africa in the previous year (from November 2024 to October 2025) – all of which were detected and blocked by Kaspersky solutions.
Not everyone uses protective solutions on their devices however, and phishing remains one of the most prevalent cyber threats, with attackers luring users to fake websites where they unwittingly surrender their login credentials, personal information, or bank card details.
Kaspersky research shows that most phishing pages transmit stolen information via email, Telegram bots, or attacker-controlled panels, before it enters underground resale channels.
Data stolen through phishing is rarely used only once: credentials from multiple campaigns are consolidated into data dumps and sold on dark web markets, in some cases for as little as $50. Buyers sort and verify the data to check whether accounts remain active and reusable across different services.
According to Kaspersky Digital Footprint Intelligence, average 2025 prices ranged from $0.90 for global Internet portals to $105 for crypto platforms and $350 for online banking access. Personal documents such as passports or ID cards sold for about $15 on average, with pricing influenced by account age, balance, linked payment methods, and security settings.
As datasets are enriched and combined, attackers can build detailed digital profiles that may later support targeted attacks on executives, finance staff, IT-administrators or individuals with valuable assets or personal documents.
“Our analysis shows that credentials account for nearly 90% of phishing attempts. Once collected, logins, passwords, phone numbers, and personal details are aggregated, checked, and resold, sometimes years after the initial theft.
Combined with new information, even old credentials can enable account takeovers and targeted attacks against both individuals and organisations.
By leveraging open-source intelligence and old breach data, attackers can craft highly personalised scams, turning one-time victims into long-term targets for identity theft, blackmail, or financial fraud,” said Olga Altukhova, senior web content analyst at Kaspersky.
General News2 days agoMinistry of Finance Leads FG-Backed Deal to Deliver Quality Homes and Boost Agriculture in Niger State
News2 days agoSERAP Sues INEC Over Alleged ₦55.9Bn Election Funds Diversion
E-Financial2 days agoNDIC Declares Second Liquidation Dividend for Heritage Bank Depositors
Telecom2 days agoFG Plans to Invest $460m World Bank Loan in Fibre Infrastructure
News2 days agoAI Founders and Developers to Converge in Lagos for AI in Action 2026 conference
News2 days agoFG Inaugurates N40Bn CCTV Control Centre for Third Mainland Bridge
General News2 days agoTax Reforms Panel Rejects KPMG’s Critique of New Laws
Telecom1 day agoX Suspends Twitter Account for Rules Violation


















