E-Business
Top 5 Tips to Strengthen SME Cybersecurity
As the global community commemorated the United Nations’ ‘Micro-, Small and Medium-sized Enterprises Day’ yesterday, June 27, Kaspersky called on SMEs across Africa to rethink their approach to cybersecurity.
Whether a tech startup, small bakery, or a plumber, SMEs are reliant on either a computer or smartphone for some aspects of their business.
The possibility of having data and systems compromised by cybercriminals is something that can have potentially devastating consequences for any SME, as reiterated in the latest Kaspersky Threats to SMB report.
SMEs are significant contributors to economic growth and employment for many African nations. In fact, across sub-Saharan Africa there are upwards of 44 million micro, small, and medium enterprises (MSMEs)¹ which constitutes over 90%² of all enterprises and accounts for most jobs across the region.
Whether it is leaving passwords on sticky notes, or sharing them between employees, not having backups in place or lacking cybersecurity protection entirely, SMEs often neglect this essential part of their business.
Even small businesses with limited IT resources still need to protect all their working devices and company data from cyber threats.
“Cybercriminals are already way ahead of the curve, so much so that virtually every organisation will experience a breach attempt at some point. Our ongoing research continues to demonstrate how the cyber threat landscape is expanding, and no one or enterprise is beyond reach.
“These enterprises must therefore see cybersecurity not as a choice, but a necessity in the digital age,” says Bethwel Opil, Enterprise Client Lead at Kaspersky in Africa.
In fact, the latest Kaspersky Threats to SMB report shows that the number of SME employees globally encountering malware or unwanted software disguised as legitimate business applications has remained relatively steady year-on-year (2,478 in 2023 compared to 2,572 in 2022), and cybercriminals are persisting in their efforts to infiltrate these businesses.
Fraudsters are employing a multitude of methods, including exploiting vulnerabilities, employing phishing emails, deceptive text messages, and even utilising seemingly harmless YouTube links, all with the aim of gaining unauthorised access to sensitive data.
Furthermore, according to the Kaspersky report, the total number of detections of these malicious files aimed at SMEs globally during the first five months in 2023 reached 764,015. Exploits were the most prevalent threat to SMEs, accounting for 63% (483,980) of all detections.
To navigate the complex cybersecurity landscape, Kaspersky shares five must-have suggestions every SME should consider:
- Endpoint Security: A key vulnerability in many businesses is the endpoint – the laptops, smartphones, and other devices that employees use every day. Endpoint Detection and Response (EDR) technology is designed to protect these access points from potential cyber threats, keeping data safe.
A SME’s EDR may include tools like advanced detection engines, real-time analytics, and the ability to hunt, investigate, and centrally respond to evasive threats across the protected infrastructure. There should be applied threat intelligence and visibility into endpoints.
- VPN (Virtual Private Network): A VPN enables a secure connection over the Internet, protecting data from cybercriminals and hackers. For SMEs who have employees working remotely, a VPN is essential to maintain secure connections.
These solutions are especially useful when using public Internet connections, such as in coffee shops, airports, or guest houses which can be vulnerable to hackers. A VPN gives users a secure connection which separates hackers from the data they are hoping to steal.
- Cybersecurity awareness training: Education is the first line of defence. Continuous cybersecurity awareness training can significantly reduce the risk of successful cyberattacks. Employees who can identify phishing scams, use strong passwords, and follow secure online practices are valuable assets in the ongoing fight against cybercrime.
This is where a series of interactive trainings through solutions like the Kaspersky Automated Security Awareness Platform can be a good starting point to instil in employees the importance of cybersecurity and give them advice and recommendations.
- Backups: Backups ensure that in the event of a cyberattack the business can recover quickly and with minimal disruption. Backups should be performed regularly and stored off-site or on the cloud for maximum protection.
- Cloud security: As more SMEs embrace the cloud, securing these environments is critical. Using a trusted cloud service provider and employing cloud-specific security measures to protect data is something that SMEs must understand is non-negotiable.
A SME is still responsible for getting their data into the cloud and they need to take the necessary steps to keep it safe while doing so.
“The digital landscape is complex and always evolving. By focusing on these five critical areas, SMEs can protect themselves and their customers from a significant number of potential cyber threats. Cybersecurity is an investment that pays off by safeguarding a company’s reputation and customer trust,” Opil concludes.
Kaspersky encourages all SMEs to act this ‘Micro-, Small and Medium-sized Enterprises Day’ by reevaluating their cybersecurity measures, investing in their future, and ensuring they are doing their part in contributing to a secure and resilient digital Africa.
Africa’s leading technology distributor Powerhouse, TD Africa, has reaffirmed its commitment to advancing cybersecurity awareness and digital resilience by sponsoring the 3rd Annual Secure 360 Summit Nigeria 2026, hosted by global cybersecurity leader Check Point Software Technologies, as Gold Sponsor.
Chioma Chimere, Coordinating Managing Director, TD Africa
This year’s summit was held in Abuja and Lagos, bringing together key stakeholders from across Nigeria’s technology ecosystem.
Now in its third edition, the Secure 360 Summit has evolved into one of Nigeria’s premier cybersecurity forums, bringing together Chief Information Security Officers (CISOs), Chief Information Officers (CIOs), IT Directors, and senior technology leaders from the financial services, telecommunications, enterprise, energy, and public sectors to address today’s rapidly evolving cyber threat landscape.
Speaking on the significance of the summit, Kingsley Oseghale, Country Manager, Check Point Nigeria, emphasized the need for stronger collaboration in tackling emerging cyber risks. “Cybersecurity has become a business priority rather than just an IT concern.
“Through the Secure 360 Summit, we continue to provide a platform for industry leaders to exchange insights, strengthen partnerships, and explore innovative approaches to securing today’s digital economy.
“We are pleased to have TD Africa as a valued partner in driving cybersecurity awareness across Nigeria.”
In her remarks, Chioma Chimere, Coordinating Managing Director, TD Africa, applauded Check Point for creating a platform that addresses one of the most critical challenges facing businesses and individuals. “Cybersecurity is everyone’s business. We owe it to ourselves, our organisations, and our communities to remain security-conscious in an increasingly connected world.
“At TD Africa, innovation drives everything we do, and innovation can only thrive in a secure environment.
“This is why we are proud to support initiatives like the Secure 360 Summit that promote knowledge sharing and strengthen our collective cyber resilience.”
The summit featured expert-led sessions on emerging cyber threats, artificial intelligence, cloud security, ransomware, and strategies for building resilient digital infrastructures, equipping participants with practical insights to navigate today’s cybersecurity landscape.
Through its continued partnership with global technology leaders like Check Point, TD Africa remains committed to empowering businesses across Africa with world-class cybersecurity solutions, fostering industry collaboration, and driving the continent’s secure digital transformation.
President Bola Tinubu has directed the National Identity Management Commission (NIMC) to ensure that every Nigerian is enrolled in the national identity database before the end of 2026, according to Abisoye Coker-Odusote, director general and chief executive officer of the agency.
Abisoye Coker-Odusote, director general and chief executive officer, NIMC
Coker-Odusote, who appeared on Channels Television, said the directive forms part of the federal government’s efforts to establish a comprehensive national identity system capable of supporting effective governance, planning, and service delivery.
“The President has given us till the end of this year to make sure that we capture every single Nigerian,” she said.
According to her, NIMC is working with partners under the World Bank-supported Identification for Development (ID4D) project to accelerate nationwide enrolment.
“What we have done is we have partnered through the World Bank ID4D project with front-end partners. They are part of the digital identity ecosystem. These are private citizens that we’ve enabled and given jobs to enrol citizens on our behalf,” she explained.
She stressed that the National Identification Number (NIN) remains a unique identifier, ensuring that every individual is registered only once.
“That’s why it’s called a unique identifier, so that you’re only enrolled once,” the NIMC DG added.
Coker-Odusote said Nigeria’s actual population remains uncertain, with estimates ranging from 200 million to 250 million, making a comprehensive identity database essential for national planning.
“It is estimated that we’re 200 million. When we’re done enrolling, we will then know the actual numbers that we have. Some estimates say 230 million, while a few people say 250 million.
“Your identity is basically the foundation for effective governance and service delivery. How can you plan if you don’t know the total number of persons that you have? We have been mandated by Mr President to go down to the community levels to enrol every single Nigerian”, she said.
Responding to concerns about whether an individual could obtain multiple identities by registering in different locations or under different names, the NIMC boss said the commission’s biometric verification system prevents such occurrences.
She explained that while the previous system could accept duplicate enrolments before detecting them later, the current process automatically identifies and invalidates multiple registrations.
“The legacy system had no way of verifying at the front end whether you had already been captured. Once the record comes into the system, it flags it as a duplicate or that the person already exists in the database.
“You would only have one identity generated for you. The other record goes into a deduplication bucket where it is invalidated,” she said.
The NIMC DG added that biometric verification, including fingerprints and facial recognition, makes it virtually impossible for one person to maintain multiple identities.
“Absolutely. One of the things that this Act has done is to cement our role in capturing biometrics. Private and public sector organisations will no longer capture biometrics independently. They will validate identities through API integration with NIMC.
“The telcos are already doing that with us. If you need a SIM card, they capture your facial biometrics, which are matched against our database in real time to confirm that you are who you claim to be. We’re using biometric validation to tighten security around identity confirmation,” she said.
The remarks come weeks after Tinubu signed the National Identity Management Commission (NIMC) Act 2026 into law on June 26, repealing the 2007 legislation.
The new law reinforces the “One Person, One Identity” policy by making the NIN the country’s foundational identity credential for accessing government and essential private services, including banking, passport applications, tax administration, pensions, land transactions, and consumer credit.
It also introduces stiffer penalties for identity theft, multiple registrations and unauthorised access to personal identity data, while strengthening data privacy protections and granting NIMC wider powers to investigate identity-related offences.
Cybersecurity and privacy experts are raising concerns around the growing trend of sports fans using generative AI to create World Cup-related images, mock-ups, predictions and social media content.
Whilst offering new ways for supporters to engage with major sporting events, these tools also introduce risks that many users may underestimate. In light of this, Kaspersky has shared the key risks fans should keep in mind when using generative AI tools, so they can continue enjoying the championship with peace of mind.
When fan AI goes rogue. A growing number of AI tools are being used to create World Cup-themed visuals, avatars, memes and other fan content. While these services may seem creative and harmless, not all of them come from trusted providers.
Many are launched quickly to capitalise on interest around major events, increasing the likelihood that users will interact with platforms that offer limited transparency around data handling, lack adequate privacy and security measures, or might even be designed with malicious intent.
Personal data at stake. To create customised World Cup content, users are often asked to upload selfies, sign up with an email address, connect social media accounts or share other personal information. In doing so, they may reveal more information than necessary without fully understanding how that data will be stored, used, or potentially exposed.
“AI-driven fan content may seem harmless, but one of the key privacy risks is that users are often encouraged to share far more personal information than necessary. A simple request to generate a themed avatar can involve the collection of photos, contact details, account data and behavioural insights – information that may later be insufficiently protected.
“Because major global events often create an ideal environment for opportunistic actors, fans should take a closer look at how these tools manage personal data before engaging with them,” says Anna Larkina, web content analysis and privacy expert at Kaspersky.
When fan content becomes a scam. AI-generated World Cup content in some cases can also be used to support fraud. Cybercriminals may use convincing mock-ups, fake giveaways, or official-looking fan pages to attract attention and build trust. Once users engage, they may be redirected to phishing sites, fake stores, fraudulent offers, or betting-related scams. Generative AI makes these campaigns easier to produce, more persuasive and far easier to scale.
The myth of AI predictions. Another area that deserves caution is AI-powered match prediction. However advanced or data-driven these tools may appear, AI cannot reliably predict inherently uncertain sporting outcomes. When used to promote betting, paid subscriptions or “insider communities”, such services can create a false sense of confidence and encourage risky decisions.
Next Currency Crisis May Turn $300Bn in Stablecoins into National Currencies
NIHSA Warns States of Possible Flood within Seven Days
FG to Raise N1.2 Trillion via Fresh Bond Offer – DMO
Gigbanc Nigerian Fintech Startup Closes Shop after 3 Years
Mbunabo, Nigerian Filmmaker Accuses Ghana TV Stations of Pirating Nollywood Films
NRC, Ponzi Scheme Collapses Resulting Loss of Billions of Naira
Nigeria Launches FreeTV Nationwide
NASENI Moves to Digitize CCB’s 5m Assets Declaration and Operations
Lebara Nigeria Launches Lebara Play, Africa’s First Telecom-Owned Micro-Drama Platform
CANAL+ Partners Samsung to Pre-Load DStv Stream on New Samsung TVs In Nigeria, Other African Countries
News2 days agoXora Finance, Fintech Firm Refuses to Hire Nigerians over Alleged Dishonesty
Telecom2 days agoNCC Advances Dig Once Policy, Engages Stakeholders on Cost-Based Framework for Duct Sharing
Telecom2 days agoNCC to Keynote Telecom Sector Sustainability Forum 7.0
General News2 days agoFG Secures Fresh $208.3m World Bank Loan for Cash Transfer
News2 days agoHow Ponzi Scheme Victims can Seek Legal Remedies — Lawyers
News2 days agoPalmPay Nigeria Appoints Samuel Oluyemi as Chief Operating Officer
Telecom1 day agoMTN Nigeria Slashes Cost of Broadband Internet Router, Unwraps New Data Bundles for Low-Budget Users
General News2 days agoSERAP Sues INEC over Alleged N800Bn 2027 Tinubu Campaign Fund