Connect with us

E-Business

Firm Explores 2025 Potential IT Outage and Supply Chain Risk Scenarios

Published

on

Kindly share this post

As part of its annual Kaspersky Security Bulletin, the company’s experts have analysed significant supply chain attacks and IT outages from the past year and explored potential future risk scenarios, providing insights aimed at helping businesses of all sizes enhance cybersecurity, build resilience, and prepare for possible emerging threats in 2025.

In 2024, supply chain attacks and IT outages emerged as dominant cybersecurity concerns, demonstrating that virtually no infrastructure is immune to risk.

A faulty CrowdStrike update affected millions of systems, and sophisticated incidents, such as the XZ backdoor and the Polyfill.io supply chain attack exposed the risks inherent in widely used tools.

These and other high-profile cases highlight the need for rigorous security measures, robust patch and update management, and proactive defenses to safeguard global supply chains and infrastructure.

In its “Story of the Year”, the Kaspersky Security Bulletin reflects on 2024’s past incidents, while contemplating hypothetical future scenarios, and considering their potential consequences, as follows:

What if a major AI provider faced an outage or a data breach? Businesses are increasingly relying on various models such as those from OpenAI, Meta, Anthropic and others.

However, despite the excellent user experience these integrations offer, they introduce significant cyber risks. Reliance on a single or limited number of AI service providers creates concentrated points of failure.

If a major AI company experiences a critical disruption, it could significantly impact dozens or even thousands of services that depend on them.

Furthermore, an incident at any major AI provider could result in one of the most severe data leaks, as these systems may store vast amounts of sensitive information.

What if on-device AI tools were exploited? As AI becomes more integrated into everyday devices, the risk of it becoming an attack vector grows significantly.

For instance, the Operation Triangulation campaign, uncovered by Kaspersky in 2023, demonstrated how attackers could compromise device integrity by exploiting zero-day vulnerabilities in the system software and hardware to deploy advanced spyware.

Similar potential software or hardware-assisted vulnerabilities in the neural processing units powering AI – both broadly and in specific platforms like Apple Intelligence – could, if discovered, extend or present an even greater threat. Exploiting such weaknesses could harness AI capabilities to significantly amplify the scope and impact of such attacks.

Kaspersky’s research into Operation Triangulation also revealed the first of its kind case reported by the company: the misuse of on-device machine learning for data extraction, highlighting that the features designed to enhance user experience are already being weaponised by sophisticated threat actors.

What if threat actors disrupted satellite connectivity? While the space industry in general has been encountering various cyberattacks for a while, the new target for threat actors may be satellite Internet providers as important elements of the global connectivity chain.

Satellite Internet can provide temporary communication links when other systems are down; airlines, ships, and other platforms may rely on it to provide onboard connectivity; it may also be used to enable secure communication services.

This presents cyber risks: a targeted cyberattack or a faulty update from a leading or dominant satellite provider could cause Internet outages and potential communication breakdowns, impacting individuals and organisations.

What if major physical threats to the Internet occurred? Continuing the topic of connectivity, the Internet is also vulnerable to physical threats. 95% of global data is transmitted through subsea cables, and there are nearly 1,500 Internet Exchange Points (IXPs) – physical locations, sometimes within data centers, where different networks exchange traffic.

A disruption to just a few critical components of this chain – such as key cables or IXPs – could overload the remaining infrastructure, potentially causing widespread outages and significantly impacting global connectivity.

What if severe vulnerabilities in Windows and Linux kernel were exploited? These operating systems power many of the world’s critical assets, including servers, manufacturing equipment, logistics systems, IoT devices, and others.

A remotely exploitable kernel vulnerability in these systems could expose countless devices and networks worldwide to potential attacks, creating a high-risk situation in which global supply chains could face significant disruption.

“Supply chain risks may seem overwhelming, but awareness is the first step toward prevention,” said Igor Kuznetsov, Director of Global Research and Analysis Team (GReAT) at Kaspersky.

“By testing updates rigorously, leveraging AI-driven anomaly detection, and diversifying providers to reduce single points of failure, we can reduce weak elements and build resilience. A culture of responsibility among personnel is equally vital, as human vigilance remains the cornerstone of security. Together, these measures can safeguard supply chains and ensure a more secure future”.


Kindly share this post

Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

E-Business

Jumia CEO says Black Friday Signals Nigeria’s E-Commerce Maturity

Published

on

Kindly share this post

At the close of 2025, Temidayo Ojo, the CEO of Jumia Nigeria, reflected on a year-end shopping season that points to the growing maturity of the country’s e-commerce market. “Black Friday is no longer a single, short-lived spike in activity,” he said.

“It has become a familiar, anticipated moment in the retail calendar, where consumers shop deliberately and with confidence.”

Preliminary KPIs for the two months ended November 30, 2025, show strong year-on-year growth in both orders and Gross Merchandise Value (GMV), with GMV growth outpacing order growth. This indicates that customers are placing fuller, more considered baskets rather than shopping in fragmented transactions. Nigeria ranked among Jumia Group’s better-performing markets, with engagement remaining steady throughout the Black Friday period rather than spiking briefly and tapering off.

A key factor behind this performance is the growing familiarity of consumers with online shopping. Customers are increasingly leveraging platform features such as saved carts, brand stores, and price comparison tools to plan purchases in advance. This trend suggests that digital commerce is becoming embedded in everyday habits rather than being viewed as a one-off event.

Ojo also highlighted the role of Jumia’s JForce network in connecting digital commerce to local communities. “Our agents are critical to ensuring that customers across Nigeria, including secondary cities and smaller communities, have access to variety, consistent pricing, and reliable delivery,” he said. “During peak periods like Black Friday, JForce agents can respond faster, serve more customers efficiently, and build stronger local relationships. This isn’t just a distribution channel—it’s a pathway to sustainable income and inclusion.”

Reflecting on the overall performance, the CEO concluded: “What we’re seeing this year-end is steady engagement across categories, stronger consumer confidence, and partners like our JForce agents benefiting from increased activity.

“It confirms that Nigeria’s e-commerce ecosystem is maturing, growing in a more structured and resilient way. As the December Holiday Sale continues, we expect these patterns of familiarity, trust, and participation to sustain momentum and drive both commerce and community impact across the country.”


Kindly share this post
Continue Reading

E-Business

Galaxy Backbone Tops FG’s Website Performance Ranking

Published

on

Kindly share this post

Galaxy Backbone Limited (GBB) has been ranked first overall in the 2025 Federal Government Website Performance Scorecard.

Galaxy Backbone Tops FG's Website Performance Ranking

This is a landmark achievement for Nigeria’s digital economy.

The ranking, conducted by the Bureau of Public Service Reforms (BPSR), is the definitive benchmark for digital excellence and transparency across all Ministries, Departments, and Agencies (MDAs).

Professor Ibrahim Adepoju Adeyanju, managing director and CEO of Galaxy Backbone, received the award during a ceremony in Abuja.

He described the feat as a validation of the agency’s“Nigeria First”data sovereignty strategy and its relentless pursuit of service excellence.

This recognition comes as the Federal Government intensifies its push to achieve a fully paperless civil service by December 31, 2025.

GBB has been the primary architect of this transition through its 1Gov Enterprise Content Management (ECM) platform, which now hosts the operations of almost all federal MDAs.

The award adds to a growing list of accolades for Galaxy Backbone in 2025, following its recent win of the “International Standard Excellence Award for Best IT Service Provider.”

As the central hub for government shared services, GBB’s performance serves as a blueprint for other agencies currently undergoing digital transformation.

With its expanded fiber-optic backbone now covering over 13 states and its secure cloud solutions, Galaxy Backbone remains the cornerstone of Nigeria’s vision to become a leading digital nation by the end of the decade.

 


Kindly share this post
Continue Reading

E-Business

Nigeria Police Arrest Okitipi, Nigerian Allegedly Linked to Microsoft 365 Hack

Published

on

Kindly share this post

Okitipi Samuel, a Nigerian man, has been taken into custody by the Nigeria Police Force for his alleged role in a global cyberattack on Microsoft 365 users.

Nigeria Police Arrest Okitipi, Nigerian Allegedly Linked to Microsoft 365 Hack

Benjamin Hundeyin, Force public relations officer, disclosed this on Thursday in Abuja while briefing journalists on the outcome of investigations carried out by the National Cybercrime Centre of the Nigeria Police Force.

Hundeyin said the centre, under the leadership of Ifeanyi Uche, its director and Commissioner of Police, commenced investigations in collaboration with Microsoft, the Federal Bureau of Investigation, the United States Secret Service, and the United Kingdom’s National Crime Agency.

According to him, investigations revealed that a phishing toolkit known as “Raccoon 0365” was used to create fake Microsoft login portals to harvest user credentials and unlawfully access email accounts belonging to corporate organisations, financial institutions, and educational institutions in several countries.

“This investigation commenced following credible intelligence received from Microsoft USA through the FBI, indicating that a malicious phishing toolkit known as Raccoon0365 was being used to create fake Microsoft login portals, harvest user credentials, and unlawfully access the email accounts of corporate organisations, financial institutions, and educational establishments,” Hundeyin said.

He added that between January and September 2025, several reports of unauthorised access to Microsoft 365 accounts were traced to phishing emails designed to mimic legitimate Microsoft login pages, enabling business email compromise, internal phishing, data breaches, and other cyber-enabled fraud.

Hundeyin said digital forensic analysis and cryptocurrency tracing identified wallets connected to the illegal operation.

He noted that operatives were deployed to Lagos and Edo states, leading to the arrest of three suspects identified as Joshua, James, and Okitipi Samuel between September 20 and October 4, 2025.

“Following extensive digital forensic and technical intelligence analysis, the centre conducted cryptocurrency tracing that identified suspicious wallets connected to cash-out schemes.

“Acting on actionable intelligence, operational teams were deployed to Lagos and Edo states, resulting in the arrest of Joshua, James, and Okitipi Samuel. Searches at their residences led to the recovery of mobile devices, laptops, and other digital exhibits linked to the fraudulent scheme,” he said.

Hundeyin identified Okitipi Samuel, also known as “0365” and Moses Felix as the principal suspect and developer of the phishing infrastructure.

“The primary suspect, Okitipi Samuel, also known as Moses Felix, has been identified as the developer and operator of the phishing infrastructure. Investigations revealed that he managed a Telegram channel used to sell phishing links in exchange for cryptocurrency and hosted fake login pages on Cloudflare using stolen or fraudulently obtained email addresses,” he said.

He added that investigations confirmed Samuel unlawfully used the email details of one of the arrested individuals without consent to register some of the accounts used in the operation.

The police spokesperson said further investigations revealed that the identities of Joshua and James were used without their consent.

“There was no evidence linking them to the creation or operation of the phishing scheme. They were victims of identity theft,” Hundeyin said.

He said a prima facie case had been established against Samuel for identity theft, unlawful access to computer systems, creation and distribution of malicious software, unauthorised interference with network data, and aiding and abetting fraud.

Hundeyin added that the suspect would be charged under relevant provisions of the Cybercrimes (Prohibition, Prevention, etc.) Act, 2024.

He said the suspect would be prosecuted in Nigeria, noting that the country has the capacity to enforce its cybercrime laws, although extradition could be considered if formally requested through due process.

Hundeyin assured Nigerians that the police, under the leadership of Kayode Egbetokun, inspector-general of Police,  would continue to protect the country’s digital ecosystem and urged citizens to practise good cyber hygiene by being cautious when clicking links and sharing personal information online.

Speaking separately, Ifeanyi Uche, director of the National Cybercrime Centre,  urged Nigerians to exercise caution online.

Uche advised members of the public to avoid clicking on links from unknown or unexpected sources, noting that such links often contain malware or phishing tools designed to compromise devices and personal data.

He warned that indiscriminate clicking of links or responding to unsolicited emails could lead to unauthorised access to personal and corporate accounts, urging citizens to “wash their cyber hands” by verifying sources before taking action online.


Kindly share this post
Continue Reading

Trending