Connect with us

E-Business

Cyberoam Predictions 2015 Reveal 8 Critical IT Security Issues

Published

on

CyberoamLogo.jpg
Kindly share this post

 

Cyberoam, a leading global provider of network security appliances has published its Security Predictions for 2015. These predictions give an overview of industry trends and security challenges businesses are likely to come across in 2015.

The Security predictions have been prepared with insights from the Cyberoam Threat Research Labs (CTRL).

The eight (8) predictions made are based on the latest IT trends that closely impact all of us since they co-exist in our personal as well as professional spaces like the Internet of Things, Geo-political interferences, attacks on iOS, newer authentication methods replacing traditional passwords, and more.

New threat trends like malvertising, exploitation of legacy protocols, et al, also share the spotlight among the predictions for 2015. Here are the predictions:

Dark Clouds Over Internet of Things (IOT):

This year IOT will gain wider visibility due to its advancements as well as vulnerabilities.

As SCADA systems adopt IOT, their exposure to cyber threats will increase.

Remotely connected and automated building control systems also face a similar challenge.

Around 2.2 million SCADA and BACnet devices are already exposed to potential cyber-threats as these are identifiable via SHODAN – a search engine for Internet-connected devices.

Meanwhile, government safety requirements such as eCall (Internet assisted emergency reporting in vehicles in Europe) and consumer demand for seamless data connectivity have opened gates for Connected Car infrastructure, which is bringing automakers, telcos and the tech-giants (Google, Samsung & Apple) to a common drawing board.

This is a classic example of IoT at work in our day-to-day lives.

Meanwhile, mobile apps have started featuring in the Connected Car infrastructure and it is just a matter of time before the vulnerabilities are discovered.

Geo-Political Interference

In 2014, the US Department of Homeland Security revealed a trojan named Black Energy affecting the nation’s critical infrastructure. Exploits of Syrian Electronic Army and Regin APT malware campaign also hit headlines.

The Geopolitical landscape is changing dramatically around the world and Internet cannot remain insulated from its effects; in fact Internet has become a critical tool for government sponsored propagandas, espionage and cyber-attacks.

APT malwares sometimes used in these campaigns grossly undermine legal boundaries.

Such malwares were found waiting to be activated in networks of oil and gas pipelines, power transmission grids, water distribution and filtration systems, wind turbines and even some nuclear plants in the US.

In such cases, large private businesses also come in the line of fire every now and then.

If conditions deteriorate, which seems to be a decent probability in the coming year, there will be a larger impetus on cyber-attacks from the nations involved, some of which could be revealed during the year itself.

Legacy Protocols on Target

POODLE, Shellshock and Heartbleed are examples of vulnerabilities in code which sit hidden for years before been discovered and exploited.

The legacy protocols on which Internet seems to run all so well are far from perfect and cyber criminals will continue to exploit the loopholes to their advantage. Some of these protocols being open source face a larger threat.

Moreover, as the Internet makes transition from IPv4 to IPv6, cybercriminals would hunt for latent security gaps.

In addition to the vulnerabilities in web browsers, one can also expect client side attacks exploiting application vulnerabilities in widely used frameworks like Adobe, Java, thereby aggravating network security challenges for IT admins in 2015.

Healthcare Bleeds

Given that healthcare sector is making rapid strides globally in embracing technology and digitising patient care along with storing personally identifiable information, there is a need to strengthen information security.

Securing Healthcare data is critical as it is at a higher risk given the fact that this data fetches much higher value in black market than credit card numbers, because it can provide access to bank accounts or help in obtaining prescriptions for controlled drugs.

Healthcare sector needs significant improvements in its cyber-preparedness – a fact FBI made amply clear in 2014 when Community Health Systems faced a security breach leading to theft of 4.5 million patient records in the US.

More such breaches are expected in 2015.

Malvertising And Attacks On Email

2014 saw ad networks on reputed websites like Yahoo, AOL and Google being compromised to distribute malvertisements.

Malvertising (placing malware laden advertisements on reputed/popular webpages) is likely to become more of a nuisance in 2015.

Ad networks are continually compromised and threat actors are relying on the fact that blocking every ad or testing every ad network is not a practical solution. Malvertisers are also at advantage as reputed websites (news and infotainment) are rarely blocked by office firewalls.

Meanwhile, if reports are to be believed, Spam is on a decline.

This is partly due to the fact that spammers have devised other advanced ways to land mail in the inbox, while others have moved on to sophisticated spear phishing attacks targeting individuals behind corporate firewalls.

Nonetheless, the old tactics of crafting fraudulent mails around major global/local events is still profitable for Spammers. 2015 will not be any different in this regard, though one can expect to see some newer tricks for evading current email security solutions.

Demand for Context Aware Security

Networks these days generate huge amount of data. This data contains enough cues to offer patterns of human behaviour that can be used to predict and prevent cyber-attacks.

However, comprehending and co-relating data out of various logs and reports to get meaningful information requires time and skills. Besides, it carries the risk of human oversight.

Enterprises need a security model to harness this information and interpret network traffic to identify suspicious patterns and events.

In such a scenario, Big Data analytics tools can offer huge help in co-relating the data with a given user model to spot risky users and trends in a network. In fact, BFSI organisations have already started leveraging Big Data based security analytics for early fraud detection and prevention.

Employing the advancements in Big Data analytics, Context Aware Security solutions such as Cyberoam’s User Threat Quotient (UTQ) can help IT admins in tasks akin to finding a needle in a haystack – identifying a user posing security risk in a network. In 2015, such solutions will prominently be employed by organisations seeking actionable security intelligence.

iOS On The Radar Of Cyber-Criminals; Android Attacks To Continue

Mobile malwares will make a major impact in 2015, as more people are now using handheld devices to access critical business data from cloud apart from banking and payments.

In this scenario, the new Android OS, Lollipop, will be put to test. At the same time, as enterprises embrace Apple apps and use of iOS-based devices grows, these are getting on the radar of cyber criminals.

Recent trends suggest that in 2015, iOS will get hit by phishing attacks and malwares on a larger scale than ever before.

Solving the Puzzle Called ‘Password’

The quest for replacing ‘password’ as an authentication procedure will gain momentum.

It is reported that an increasing number of millennials in the US prefer Apple’s Fingerprint Scan for authentication purpose.

However, scaling up biometric authentication techniques like fingerprint scan is a big challenge. Moreover, standalone biometric authentication is not as full proof as thought earlier.

Considering recent incidents of data breaches and credential thefts in mind, the FIDO Alliance recently released its long-awaited 1.0 specifications for passwordless and multifactor authentication systems.

A major push to move away from passwords is likely to make hackers more than just shift in their seats.

Cyberoam Technologies, a Sophos Company, is a global Network Security appliances provider, offering future-ready security solutions to physical and virtual networks in organizations with its Next-Generation Firewalls (NGFWs) and Unified Threat Management (UTM) appliances.

The virtual and hardware Cyberoam Central Console appliances offer Centralized Security Management options to organizations, while Cyberoam iView allows intelligent logging and reporting with one-of-their-kind, in-depth reports. Cyberoam is accredited with prestigious global standards and certifications like EAL4+, CheckMark UTM Level 5 Certification, ICSA Labs, IPv6 Gold logo, and is a member of the Virtual Private Network Consortium.

 


Kindly share this post

Nigeria CommunicationsWeek believes that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. So since 2007, we have devoted our energy to independent reportage of technology and how they affect lives.

E-Business

NIPOST Plans Digital Postcodes for Every Building in Nigeria

Published

on

Kindly share this post

Nigerian Postal Service (NIPOST) has reaffirmed its commitment to implementing a National Digital Postcode System to assign a unique digital address to every addressable building across the country.

NIPOST Plans Digital Postcodes for Every Building in Nigeria

Speaking at the unveiling of the Post Code Delineation Model Validation 2026 in Abuja, Tola Odeyemi, postmaster general and chief executive officer, NIPOST, said the initiative would establish a machine-readable standard location-address framework for buildings nationwide.

“Postcode is basically a framework used to have a machine-readable standard location address for every addressable building in Nigeria,” Odeyemi said.

She explained that the project would place Nigeria among the first countries in Africa to develop a postcode system down to the unit level, ensuring that each standing building is assigned a unique code.

According to her, the digital postcode system is expected to enhance service delivery, logistics operations, emergency response, and national planning by improving the identification of locations across the country.

Odeyemi noted that the diversity of Nigeria’s geography necessitated different approaches to address mapping and postcode allocation.

“Nigeria is a large country. We have all the way from the top of Nigeria, which is almost like the Sahel, to the Savannah, to the Middle Belt, to the tropical South and even to the riverine areas.

“The logic that will work for Jigawa is not the same logic that will work for Bayelsa because they have completely different geographical expressions, density of buildings, population distribution, and topography,” she said.

She said the postcode delineation process was designed to ensure that postcode boundaries align with existing administrative structures and do not overlap local government boundaries.

“Delineation has to make sure the postcode does not pass administrative boundaries, and it must not go across two local government areas,” Odeyemi stated.

The NIPOST boss further explained that the validation exercise involves testing aerially mapped polygons against actual settlement patterns and geographical realities in different parts of the country.

“To test the polygons we have drawn aerially, we must ensure they accurately reflect realities on the ground. For example, the density of buildings in Lagos, particularly in Mushin, is very different from the density of buildings in Abuja. We are making sure that density maps and topographical features are properly captured for each state in Nigeria,” she said.

She described the Post Code Delineation Model Validation exercise as a critical stage in the agency’s broader digital addressing initiative, which seeks to create a comprehensive and standardised postcode framework for the country.

Nigeria has long grappled with an inefficient addressing system, making it difficult to accurately identify locations for postal services, logistics, emergency response, and public planning.

NIPOST’s National Digital Postcode System is part of efforts to create a standardised and technology-driven addressing framework that assigns a unique code to every addressable building in the country.


Kindly share this post
Continue Reading

E-Business

The Case for a Holistic AI-Led Approach to Cybersecurity in the Fintech Ecosystem

Published

on

Kindly share this post

As digital financial services continue to grow globally, cyber threats are becoming more advanced, more automated, and more financially damaging. In Nigeria, where digital payments are becoming a part of everyday life, these threats pose significant risks to both consumers and financial institutions.

Industry reports continue to show that account takeover remains one of the dominant fraud issues in Nigeria, accounting for a significant share of 43% banking-related losses reported to Nigeria Inter-Bank Settlement System (NIBSS). Between early 2023 and mid-2025, the financial sector is estimated to have lost hundreds of billions of naira to digital fraud, while 281,500  user accounts have been exposed through breaches and leaks in Q1 alone.

Responding to this kind of threat environment requires more than a single line of defence. It requires a broader security model that combines intelligence, automation, identity verification, and ecosystem collaboration.

PalmPay, leading digital payments platform, has built its cybersecurity framework on a multi-layered security architecture designed to anticipate, detect, and mitigate risks before they escalate. Rather than relying on a single line of defence, PalmPay integrates AI-driven fraud monitoring, continuous risk assessment, behavioural analysis, and multi-layer authentication to strengthen account protection.

One important part of this approach is biometric and facial verification. As account takeover attempts increasingly exploit stolen credentials, identity verification has become one of the most effective tools in combating fraud. By combining facial verification with PIN and OTP authentication, PalmPay introduces multiple layers of protection that help ensure access is tied to the legitimate account owner, significantly reducing the risk of unauthorized access.

Complementing this is PalmPay’s Fraud Case Management System that enhances how potential fraud incidents are detected, analysed, and managed. By centralising fraud intelligence and enabling faster response times, the system helps security teams identify emerging patterns and intervene more proactively.

PalmPay’s Anti-Fraud Manager, Omoruyi Aiyudu, commented: “Fraud prevention today requires a shift from isolated security controls to a connected, intelligence-driven security ecosystem. At PalmPay, we leverage AI-driven fraud detection, behavioural analytics, and multi-layered authentication to identify and mitigate risks in real time. We continue to invest in advanced technologies to strengthen account security and build a safer, more resilient digital financial ecosystem for our users.”

Ecosystem Collaboration

Cybersecurity does not stop at internal controls. Stronger outcomes also depend on collaboration across the wider financial ecosystems.

PalmPay continues to work with regulators, law enforcement agencies and other stakeholders to support stronger cybercrime detection and response capabilities. One example is collaboration with the Nigerian Cybersecurity Unit of the Nigeria Police Force (NPF), including support through the provision of advanced equipment designed to enhance fraud detection and investigation capacity.

The company also recently collaborated with the Nigerian Data Protection Commission on a specialized data protection training to enhance internal data governance practices and advance compliance with the Nigeria Data Protection Act (NDPA) 2023.

These efforts reflect a broader view of security, one that recognizes that customer protection depends not only on technology, but also on governance, institutional cooperation, and responsible data handling.

PalmPay also believes that effective cybersecurity requires active participation from every stakeholder in the digital ecosystem. This is why user awareness remains an important part of its approach. Technology can reduce risk, but informed behaviour remains one of the strongest protections against fraud.

As cyber threats continue to evolve, the future of cybersecurity will depend on organisations adopting intelligent, adaptive, and collaborative security models. AI-led security solutions are no longer optional; they are becoming essential to staying ahead of increasingly sophisticated threats, strengthening customer trust, and the digital economy.


Kindly share this post
Continue Reading

E-Business

Galaxy Backbone @ 20, Pledges Nationwide Connectivity, Data Sovereignty

Published

on

Kindly share this post

Galaxy Backbone (GBB) Limited has mapped out strategies to strengthen Nigeria’s digital infrastructure in order to make the country globally competitive in the face of Artificial intelligence, blockchain, cloud computing and other emerging technologies aimed at securing the digital future of the country.

Galaxy Backbone @ 20, Pledges Nationwide Connectivity, Data Sovereignty

Prof Ibrahim Adeyanju, managing director and CEO of GBB, made this known during a press conference to unveil a flurry of activities to celebrate the 20th anniversary of GBB in Abuja on Monday, stressing that Galaxy Backbone has evolved from a connectivity provider into one of Nigeria’s most strategic digital infrastructure institutions.

Galaxy Backbone is a public enterprise of the Federal Government of Nigeria incorporated in 2006 with the primary mandate of setting up and operating a unified Information and Communication Technology (ICT) infrastructure platform that addresses the connectivity, transversal and other technology imperatives for Ministries, Departments and Agencies (MDAs) of the federal government and private entities.

He said in the last 20 years, the agency has invested in world-class data centre infrastructure, including uptime certified Tier III and Tier IV facilities that provide secure, resilient and reliable environments for hosting missions critical to systems and applications.

He noted that these facilities strengthen data sovereignty, ensure business continuity and help keep Nigeria’s most critical digital assets secure.

“Through our cloud infrastructure and the 1Government Cloud platform, government institutions can access scalable digital services without the burden of building costly infrastructure independently. This shared-services model improves efficiency, reduces costs and accelerates innovation.

“We have delivered platforms such as GovMail (the homegrown Official government email), collaboration tools, hosting services, connectivity solutions and shared applications that support thousands of public servants and hundreds of institutions every day,” he said.

He emphasized that the true value of Galaxy Backbone is not measured by kilometres of fibre, data centres or technology alone but by impact.

He explained that the GBB fibre infrastructure today spans almost 30 states of the federation, connecting government institutions and creating the foundation for digital government even as he pledged that the remaining states and local areas will all be captured in due course.

On cyber security, the GBB boss noted that the agency has strengthened cybersecurity capabilities and continues to invest in protecting government systems and critical national digital assets, against cyber-attacks.

“We have the digital infrastructure and we are collaborating with partners to use these emerging technologies. We also have a top tier cyber security operation center and they are multilayered such that even when there is a spike in cyber-attacks none of them have been successful so far.

He added that the GBB is collaborating with other government agencies like the National Security Adviser, The Nigeria Police, and Nigerian Communications Commission (NCC) National Information Technology Development Agency (NITDA) National Identity Management Commission (NIMC) to ensure that government information is protected.

Ibrahim Sani Mohammed, executive director Finance and Corporate Services of the GBB, while fielding questions noted that the agency has created enormous value and has contributed immensely in the digital ecosystem of Nigeria helping to support small and medium enterprises (SMEs).

Olusegun Olulade, executive director Customer Centrality and Marketing of the GBB, said that customers have remained the formidable partners in the GBB journey of 20 years, adding that the agency has developed the mechanism to ensure customer satisfaction as it intensifies efforts to build trust.


Kindly share this post
Continue Reading

Trending