E-Business

Sophisticated Cyberattacks Drive Innovation Btw Adversaries & Defenders- Cisco

Published

11 years ago

July 29, 2015

Kindly share this post

Both the attackers and defenders in the cyber world are innovating. The Cisco® 2015 Midyear Security Report released on Tuesday, tell us how.

The report which analyzes threat intelligence and cybersecurity trends, reveals the critical need for organizations to reduce time to detection (TTD) in order to remediate against sophisticated attacks by highly motivated threat actors.

The Angler Exploit Kit represents the types of common threats that will challenge organizations as the digital economy and the Internet of Everything (IoE) create new attack vectors and monetization opportunities for adversaries.

The report shows that new risks associated with Flash, the evolution of ransomware, and the Dridex mutating malware campaign, reinforce the need for reduced time to detection.

With the digitization of business and the IoE, malware and threats become even more pervasive, which shines a light on the security industry’s estimates of 100 to 200 days for TTD.

In contrast, the average TTD for Cisco Advanced Malware Protection (AMP), with its retrospective analysis of attacks that make it past existing defenses, is 46 hours.

The findings also underscore the need for businesses to deploy integrated solutions vs. point products, work with trustworthy vendors, and enlist security services providers for guidance and assessment.

Further, geopolitical experts have declared that a global cyber governance framework is needed to sustain economic growth.

Other key findings from the study include the following:

Angler: Adversaries Darting in the Shadows Angler is currently one of the most sophisticated and widely used exploit kits because of its innovative use of Flash, Java, Internet Explorer, and Silverlight vulnerabilities.

It also excels at attempting to evade detection by employing domain shadowing, as one of its techniques, accounting for the lion’s share of domain shadowing activity.

Flash is Back – Exploits of Adobe Flash vulnerabilities, which are integrated into Angler and Nuclear exploit kits, are on the rise.

This is due to lack of automated patching, as well as consumers who fail to update immediately.

In the first half of 2015, there has been a 66 percent increase in the number of Adobe Flash Player vulnerabilities reported by the Common Vulnerabilities and Exposure (CVE) system over all of 2014.

At this rate, Flash is on pace to set an all-time record for the number of CVEs reported in 2015.

The Evolution of Ransomware – Ransomware remains highly lucrative for hackers as they continue to release new variants.

Ransomware operations have matured to the point that they are completely automated and carried out through the dark web.

To conceal payment transactions from law enforcement, ransoms are paid in cryptocurrencies, such as bitcoin.

Dridex: Campaigns on the Fly – The creators of these quickly mutating campaigns have a sophisticated understanding of evading security measures.

As part of their evasion tactics, attackers rapidly change the emails’ content, user agents, attachments, or referrers and launch new campaigns, forcing traditional antivirus systems to detect them anew.

A Call to Arms

The innovation race between adversaries and security vendors is accelerating, placing end users and organizations at increasing risk.

Vendors must be vigilant in developing integrated security solutions that help organizations be proactive and align the right people, processes, and technology.

Integrated Threat Defense – Organizations face significant challenges with point product solutions and need to consider an integrated threat defense architecture that embeds security everywhere, and will enforce at any control point.

Services Fill the Gap – As the security industry addresses increased fragmentation, a dynamic threat landscape, and how to cope with a rising shortfall of skilled talent, businesses must invest in effective, sustainable and trusted security solutions and professional services.

Global Cyber Governance Framework – Global cyber governance is not prepared to handle the emerging threat landscape or geopolitical challenges.

The question of boundaries — how governments collect data about citizens and businesses and share among jurisdictions — is a significant hurdle to achieving cohesive cyber governance as worldwide cooperation is limited.

A collaborative, multi-stakeholder cyber governance framework is required to sustain business innovation and economic growth on a global stage.

Trustworthy Vendors – Organizations should demand that their technology vendors are transparent about and able to demonstrate the security they build into their products in order to be considered trustworthy.

These organizations must carry this understanding across all aspects of product development starting with the supply chain and through the deployed life of their products.

They must ask vendors to contractually back up their claims and demand better security.

Speaking on the report, John N. Stewart, senior vice president, chief security and trust officer, Cisco, said, “Organizations cannot just accept that compromise is inevitable, even if it feels like it today. The technology industry must up the game and provide reliable and resilient products and services, and the security industry must provide vastly improved, yet meaningfully simplified, capabilities for detecting, preventing, and recovering from attacks. This is where we are leading.

“We are regularly told that business strategy and security strategy are the top two issues for our customers, and they want trusted partnerships with us. Trust is tightly linked to security, and transparency is key so industry-leading technology is only half the battle. We’re committed to providing both: industry-defining security capabilities and trustworthy solutions across all product lines.”

Also, Jason Brvenik, principal engineer, Security Business Group, Cisco, said, “Hackers, being unencumbered, have the upper hand in agility, innovation and brazenness. We see this time and again, whether it is nation state actors, malware, exploit kits or ransomware. A purely preventive approach has proven ineffective, and we are simply too far down the road to accept a time to detection measured in hundreds of days.

“The question of ‘what do you do when you are compromised’ highlights the need for organizations to invest in integrated technologies that work in concert to reduce time to detection and remediation to a matter of hours; and then they should demand their vendors help them to reduce this metric to minutes.”

Kindly share this post

E-Business

Kaspersky Identifies Cyberespionage as a Growing Threat Across Africa, Others

Published

14 minutes ago

August 4, 2026

Chike Onwuegbuchi

Kindly share this post

At the recent Cyber Security Weekend – META event, Kaspersky’s Global Research and Analysis Team (GReAT) experts presented the latest findings on the cyberespionage threat landscape across the Middle East, Turkiye, and Africa (META) region.

While most cyberthreat categories declined over the past year, cyberespionage continued to intensify in the region. Thus, throughout the past year, spyware attacks increased by 40% in Africa, while password stealer attacks grew by 31% in Africa.

The cyberespionage landscape across the META region continues to be driven by geopolitical tensions, regional conflicts and ideological motivations. As intelligence gathering becomes increasingly important for both Advanced Persistent Threat (APT) actors and cybercriminals, organisations and individuals alike are facing a growing number of attacks designed to steal sensitive information and establish long-term access to compromised systems.

If we specifically look at cyberthreats aimed at businesses, organisations in Africa experienced a sharp increase in espionage-related threats over the past year. Spyware detections rose by 16% in Africa, password stealer attacks by 51%, and backdoor detections by 23%.

These types of malware are commonly used to infiltrate corporate environments, steal confidential information, establish persistent access, and facilitate subsequent stages of targeted attacks.

As geopolitics remains a key driver for APT attacks, such actors remain among the most significant cyber risks in the region for businesses and governmental entities.

To maximise persistence and evade detection, they continuously refine their toolsets, deploying increasingly sophisticated malware capable of maintaining long-term access to compromised systems while collecting valuable intelligence.

In 2026, Kaspersky GReAT is tracking more than 20 APT groups actively targeting organisations across the META region.

Recent research by Kaspersky GReAT found the MuddyWater APT group targeting organisations across the Middle East during the Gulf conflict using previously unseen malware chains.

The campaign employed custom loaders, injectors, previously unknown remote access trojans (RATs), credential stealers, and a modular data exfiltration framework, highlighting the group’s rapid development of new tools to steal sensitive information and evade detection.

The increase in espionage activity is not limited to organisations. Individuals are also increasingly targeted. Over the past year, attacks involving password stealers increased by 32% in Africa. The stolen information can subsequently be used to hijack accounts, conduct follow-on attacks, extort victims, or sold to third parties on underground marketplaces.

Another rapidly growing trend is mobile cyberespionage. As smartphones increasingly store personal communications, corporate information, authentication credentials, and financial data, they have become high-value targets for attackers.

“Smartphones have become one of the most valuable sources of intelligence for cyberespionage actors. While Android devices continue to be widely targeted by mobile spyware, we are also observing an increasing number of reports of sophisticated campaigns targeting iOS, as demonstrated by Operation Triangulation and, more recently, Coruna attacks.

“These findings show that advanced mobile threats continue to evolve across both major platforms, making mobile security an essential part of cyber resilience for both organisations and individuals,” said Dmitry Galov, Head of Global Research and Analysis Team, Russia and CIS, at Kaspersky.

As cyberespionage threats continue to evolve, Kaspersky recommends that organisations adopt a layered cybersecurity approach, combining continuous vulnerability management, timely patching, employee awareness training, threat intelligence, and advanced security solutions such as Kaspersky Next, which help detect sophisticated targeted attacks and protect organisations from long-term compromise.

Kindly share this post

E-Business

82% of Organizations Concerned about AI Risks Even as Adoption Accelerates – Survey Reveals

Published

3 days ago

August 1, 2026

Chike Onwuegbuchi

Kindly share this post

At its recent Cyber Security Weekend for the Middle East, Turkiye and Africa (META) region Kaspersky shared the results of a global study conducted by its internal research center which surveyed 1,800 IT and cybersecurity decision-makers and specialists from organisations across 18 countries and multiple industries.

The report shows that the pace of AI integration across organisations is rapid, despite associated risks. The company’s experts stressed that while AI adoption delivers clear efficiency gains, it must be accompanied by robust cybersecurity solutions, well-defined internal procedures, and comprehensive employee education programmes.

The report highlights a clear organisational preference for AI-enhanced technology: 68% of respondents said they would recommend a solution with AI features built in, while a mere 5% indicated they would prefer to avoid AI-enabled tools. This overwhelming endorsement underscores how deeply AI has embedded itself as a value driver across the modern enterprise.

AI has become a mainstream productivity tool spanning many business functions. The global survey findings confirm that employees across departments are already relying on AI tools for a wide range of everyday tasks, including: data analysis & visualisation (54%), project management (49%), search for information (47%), department-specific tasks (46%), text generation and editing (41%).

While organisations recognise the tangible benefits AI tools bring – including improved process efficiency and enhanced quality of deliverables – they also see the associated dangers. 82% of respondents voiced concerns about the risks AI poses to their organisation. These concerns are grounded in real-world experience.

Among the 87% of organisations worldwide that faced a cyber incident in the past year, 13% reported that they had experienced threats stemming specifically from AI-related vulnerabilities.

Notably, 74% of respondents believe that these risks can be effectively mitigated through employees’ responsible behaviour — pointing to the critical importance of security awareness and training in the AI era.

“The speed at which organisations are embracing AI is remarkable, but it must be matched with an equally strong commitment to security. We are already seeing a growing range of threats directly tied to AI adoption – whether it’s malware camouflaged as popular AI tools, vulnerabilities introduced through unsecure vibecoding, or leaked access credentials to corporate AI platforms and malicious skills by AI agents.

Managing these risks requires a holistic approach: the right technology, well-defined procedures, and a security-aware workforce,” comments Brandon Muller, senior security consultant for the META region at Kaspersky.

Kindly share this post

E-Business

How Temu Helped a Madagascan Vanilla Family Business Sell Direct to Consumers Across Europe

Published

3 days ago

August 1, 2026

Ugo Onwuaso

Kindly share this post

Malagasy Vanilla has transformed its decades-old wholesale business by embracing direct-to-consumer sales through Temu, enabling the family-run company to reach customers in 14 European markets while significantly reducing logistics costs.

How Temu Helped a Madagascan Vanilla Family Business Sell Direct to Consumers Across Europe

For years, premium Madagascan vanilla supplier Malagasy Vanilla sold exclusively to restaurants, bakeries and wholesalers because the cost of shipping a single pack to individual customers often equalled the value of the product itself. That changed after the company joined Temu’s Local Seller Program in November 2025.

The Belgian-based business, which sources high-quality vanilla from Madagascar, has leveraged Temu’s logistics network to cut domestic shipping costs by nearly half through a partnership with Belgian postal operator Bnode. The move has enabled the company to enter the retail market for the first time and quadruple its sales within four months.

According to Belinda Rabenandrasana, co-Chief Executive Officer of Malagasy Vanilla, Temu has opened up an entirely new customer segment for the company.

“Temu opened a new avenue for us,” she said. “We were finally able to explore selling to individuals.”

The platform now contributes between five and 10 per cent of the company’s overall revenue.

Expansion into 14 European Markets

Malagasy Vanilla is among businesses participating in Temu’s Local Seller Program, launched in Europe in 2024 to help local merchants expand beyond their domestic markets.

Through partnerships with more than 150 logistics providers across Europe—including Bnode in Belgium, La Poste in France and DHL Group in Germany—Temu offers sellers access to affordable shipping and delivery infrastructure without requiring major investment in logistics.

After successfully establishing direct-to-consumer sales in Belgium, Malagasy Vanilla expanded into 14 European countries, including Germany, France, Spain and Poland.

Rabenandrasana said the logistics support, competitive shipping rates and seller assistance provided by Temu made the expansion possible.

“Without Temu and its partnership with Bnode, it would have been very difficult for a small business like ours to start selling directly to consumers,” she said.

She added that Temu also assists sellers in managing regulatory requirements such as the European Union’s Extended Producer Responsibility (EPR) compliance, making cross-border operations easier for small businesses.

Three Generations of Vanilla Expertise

Malagasy Vanilla traces its roots to three generations of the Rabenandrasana family in Madagascar’s vanilla industry.

Belinda’s grandfather began trading vanilla locally, while her father expanded operations across Madagascar. She launched the company’s international business in 2017, supplying premium Madagascan vanilla to European restaurants, pastry shops and food wholesalers before establishing operations in Belgium in 2023.

The company partners with growers and producer associations in Madagascar, where between 20 and 40 workers oversee the six- to 10-month curing process that transforms green vanilla pods into premium black vanilla.

Operations in Belgium focus on packaging, quality assurance and distribution.

Customer Reviews Drive Growth

Under its Lavani brand, Malagasy Vanilla sells gourmet-grade whole vanilla pods targeted at both professional chefs and home baking enthusiasts.

Rather than relying heavily on paid advertising, the company has benefited from Temu’s product discovery tools and customer reviews, helping the niche brand gain visibility organically.

According to Rabenandrasana, strong customer feedback has played a significant role in increasing traffic and boosting sales.

The brand currently maintains a customer review rating exceeding 99 per cent on the platform.

Future Plans

Looking ahead, Malagasy Vanilla plans to expand its European footprint further by establishing a warehouse in France and increasing sales across the continent.

The company is also developing new products, including vanilla extract and vanilla sugar, while planning to open a physical retail and production facility in Belgium later this year.

In addition, it intends to launch a social-impact initiative aimed at supporting vanilla-growing communities in Madagascar.

Reflecting on the company’s evolution, Rabenandrasana said the business continues to build on her family’s legacy.

“My grandfather worked locally, my father expanded nationally, and now we are building internationally,” she said.

Kindly share this post