E-Business
IT Managers are Inundated with Cyberattacks, Struggling to Keep Up, Says Sophos Global Survey
Sophos, a global leader in network and endpoint security, has announced the findings of its global survey, The Impossible Puzzle of Cybersecurity, which reveals that IT managers are inundated with cyberattacks coming from all directions and are struggling to keep up due to a lack of security expertise, budget and up to date technology.
The survey polled 3,100 IT decision makers from mid-sized businesses in the US, Canada, Mexico, Colombia, Brazil, UK, France, Germany, Australia, Japan, India, and South Africa.
Cybercriminals Use Multiple Attack Methods and Payloads for Maximum Impact
The Sophos survey shows how attack techniques are varied and often multi-staged, increasing the difficulty to defend networks.
One in five IT managers surveyed didn’t know how they were breached, and the diversity of attack methods means no one defensive strategy is a silver bullet.
“Cybercriminals are evolving their attack methods and often use multiple payloads to maximize profits. Software exploits were the initial point of entry in 23 percent of incidents, but they were also used in some fashion in 35 percent of all attacks, demonstrating how exploits are used at multiple stages of the attack chain,” said Chester Wisniewski, principal research scientist, Sophos.
“Organizations that are only patching externally facing high-risk servers are left vulnerable internally and cybercriminals are taking advantage of this and other security lapses.”
The wide range, multiple stages and scale of today’s attacks are proving effective. For example, 53 percent of those who fell victim to a cyberattack were hit by a phishing email, and 30 percent by ransomware. Forty-one percent said they suffered a data breach.
Weak Links in Security Increasingly Lead to Supply Chain Compromises
Based on the responses, it’s not surprising that 75 percent of IT managers consider software exploits, unpatched vulnerabilities and/or zero-day threats as a top security risk.
Fifty percent consider phishing a top security risk.
Alarmingly, only 16 percent of IT managers consider supply chain a top security risk, exposing an additional weak spot that cybercriminals will likely add to their repertoire of attack vectors.
“Cybercriminals are always looking for a way into an organization, and supply chain attacks are ranking higher now on their list of methods. IT managers should prioritize supply chain as a security risk, but don’t because they consider these attacks perpetrated by nation states on high profile targets. While it is true that nation states may have created the blueprints for these attacks, once these techniques are publicized, other cybercriminals often adopt them for their ingenuity and high success rate,” said Wisniewski.
“Supply chain attacks are also an effective way for cybercriminals to carry out automated, active attacks, where they select a victim from a larger pool of prospects and then actively hack into that specific organization using hand-to-keyboard techniques and lateral movements to evade detection and reach their destination.”
Lack of Security Expertise, Budget and Up to Date Technology
According to the Sophos survey, IT managers reported that 26 percent of their team’s time is spent managing security, on average.
Yet, 86 percent agree security expertise could be improved and 80 percent want a stronger team in place to detect, investigate and respond to security incidents.
Recruiting talent is also an issue, with 79 percent saying that recruiting people with the cybersecurity skills they need is challenge.
Regarding budget, 66 percent said their organization’s cybersecurity budget (including people and technology) is below what it needs to be.
Having current technology in place is another problem, with 75 percent agreeing that staying up to date with cybersecurity technology is a challenge for their organization.
This lack of security expertise, budget and up to date technology indicates IT managers are struggling to respond to cyberattacks instead of proactively planning and handling what’s coming next.
“Staying on top of where threats are coming from takes dedicated expertise, but IT managers often have a hard time finding the right talent or don’t have a proper security system in place that allows them to respond quickly and efficiently to attacks,” said Wisniewski.
“If organizations can adopt a security system with products that work together to share intelligence and automatically react to threats, then IT security teams can avoid the trap of perpetually catching up after yesterday’s attack and better defend against what’s going to happen tomorrow.
“Having a security ‘system’ in place helps alleviate the security skills gap IT managers are facing. It’s much more time and cost effective for businesses to grow their security maturity with simple to use tools that coordinate with each other across an entire estate.”
Synchronized Security Solves the Impossible Puzzle of Cybersecurity
With cyberthreats coming from supply chain attacks, phishing emails, software exploits, vulnerabilities, insecure wireless networks, and much more, businesses need a security solution that helps them eliminate gaps and better identify previously unseen threats.
Sophos Synchronized Security, a single integrated system, provides this much needed visibility to threats by integrating Sophos endpoint, network, mobile, Wi-Fi, and encryption products to share information in real-time and automatically respond to incidents. More information about Synchronized Security is available at Sophos.com.
The Impossible Puzzle of Cybersecurity survey was conducted by Vanson Bourne, an independent specialist in market research, in December 2018 and January 2019.
This survey interviewed 3,100 IT decision makers in 12 countries and across six continents in the US, Canada, Mexico, Colombia, Brazil, UK, France, Germany, Australia, Japan, India, and South Africa. All respondents were from organizations with between 100 and 5,000 employees.
Nigeria Data Protection Commission (NDPC), in partnership with Bill Gates and Melinda Foundation and KPMG are developing open banking frameworks in a move to deepen financial inclusion.
L-r:; Anna Wallace, Senior Programme Officer for Regulatory and Consumer Protection Technologies at the Bill & Melinda Gates Foundation,; Dr. Vincent Olatunji , national commissioner of the NDPC; and John Anyanwu, KPMG Head of Cybersecurity and Privacy,
This was the focus of discussion when Dr. Vincent Olatunji , national commissioner of the NDPC, received Anna Wallace, Senior Programme Officer for Regulatory and Consumer Protection Technologies at the Bill & Melinda Gates Foundation, and John Anyanwu, KPMG Head of Cybersecurity and Privacy, in Abuja.
The commission revealed in a statement on X (formerly Twitter) that the purpose of the meeting was to discuss open banking frameworks for Nigeria, a project coordinated by the Gates Foundation.
Open banking refers to the practice of providing third-party financial service providers with access to bank account information, transaction data, and other financial data through the use of application programming interfaces.
The meeting served as a pivotal step in recognising NDPC’s crucial role in the project, formalising engagement to ensure robust input in the areas of data protection and privacy.
NDPC emphasised the crucial role of digital identity in the financial sector as well as open banking, stressing the importance of implementing measures to safeguard digital identities to foster trust and confidence
Dr. Olatunji also addressed challenges posed by digital lending companies regarding transparency in data processing activities.
The NDPC Boss noted that the Commission was already working with other stakeholders to tackle the challenges.
He highlighted the misconception among some banks regarding the roles of a Chief Information Security Officer and a Data Protection Officer, emphasising the legal requirement for all data controllers to have a Data Protection Officer.
Passwords serve as the foundation of our digital lives, but they also serve as the gateway for cybercriminals to hack into sensitive personal information. Considering their essential function, passwords remain a prime target for increasingly sophisticated cybercriminal attacks.
Therefore, taking proactive measures to safeguard accounts and personal information is imperative.
To mark World Password Day on May 2nd – highlighting the essential role passwords play in protecting our lives online – Kaspersky experts are providing essential tips to enhance password security, ensuring that users data stays out of the hands of attackers.
Weak and simple passwords have always been an attractive target for scammers as cracking them gives criminals access to multiple types of data – personal data, financial information, medical records etc.
Kaspersky telemetry indicates more than 32 million attempts to attack users with password stealers took place in 2023, this followed more than 40 million incursions in 2022.
These alarming statistics highlight the need for users to create strong, unique and varied passwords for different accounts. This way they can mitigate the risks of cyber threats and maintain personal security online.
To enhance password security, Kaspersky experts recommend the following steps and practices:
The ‘association method’ helps create strong and memorable passwords
The association approach involves creating a password from a sequence of words or ideas that have personal significance but are not easily guessable by others. A password can be based on a favourite quote, a memorable song lyric, or a unique combination of objects. This technique generates strong passwords without requiring complex memorisation, helping to maintain security while reducing the risk of forgetting. For example, a phrase “I first visited Paris in 2008” could be transformed into a password “IfvPin2o:o8”.
Are regular passwords too boring? How about emoji?
If using the same password everywhere becomes too much and you lack the imagination to make up something new, emoji-passwords could be a non-standard and safe option. Since they are a part of the Unicode standard, it is potentially possible to use them as passwords.
One of the most significant pros is that scammers cannot brute-force emoji-passwords, since various tools and dictionaries can’t crack combinations like these. More detailed information on how to set up an emoji password and the necessary requirements is available here.
The most obvious option is not the safest one
Using common passwords or default values such as “1234”, “password” or “admin” could make personal data and accounts vulnerable to scammers, since they use automated tools to guess the correct combinations.
It may take several seconds to find the right answer and gain access to personal data. A strong and complicated password includes a mix of letters, numbers, and symbols, while avoiding personal information such as names or birthdays.
Additionally, there are online public free services that allow everyone check how strong their passwords are to mitigate possible risks.
Old, but gold: one account – one password
This practice ensures that if one account is compromised, others remain secure. By creating a unique password for each account, you minimise the damage a hacker can do if they manage to steal one.
This approach isolates security breaches and helps protect sensitive data. According to a global survey, the average user has approximately 8 accounts. Remembering even 2-3 long and complicated passwords (containing up to 15 symbols) could be impossible for the majority of users.
In this case it is both safe and useful to shift the responsibility of remembering all the passwords to a security solution, such as Kaspersky Password Manager.
By Tamara Rajić, Director of Business Strategy EMEA at Infobip
World Innovation and Creativity Day fell on the 21st of April, reminding us of the boundless potential inherent in human ingenuity and technological advancement. Artificial Intelligence (AI) stands at the forefront of this celebration, reshaping the landscape of business operations and customer engagement.
The combination of advanced data analytics with cloud computing has propelled AI into the spotlight, making its integration more accessible across industries.
Unlocking AI’s potential – why companies can’t afford to miss out
What is remarkable is how AI adoption is growing its accessibility to the public. Platforms such as OpenAI, ChatGPT, and Dall-E have opened the doors to AI technologies, empowering individuals, and businesses alike to effortlessly explore and incorporate AI-driven solutions into their plans. This has sparked a culture of innovation and empowerment, enabling businesses to harness AI to expand their performance and efficiency.
Take AI-driven communication tools, like chatbots and virtual assistants for example. They are changing customer service experiences by delivering personalised, efficient, and proactive interactions. These solutions not only streamline support processes but also forge deeper connections with customers, fostering satisfaction, loyalty, and ultimately, business growth. Furthermore, AI empowers businesses to gather actionable insights from customer data, facilitating informed decision-making and targeted strategies.
Data quality plays a crucial role in the successful implementation of AI. Without complete and consistent data, implementing AI-powered technologies can lead to inaccurate results and hinder business decision-making. This is why it is important for businesses to invest in data quality assurance processes. And by analysing customer feedback across various channels, AI offers a deeper understanding of preferences and needs, enabling businesses to tailor their offerings and communication strategies accordingly. This level of personalisation increases the customer experience, promoting long-lasting relationships and brand loyalty.
Chatbots and virtual assistants are some of the most widely used AI-powered communication solutions out there, spanning across multiple industries and business types. They provide instant responses to inquiries, assist with product recommendations, and help with tasks like order tracking and appointment scheduling.
Navigating challenges in AI implementation
AI-driven automation streamlines processes, reduces manual workloads, and enhances operational efficiency, driving competitiveness and revenue growth. By leveraging AI-powered insights, businesses can identify high-value opportunities, estimate market trends, and improve resource allocation, thereby increasing ROI and market share.
This innovation is expected to catalyse significant transformations in traditional sectors such as banking and retail, leading to more personalised experiences and innovative consumer approaches. By understanding individual preferences, behaviours, and purchasing patterns, these sectors can offer tailored product recommendations, targeted promotions, and customised services.
With this being said, it is important to underline the critical function AI serves in customer support. By reducing wait times through AI-powered chatbots and providing assistance through the customer’s preferred communication channel, businesses can ensure a significant uptake in customer satisfaction.
Integrating AI into existing tools and systems does not come without its challenges. Businesses can encounter compatibility issues, data silos, and a shortage of skilled professionals with expertise in AI and machine learning within their talent pool. Demonstrating ROI in the early stages of AI technology adoption can also be challenging due to these obstacles. It is therefore important to identify high-potential use cases and the most impactful areas where AI can drive business growth and positive customer satisfaction and start from there.
Overcoming obstacles – to maximise AI’s potential
With its increasing accessibility and transformative potential, AI is fostering innovation, and amplifying creativity. By taking into consideration AI-driven insights and solutions, businesses can personalise interactions, streamline operations, and anticipate customer needs. However, this journey is not without trial and error. It demands careful navigation of data quality and integration complexities. Nonetheless, businesses should embrace AI as a catalyst for creativity and innovation, to unlock new possibilities, enriching the human experience and propelling organisations towards a future where the boundaries between humanity and technology seize to exist.
NDPC Partners Gates Foundation, KPMG on Open Banking Frameworks
Banks to Charge 0.375 Percent Stamp Duty on Loans
KADIRS Seals 7 Telecom Masts over Unpaid N5.8Bn Taxes
Afreximbank Urges African Countries to Strengthen Reserves with Gold
32m Attacks Thwarted on World Password Day
See Full List of Fake Loan Apps Blacklisted By CBN
CBN Sacks another 50 Staff, 117 Disengaged in 20 Days
AfDB, AGF Partner on Female Entrepreneurs’ Access to Finance
Nigeria Plans AI Strategy Workshop for National Development
IMF says Rising Cyber Threats Pose Serious Concerns for Financial Stability
Telecom2 days ago5G Subscriptions Hit 2.7m in Nigeria –NCC
News3 days agoGlo Urges Workers to Reflect on Furthering National Growth on May Day
Telecom3 days agoTelecom Management Company Appeals for Cooperation and Safety Measures Over Abaranje Base Station Fire Incident
Telecom3 days agoGoogle, Kaduna State Others Partner to Launch First Hausa-Language AI learning Series to Expand Tech Education and Empower Women
Telecom2 days agoExperts Seek Stricter Regulation against Call Masking, SIM-Boxing Fraud
E-Business3 days agoKonga Launches Tech Month with Incredible Discounts
News2 days agoTranscorp Group Delivers Impressive Q1 2024 Performance with Revenue Growth of 173 Percent
Broadcasting2 days agoMultichoice Ignores Court Order, Implements Hike of DStv and GOtv Subscriptions