News
Cybersecurity And Risk Mitigation

By Austin Okere
“Twitter hack: 130 accounts targeted in attack” was the screaming headline on the BBC’s website on July 17, 2020.
Two days earlier, the social media site had admitted a major cyber-attack of celebrity accounts. The security breach saw accounts including those of Barack Obama, Elon Musk, Kanye West and Bill Gates tweet a Bitcoin scam to millions of followers.

Several Bitcoin-related accounts began tweeting what appeared to be a simple Bitcoin scam, promising to “give back” to the community by doubling any Bitcoin sent to their address. Then, the apparent scam spread to mainstream celebrity accounts such as Kim Kardashian West and former vice-president Joe Biden, and those of corporations Apple and Uber.
Twitter is not the only high-profile company that has been hit. Just about every other company you can think about has suffered similar fate. The roll call of victims includes Rupert Murdock’s News Corp, Sony PlayStation Network, Government of turkey, Britain’s Serious Organized Crime Agency, and the CIA amongst others.
The story of hacking will not be complete without Anonymous; a sophisticated group of politically motivated hackers who have emerged since 2011. Anonymous are demonstrating how vulnerable companies that are charged with protecting our data are.
Anonymous hacked 485 Chinese government websites, some more than once, to protest the treatment of their citizens. Among their major successful hacks are Visa, MasterCard, Amazon, PayPal, PostFinance, Bank of America, and Sony Computer Entertainment. We are at the beginning of the mighty struggle for the internet with the aged old dilemma that pits the demands of security with the desires for freedom.
Cybercrime has now become so prevalent globally that there is hardly any organization that is yet to be hacked, and Nigeria is no exception. In fact, it is said that there two types of organizations, those that know they have been hacked and those that don’t. If in doubt, ask your customers, and they will have a bucketful of useful feedback for you.
The increasing trends in cyber security breaches are due to the following factors; the rise of Artificial Intelligence (AI), adoption of Internet of Things (IoT) – with over 25b devices forecasted to be connected by 2025, globalisation of cybercrime, the cybersecurity skills gap that continues to grow, Increased skill levels of attackers, increased use of the Public Cloud, increasing reliance on technology and digitisation – (now fuelled by the pandemic and working from home) and attackers risk/reward imbalance amongst others.
Polls at a recent cybersecurity webinar that I facilitated was very revealing:
- 54% of respondents said they had been hacked
- 31% said their company had been hacked
- 67% considered PEOPLE the weakest link in cybersecurity – way over Process, and Technology.
And yet we spend significantly more money on products and technology, with little emphasis on mass education.
Hiring the most accomplished CISA, however, will not do very much good if there is not a deliberate policy of self-awareness of all staff, especially during this period where there is an explosion in people working from home and connecting to enterprise servers through personal systems that could more easily be compromised.
Neither is buying the most expensive antivirus the magic wand. It is like having the best pizza toppings without the base bread. Or like having the best machine leaning algorithm without the Big Data that the system will use for pattern detections.
Cyber-attacks can have significant business impact including; loss of funds, theft of intellectual property, serious disruption to business, damage to reputation, loss of customer trust, huge regulatory fines, litigation costs and possible bankruptcy.
Risk mitigation against cybersecurity is most effective in its Dynamic Collaborative Form. Dynamic because it requires a shared Body of Knowledge that is consistently updated and available to all parties. Risk mitigation cannot be a competitive strategy for any organization; this notion could be quite illusory because the nature of cybercrime can be likened to an elephant. People at the side may think it is a wall, people at the trunk may think it is a snake. People at the tail may think in it is a monkey, and people at the leg may think it is a tree trunk.
As in the case of the elephant, it is only when you have curated the complete and accurate picture through which the breach can manifest that you can effectively deal with it or contain it.
This is why there is a need for constant collaboration and open and transparent reporting, similar to the way that the COVID Pandemic is being collectively monitored and reported globally. This is what helped to curb the chain email fraud also known as “419” and many malicious computer viruses unleashed to take over users’ systems.
Governments and private establishments can improve protection of critical infrastructure from cyber-attacks by following the following basis principles:
- First rule is not to assume anything is secure.
- Second is not to assume you will not be targeted.
- Third is to realize that modern systems have so many moving parts that you can’t really use a strategy of owning all of it, partnerships are essential.
- Nations have to build extreme levels of expertise across a wide threat surface. It’s no use protecting the databases while the CCTVs in the President’s office and residence have been compromised.
- Nations have to build cyber armies and cyber police to tackle external aggression, protect national assets and protect her citizens.
The most dangerous intruders are not the ones with guns but the ones with laptops. The terrorist killing people with bullets is “small fish” compared to the one that can make planes fall from sky or trains crash, or provoke a riot or influence an election without leaving any trace.
Cyber-attack is the new normal. Organizations and Technology Providers can mitigate these attacks by Perpetual state of vigilance. Every internet connected or smart device is a potential back door. From the internet connected TV to your webcam or printer. Even if nothing is stolen from you, your resources can be hijacked to attack others. Don’t assume you have enough expertise to be in constant state of vigilance all by yourself. Cyber products and cyber companies are also at risk.
If you are a transaction-oriented company then you have to be using Artificial Intelligence to watch out for fraudulent transactions. If you are a data company then you need to think of encrypting data at rest and in transit. Two factor authentications are a must for all sensitive access. Walling off all critical systems from the net as a last means of firewall is simply not a practical solution.
Are organizations and private establishments in Nigeria doing enough to collaborate on threats? I believe that we could do more.
There should be a national Security Operations Center (SOC) and threat Database where all incidents are reported. This center should also disseminate threats and analyze incidents to help others prevent similar infiltrations.
Many firms, especially banks, think it will impact their brand if they disclose vulnerabilities and attacks. The under reporting or cover up of breaches portends a vicious cycle of repeated unanticipated hacks, because you are inadvertently empowering the hackers to cause more damage to you by not reporting and exposing them and their future hacking plans.
Working in silos is not an option, because even when you believe you have secured your fortress; how do you guard against third parties connecting to your system through Application Programing Interfaces (APIs)? Take for instance the case of the N11b breach involving a major Nigerian Bank and a Fintech company, E-Transact.
According to a report by TechNext.com, this came to light following a petition that the company developed a solution which helped Smart micro Systems to defraud the bank. Have we thoroughly investigated and comprehensively documented the nature of the beach and the vulnerabilities exploited?
The demography and architype of the perpetrators? Any possible internal collaboration or any systems bugs? Answers to these question to the right quarters is invaluable in foiling future attacks. While this may not be the only major successful breach, the system is so opaque that you will struggle to find a database of cases to learn from and anticipate future attacks.
The major reasons why organizations generally do not report breaches are fear of litigation or regulatory action and loss of reputation. In tackling cybercrime, we all have to be on the same team!
According to iafrican.com, Nigeria is set to establish a Cyber Security Research Centre (CSRC) to combat cybercrime. This is in a bid to build capacity and co-ordinate incident management and contribute to knowledge generation in cyber security. According to reports, Nigeria is already working with Cyber Security Malaysia and the Canadian Cyber Incident Response Centre (CCIRC) on establishing the CSRC.
While these are useful initiatives, there is a need for organizations to come together to collaborate on researching past breaches and documenting them and comprehensively reporting current breaches to learn from them in order to prevent future attacks.
Private organizations such as the Risk Management Association of Nigeria (RIMAN) and the Bank Directors Association of Nigeria (BDAN) could be hardened and work closely with Government Agencies such as the National Information Technology Development Agency (NITDA) on existing and new initiatives towards combating Cybercrime.
Cybercrime and cybersecurity are real, but they are not rocket science and they are certainly no scarier than COVOD or EBOLA. If we could contain Ebola, Aids and 419 through collaboration, then surely, we can also contain cybercrime through Collaboration too; but we must be willing to take the painful steps that are necessary to safeguard ourselves and our organizations. Only then can we build the requisite trust in the system to continue to enjoy the fruits of digital transformation.
Austin Okere is the Founder of CWG Plc, the largest ICT Company on the Nigerian Stock Exchange & Entrepreneur in Residence at CBS, New York. Austin also serves on the Advisory Board of the Global Business School Network, and on the World Economic Forum Global Agenda Council on Innovation and Intrapreneurship. Austin now runs the Ausso Leadership Academy focused on Business and Entrepreneurial Mentorship.
News
Kaspersky Shares AI Cybersecurity Predictions for 2026

Kaspersky experts outline how the rapid development of AI is reshaping the cybersecurity landscape in 2026, both for individual users and for businesses. Large language models (LLMs) are influencing defensive capabilities while simultaneously expanding opportunities for threat actors.

Deepfakes are becoming a mainstream technology, and awareness will continue to grow. Companies are increasingly discussing the risks of synthetic content and training employees to reduce the likelihood of falling victim to it. As the volume of deepfakes grows, so does the range of formats in which they appear.
At the same time, awareness is rising not only within organisations but also among regular users: end consumers encounter fake content more often and better understand the nature of such threats. As a result, deepfakes are becoming a stable element of the security agenda, requiring a systematic approach to training and internal policies.
Deepfake quality will improve through better audio and a lowering barrier to entry. The visual quality of deepfakes is already high, while realistic audio remains the main area for future growth.
At the same time, content generation tools are becoming easier to use: even non-experts can now create a mid-quality deepfake in just a few clicks. As a result, the average quality continues to rise, creation becomes accessible to a far broader audience, and these capabilities will inevitably continue to be leveraged by cybercriminals.
Online deepfakes will continue to evolve but remain tools for advanced users. Real-time face and voice swapping technologies are improving, but their setup still requires more advanced technical skills. Wide adoption is unlikely, yet the risks in targeted scenarios will grow: increasing realism and the ability to manipulate video through virtual cameras make such attacks more convincing.
Efforts to develop a reliable system for labelling AI-generated content will continue. There are still no unified criteria for reliably identifying synthetic content, and current labels are easy to bypass or remove, especially when working with open-source models. For this reason, new technical and regulatory initiatives aimed at addressing the problem are likely to emerge.
Open-weight models will approach top closed models in many cybersecurity-related tasks, which create more opportunities for misuse. Closed models still offer stricter control mechanisms and safeguards, limiting abuse.
However, open-source systems are rapidly catching up in functionality and circulate without comparable restrictions. This blurs the difference between proprietary models and open-source models both of which can be used efficiently for undesired or malicious purposes.
The line between legitimate and fraudulent AI-generated content will become increasingly blurred. AI can already produce well-crafted scam emails, convincing visual identities, and high-quality phishing pages.
At the same time, major brands are adopting synthetic materials in advertising, making AI-generated content look familiar and visually “normal.” As a result, distinguishing real from fake will become even more challenging, both for users and for automated detection systems.
AI will become a cross-chain tool in cyberattacks and be used across most stages of the kill chain. Threat actors already employ LLMs to write code, build infrastructure, and automate operational tasks.
Further advances will reinforce this trend: AI will increasingly support multiple stages of an attack, from preparation and communication to assembling malicious components, probing for vulnerabilities and deploying tools. Attackers will also work to hide signs of AI involvement, making such operations harder to analyse.
“While AI tools are being used in cyberattacks, they are also becoming a more common tool in security analysis and influence how SOC teams work. Agent-based systems will be able to continuously scan infrastructure, identify vulnerabilities, and gather contextual information for investigations, reducing the amount of manual routine work.
“As a result, specialists will shift from manually searching for data to making decisions based on already-prepared context. In parallel, security tools will transition to natural-language interfaces, enabling prompts instead of complex technical queries,” adds Vladislav Tushkanov, Research Development Group Manager at Kaspersky.
News
Nigerians with Albinism Reject Pity, Demand Dignity at Empowerment Forum

Nigerians living with albinism say their biggest challenge is not skin sensitivity or poor eyesight, but being seen, heard and treated as full human beings, a message that resonated at a recent empowerment session hosted by the Consumer Advocacy and Empowerment Foundation (CADEF) and Albino Empowerment Foundation.

CADEF
The event last Saturday focused on lived experiences, self-advocacy and rights awareness rather than handouts, though participants received food, protective clothing and skin/eye care materials.
CADEF Executive Director, Prof. Chiso Ndukwe-Okafor, said real progress requires respect and inclusion, not pity, adding that knowledge of human rights equips people to demand fairness.
“Dignity begins when people are seen fully and treated equally,” she said.
Ifeoma Ngesina, founder of Albino Empowerment Foundation, defined inclusion as equal rights and participation in decisions affecting their lives, not stereotypes.
“When persons with albinism are included in schools, workplaces, leadership and media, harmful myths fade,” she said, stressing it builds confidence and leadership.
CADEF Advisory Board Member, Ms Kobi Ikpo, urged participants to own their narrative: “If you do not tell people how to treat you, they will not know how to address you. Once you accept yourself as a complete human being deserving of respect, it reflects in how you carry yourself — and that confidence commands respect.”
Afolake Odudinu highlighted parental ignorance leading to school dropouts, skin damage from sun exposure and social/marital stigma, noting skin cancer treatment remains inaccessible for many.
Efosa Peter, a father and associate pastor, rejected pity for genuine empowerment: “I hate pity. I don’t want to be pitied — I want empowerment.” He described persons with albinism as creatively gifted and warned against insincere initiatives.
“Empowerment must include self-esteem and self-motivation. When you see yourself as whole, others will follow,” he said.
Teacher Rose Adudu shared overcoming school bullying through discipline and advocacy, helping enrol a young albino girl in school despite later parental withdrawal.
“Your character will speak for you,” she said.
Participants were encouraged to use content creation for education and myth-busting, with CADEF planning annual events and advancing Digital Financial Inclusion Rights for Persons With Disabilities.
The forum underscored a core demand: opportunity, understanding and respect over sympathy.
News
NNPC’s $1.42bn, N5.57trn Debt Write-Off and Test of Nigeria’s Fiscal Governance

By Blaise Udunze
When the Federal Government approved the write-off of about $1.42 billion and N5.57 trillion in legacy debts owed by the Nigerian National Petroleum Company Limited (NNPC Ltd) to the Federation Account, it was rightly described as a landmark decision. After years of disputes, reconciliations, and contested figures, Nigeria’s most important revenue institution was, at least on paper, given a cleaner slate.

NNPC
The approval, contained in a report prepared by the Nigerian Upstream Petroleum Regulatory Commission (NUPRC) and presented at the last year November meeting of the Federation Account Allocation Committee (FAAC), effectively wiped out 96 percent of NNPC’s dollar-denominated obligations and 88 percent of its naira liabilities accumulated up to December 31, 2024. It resolved long-standing balances arising from crude oil liftings, joint venture royalties, production-sharing contracts, and related arrangements.
Judging it critically, the decision carries both promise and peril, but can be viewed from the perspective of a country desperate to restore confidence in public finance management. It offers an opportunity to reset relationships, clean up accounting records, and move forward under the Petroleum Industry Act (PIA). Yet, it also exposes deep structural weaknesses in Nigeria’s oil revenue governance, weaknesses that, if left unaddressed, could turn today’s debt relief into tomorrow’s fiscal regret.
Context matters. The debt write-off comes not during a period of revenue abundance, but at a time when Nigeria’s upstream revenue performance is under severe strain. According to the same NUPRC document, the commission missed its approved monthly revenue target for November 2025 by N544.76 billion, collecting only N660.04 billion against a projected N1.204 trillion.
Royalty receipts, the backbone of upstream revenue, tell an even starker story. It is alarming that against an approved monthly royalty projection of N1.144 trillion, only N605.26 billion was collected, leaving a shortfall of N538.92 billion. Cumulatively, by the end of November 2025, the revenue gap stood at N5.65 trillion, with royalty collections alone falling short by N5.63 trillion. These figures underscore how fragile Nigeria’s fiscal position remains, even as trillions of naira in historical obligations are being written off.
To be fair, the debts forgiven were not incurred overnight. They are the product of years of disputed remittances, lacking transparent accounting practices, and overlapping institutional roles, particularly under the pre-PIA regime. As petroleum economist Prof. Wumi Iledare has repeatedly observed, the former Nigerian National Petroleum Corporation combined regulatory, commercial, and operational functions, making revenue reconciliation cumbersome and frequently contested.
That legacy continues to haunt the system, as witnessed with the ongoing dispute between NNPC Ltd and Periscope Consulting, the audit firm engaged by the Nigeria Governors’ Forum, over an alleged $42.37 billion under-remittance between 2011 and 2017, which illustrates how unresolved the past remains. Though NNPC insists all revenues were properly accounted for as claimed, Periscope maintains that significant gaps persist, forcing FAAC to mandate yet another reconciliation exercise. This recurring pattern of audits, counterclaims, and stalemates has weakened trust in the federation revenue system and eroded confidence among states that depend on oil proceeds for survival.
Crucially, the debt write-off does not mean NNPC has turned a corner financially. Statutory obligations incurred between January and October 2025 remain on the books, amounting to about $56.8 million and N1.02 trillion. Although part of the dollar component was recovered during the period under review, the accumulation of new liabilities so soon after reconciliation raises uncomfortable questions about whether old habits are being replaced with genuine fiscal discipline.
More troubling still is what NNPC’s own audited financial statements reveal about its internal financial health. Despite recording a profit after tax of N5.4 trillion on revenues of N45.1 trillion in 2024, the company’s inter-company debts ballooned to N30.3 trillion, representing a 70 per cent increase within a single year. This is not debt owed to external creditors but largely obligations between NNPC and its subsidiaries, effectively the company owing itself.
Records show that of 32 subsidiaries, only eight are debt-free, and the rest, particularly the refineries, trading arms, and gas infrastructure units, remain heavily indebted to the parent company. There was a recurring cycle where profitable units subsidise chronically underperforming ones, and accountability steadily erodes because cash that should fund maintenance, expansion, and efficiency improvements is instead trapped in internal receivables.
The refineries offer a stark illustration whereby the Port Harcourt Refining Company alone owed N4.22 trillion in 2024, more than double its 2023 figure, while Kaduna and Warri refineries followed closely, with debts of N2.39 trillion and N2.06 trillion respectively. Despite the repeated failed turnaround maintenance with many years of rehabilitation spending, none have operated sustainably at commercially viable levels. Their continued dependence on financial support from the parent company highlights the cost of postponing difficult restructuring decisions.
And, for this reason, international observers have long warned about these structural weaknesses. One of the critics, the World Bank, has repeatedly flagged NNPC as a major source of revenue leakages. It further noted that the persistent gaps between reported earnings and actual remittances to the Federation Account. Even after the removal of petrol subsidies, the bank observed that NNPC remitted only about 50 per cent of the revenue gains, using the rest to offset past arrears. Such practices, while perhaps defensible in internal cash management terms, undermine fiscal transparency and weaken Nigeria’s macroeconomic credibility.
This is why the central issue is not the debt write-off itself, but what follows it because debt forgiveness is not reform. Without firm safeguards, it risks entrenching the very behaviours that created the problem in the first place. As Prof. Omowumi Iledare has warned, the scale and pace of the inter-company debt build-up represent a governance test rather than a mere accounting anomaly. Allowing subsidiaries to operate indefinitely without settling obligations is incompatible with the idea of a commercially driven national oil company.
The fact remains that if NNPC wants to function as a true commercial holding company under the PIA, it must enforce strict settlement timelines, restructure or divest non-viable subsidiaries, while clearly separating legacy debts from new obligations. With this, it holds subsidiary leadership accountable for cash flow and profitability. Independent, real-time audits and transparent reporting must become routine features of governance, not emergency responses triggered by controversy.
There is also a broader national implication. At a time when Nigerians are being asked to accept higher taxes, reduced subsidies, and fiscal tightening, large-scale debt write-offs without visible accountability risk undermining the legitimacy of the entire revenue system. Citizens cannot be expected to bear heavier burdens while systemic inefficiencies in the country’s most strategic sector persist.
Of a truth, the cancellation of NNPC’s legacy debts could mark a turning point in Nigeria’s fiscal governance, but only if it is not treated as its conclusion but the beginning of reform.
If discipline, transparency, and commercial accountability follow, the decision may yet help reposition NNPC as a profitable, credible, and PIA-compliant institution. If not, today’s clean slate will simply defer the reckoning until the next reconciliation, the next audit dispute, and the next fiscal crisis.
Blaise, a journalist and PR professional, writes from Lagos and can be reached via: [email protected]
News3 days agoCourt Sends Faleti, Ex-Lagos Director to Jail for Stealing ₦48.9m from Access Bank
E-Financial3 days agoRemita Powers over ₦100 Trillion in Payments as Nigeria’s Digital Economy Expands
E-Financial3 days agoWhy 2026 Must Be the Year Nigeria’s Economy Works for All
E-Financial3 days agoFlutterwave Acquires Nigeria’s Mono in $25m-$40m All-Stock Deal
E-Financial3 days ago2026: SEC to Review Rules to Incentivise SME Listings
General News3 days agoNigeria Targets Satellite-to-Mobile Services in Draft Spectrum Roadmap
Telecom3 days agoSamsung Plans to Double AI Mobile Devices to 800 million Units this Year
Telecom3 days agoMENXTT NG to pre-install Bitdefender Antivirus on all laptops from 2026


















