E-Business
Report Says 65 Per Cent of Businesses Faced Cyberattacks in Last 12 Months

Most cybersecurity landscape data is focused on outsider attacks; however, recent findings reveal that insider threats are becoming more common.

Attacks originating from within the company are much more elusive since standard security practices do not work.
According to data analyzed by Atlas VPN, 65% of organizations suffered from one or more insider attacks in the last 12 months.
Insider threats come from employees or other internal users, such as contractors, that have access to the company’s internal databases.
There are two types of malicious insiders — those with harmful intent and those who are simply negligent.
An online survey of 457 cybersecurity professionals, conducted in June of 2020 by Darktrace, found that 41% of businesses experienced between 1 and 5 insider attacks in the last 12 months.
Moreover, 12% of respondents stated that they saw between 6-10 insider attacks in the last year — another 5% of surveyed professionals encountered from 11 to 20 attacks.
Finally, over 7% of company representatives stated that they experienced more than 20 attacks in the last 12 months.
Compared to last year, businesses dealt with insider attacks more often.
As many as 72% of cybersecurity professionals believe that employee security violations became more frequent in 2020.
Insider attacks are costly
Incidents caused by insider threats are becoming more common, so let’s look at the monetary damages caused by these events.
As a side-note, if the incident does go public, companies’ public image gets hurt, which, in the long-run, can cause even more losses than the immediate incident remediation costs.
Nearly half (49%) of surveyed leaders stated that the remediations after an insider attack cost less than $100 thousand.
Another 30% of respondents expressed that monetary damages caused by a single incident are anywhere between $100 thousand and $500 thousand.
A smaller part of the surveyed experts – 12%, stated that the average cost of remediation after an attack is somewhere between $500 thousand to $1 million.
Finally, 5% of companies reveal that the cost of an attack is around $1 million to $2 million, and 2% state that remediation costs exceed $2 million per successful attack.
One of the most recent and well-known hacking incidents caused by a malicious insider is the Twitter bitcoin scam that happened on July 15th, 2020.
Here, cybercriminals took over multiple high-profile Twitter accounts to promote a Bitcoin scam.
After the incident, Twitter reported that an employee cooperated with cybercriminals to carry out the hack.
This scam appeared in front of 37% of Twitter’s userbase. Luckily, damages only slightly exceeded $110 thousand in Bitcoin, as Twitter deleted those tweets quickly.
Protection from insider threats
Unfortunately, most security practices deployed to protect the company from external attacks fall completely flat when it comes to defending from insider threats.
Outside hackers have to find ways to break through firewalls and other security measures to get into the company’s databases.
On the other hand, many internal users already have access to those databases, so the same safety steps are not applicable.
Here are the steps to reduce security risks from insider threats:
Make sure that employees only have access to data and tools they need to do their jobs. The fewer people have access to a database, the less is the risk that either malicious or negligent employees can expose the data.
Employee training. While this might not help against disgruntled employees, it is the best tool for the company to make sure negligent insiders are educated and security risks are minimized.
E-Business
Nigerian Terra Industries Secures $11.8m for Expansion

Terra Industries, a Nigerian defence technology startup, has raised $11.75 million to expand its development of defensive systems that protect critical facilities across Africa.

The fundraising round was led by Silicon Valley venture firm 8VC, which was founded by Palantir co-founder Joe Lonsdale.
Other investors in the round include Valour Equity Partners, Lux Capital, SV Angel, and Nova Global, as well as African-focused funds Tofino Capital, Kaleo Ventures, and DFS Lab.
Terra Industries, founded in Abuja by Nathan Nwachuku and Maxwell Maduka, provides multi-domain security solutions for both air and land. Its solutions are intended to detect and respond to threats including terrorism, sabotage, and armed attacks on infrastructure.
The company’s product portfolio includes surveillance drones, ground-based robotic systems, and fixed monitoring towers deployed around sensitive locations.
Co-founder and CEO Nathan Nwachuku said the company has now fully embraced its identity as a defence-focused startup, citing the growing urgency of security challenges across Africa.
He said safeguarding critical infrastructure from terrorist threats has become unavoidable.
Nwachuku argues that protecting Africa’s infrastructure requires a different approach, one that combines local manufacturing, end-to-end system control, and software capable of independently identifying and responding to threats over large areas.
The company aims to position itself as a defence prime, similar to the role played by firms such as Anduril Industries and Palantir in the United States.
Nwachuku also disclosed that the company had earlier raised $800,000 in pre-seed funding.
With the new funding, Terra plans to increase manufacturing capacity within Africa, establish additional defence production facilities, and expand its artificial intelligence and software teams.
While software offices are planned for San Francisco and London, the company said manufacturing operations will remain on the continent.
E-Business
Kaspersky Warns Telecom Threats from 2025 will Carry into 2026 as New Technology Adds New Risk

Kaspersky Security Bulletin reviews what shaped telecom cybersecurity in 2025 and what is likely to persist in 2026. Advanced Persistent Threat (APT) activity, supply-chain compromise, DDoS disruption and SIM-enabled fraud continued to pressure operators in 2025, while newer technology deployments introduce additional operational risk.

In 2025, telecom operators faced four broad threat categories. Targeted intrusions (APTs) continued to focus on gaining stealthy access to operator environments for long-term espionage and leverage through privileged network positioning.
Supply chain vulnerabilities remained an entry point: telecom ecosystems rely on many vendors, contractors and tightly integrated platforms, so weaknesses in widely used software and services can provide a path into operator networks. Finally, DDoS remained a practical availability and capacity problem.
Kaspersky Security Network showed that last year, between November 2024 and October 2025, 12,79% of users in the telecommunications sector encountered web threats and 20,76% faced on-device threats. 9,86% of telecom organisations worldwide experienced ransomware.
At the same time, the telecommunications sector is moving from rapid technological development to broad implementation — and the report argues that this shift creates new opportunities and new operational risks for 2026.
Kaspersky highlights three areas where technology transitions could introduce disruption if rolled out unevenly or without strong controls: AI-assisted network management, where automation can amplify configuration errors or act on misleading data; post-quantum cryptography transitions, where rushed deployment of hybrid and post-quantum approaches could cause interoperability and performance issues across IT, management and interconnect environments; and 5G-to-satellite integration (NTN), where expanding service footprints and partner dependencies introduce new integration points and potential failure modes.
“The threats that dominated 2025 — APT campaigns, supply chain attacks, DDoS floods — aren’t going away. But now they intersect with operational risks from AI automation, quantum-ready cryptography, and satellite integration.
Telecom operators need visibility across both dimensions: maintaining strong defences against known threats while building security into these new technologies from day one. The key is continuous threat intelligence that spans from endpoint to edge to orbit,” said Leonid Bezvershenko, senior security researcher at Kaspersky Global Research & Analysis Team.
E-Business
Study Reveals 88.5% of Phishing Attacks Focus on Stealing Account Credentials

Kaspersky analysed phishing and scam campaigns observed from January through September 2025 and found that 88.5% of attacks globally sought credentials for various online accounts.

Another 9.5% targeted personal data such as names, addresses, and dates of birth, while 2% focused on bank card details.
According to data from Kaspersky, over 38 million phishing links were clicked in Africa in the previous year (from November 2024 to October 2025) – all of which were detected and blocked by Kaspersky solutions.
Not everyone uses protective solutions on their devices however, and phishing remains one of the most prevalent cyber threats, with attackers luring users to fake websites where they unwittingly surrender their login credentials, personal information, or bank card details.
Kaspersky research shows that most phishing pages transmit stolen information via email, Telegram bots, or attacker-controlled panels, before it enters underground resale channels.
Data stolen through phishing is rarely used only once: credentials from multiple campaigns are consolidated into data dumps and sold on dark web markets, in some cases for as little as $50. Buyers sort and verify the data to check whether accounts remain active and reusable across different services.
According to Kaspersky Digital Footprint Intelligence, average 2025 prices ranged from $0.90 for global Internet portals to $105 for crypto platforms and $350 for online banking access. Personal documents such as passports or ID cards sold for about $15 on average, with pricing influenced by account age, balance, linked payment methods, and security settings.
As datasets are enriched and combined, attackers can build detailed digital profiles that may later support targeted attacks on executives, finance staff, IT-administrators or individuals with valuable assets or personal documents.
“Our analysis shows that credentials account for nearly 90% of phishing attempts. Once collected, logins, passwords, phone numbers, and personal details are aggregated, checked, and resold, sometimes years after the initial theft.
Combined with new information, even old credentials can enable account takeovers and targeted attacks against both individuals and organisations.
By leveraging open-source intelligence and old breach data, attackers can craft highly personalised scams, turning one-time victims into long-term targets for identity theft, blackmail, or financial fraud,” said Olga Altukhova, senior web content analyst at Kaspersky.
News3 days agoSERAP Sues INEC Over Alleged ₦55.9Bn Election Funds Diversion
General News3 days agoMinistry of Finance Leads FG-Backed Deal to Deliver Quality Homes and Boost Agriculture in Niger State
E-Financial3 days agoNDIC Declares Second Liquidation Dividend for Heritage Bank Depositors
Telecom3 days agoFG Plans to Invest $460m World Bank Loan in Fibre Infrastructure
News3 days agoAI Founders and Developers to Converge in Lagos for AI in Action 2026 conference
News3 days agoFG Inaugurates N40Bn CCTV Control Centre for Third Mainland Bridge
E-Financial2 days agoWema Bank Upgrades ALAT Banking App
Telecom2 days agoX Suspends Twitter Account for Rules Violation



















