E-Business
Cloudflare Launches New Security Key-Based Replacement for CAPTCHA

Cloudflare, which you may know as a provider of DNS services or the company telling you why the website you clicked on won’t load, wants to replace the “madness” of CAPTCHAs across the web with an entirely new system.

CAPTCHAs are those tests you have to take, often when trying to log into a service, that ask you to click images of things like busses or crosswalks or bicycles to prove that you’re a human.
(CAPTCHA, if you didn’t know, stands for “Completely Automated Public Turing test to tell Computers and Humans Apart.”)
The problem is, they add a lot of friction to using the web and can sometimes be difficult to solve — I’m sure I’m not the only person who has frustratingly failed a CAPTCHA because I didn’t see that corner of a crosswalk in one image.
In a blog, Cloudflare says it aims to “get rid of CAPTCHAs completely” by replacing them with a new way to prove you are a human by touching or looking at a device using a system it calls “Cryptographic Attestation of Personhood.” Right now, it only supports a limited number of USB security keys like YubiKeys, but you can test Cloudflare’s system for yourself right now on the company’s website.
I tried it out, and it worked great. All I had to do was click the prominent “I am human (beta)” button on the site, then follow a few prompts to select my security key, then tap it, and then allow the site to access the make and model of the key. When I did, the system waved me through (though it just took me back to the blog).
The whole process took all of a few seconds, and I have to admit that it was really nice not to puzzle over grainy images of busses and bus-looking objects. And in addition to the speed of it all, this new method could have a major accessibility benefit, as those with visual disabilities may not be able to complete CAPTCHAs in their current form.
Here is the company’s “elevator pitch” of what’s going on behind the scenes to establish that you’re a human via its new method: “The short version is that your device has an embedded secure module containing a unique secret sealed by your manufacturer. The security module is capable of proving it owns such a secret without revealing it. Cloudflare asks you for proof and checks that your manufacturer is legitimate.”
You can read a much more extensive explanation on the company’s blog.
While it’s all an intriguing idea, it may not be the end to CAPTCHAs as we know it just yet. For one thing, you probably won’t see the prompt in many places, as Cloudflare says this is only an experiment right now, available “on a limited basis in English-speaking regions.” And in its current state, it only works with a limited set of hardware: YubiKeys, HyperFIDO keys, and Thetis FIDO U2F keys.
Cloudflare promises it will “look into adding other authenticators as soon as possible.” That could possibly expand to your phone: Cloudflare suggests the possibility of tapping a phone to their computer to pass a wireless signature using NFC. Google can now treat both iPhones and Android phones as physical security keys; If Google and Apple got on board with Cloudflare’s method, it could significantly reduce the barrier to entry to using it, since smartphones are much more common than security keys.
However, Cloudflare’s system may actually be a worse solution, according to one critic. As Ackermann Yuriy (CEO of the consulting firm Webauthn Works) points out, “attestation does not prove anything but the device model,” meaning that it doesn’t actually prove if someone using a device for authentication is, in fact, a human.
Cloudflare essentially admits this itself in its own blog, saying that a drinking bird (those bird toys that dip their beaks into water repeatedly) could press a touch sensor on a security key, thereby passing the authentication test. If the point of CAPTCHAs is to prevent bot farms from overrunning websites, we may need to consider whether bot farms equipped with with jury-rigged security key devices (or worse) will take advantage.
Cloudflare isn’t always positively associated with CAPTCHAs; in a recent example, the company moved from Google’s reCAPTCHA to a service from hCaptcha in April 2020, and some people weren’t fans:
CAPTCHAs also assume that website owners want to allow relatively anonymous traffic, but anonymous identity may be irrelevant if an website has your actual identity through login information you’ve provided. And with the recent push against ad targeting, driven in large part by Apple’s huge new privacy feature in iOS 14.5 that asks users if they want to let each app track them around the web, it’s possible that website providers will move more toward logins anyway.
Though it certainly sounds like a hassle to have to potentially deal with even more logins (which is much easier to do with a great password manager!), that shift could, counterintuitively, have the potential benefit of pushing us toward a passwordless future even sooner. If more services are pushing for direct logins, that could lead to more of them supporting security keys instead of a password. And more sites supporting security keys could put pressure on others to support them as well, like the trend we see toward two-factor authentication with phones.
While we’re not at that passwordless future just yet, Cloudflare’s potential replacement for the CAPTCHA could be a first step in that direction.
E-Business
Qualified Cybersecurity Staff Shortage Among Key Obstacles in Curbing Supply Chain Risks

A new global Kaspersky study has identified the lack of qualified IT security workers and the need for global organisations to prioritise various security tasks to mitigate the risk of supply chain and trusted relationship attacks. Both factors are cited by nearly half (42%) of the respondents.

Kaspersky’s recent study* on supply chain and trusted relationship risks showed that supply chain attacks have emerged as a top threat for businesses, with every third organisation hit by such an attack over the past year.
The severity and frequency of supply chain attacks necessitate uncovering the key reasons preventing them from addressing the risks successfully.
According to the survey, one of the key barriers to reducing supply chain and trusted relationship risks is the lack of a qualified workforce. This shortage leaves organisations without the capacity to consistently access and monitor possible third-party vulnerabilities across their ecosystems.
Among other primary obstacles, respondents noted the need to juggle multiple cybersecurity priorities. This reflects the fact that security teams are stretched across too many tasks at once, which might leave supply chain threats unaddressed.
Beyond resource constraints, respondents also point to structural issues: 39% say their contracts lack clear IT security obligations for contractors. Further 32% note that non‑IT security staff often do not fully understand these risks.
Globally, according to the survey, an overwhelming 85% of businesses admit their organisations need to upgrade protection against supply chain and trusted relationship risks, with only 15% of enterprises considering their current security measures effective.
At the same time, the results of the survey showed that current mitigation practices for third-party risks remain fragmented, with no way of protection getting more than 40% of current adopters. Even the most common protective measure, two-factor authentication, is used by only 38% of respondents.
In addition, only 35% of organisations conduct regular reviews of contractors’ cybersecurity postures. As a result, nearly two thirds of businesses lack ongoing visibility into the security of their partners, leaving them exposed to evolving vulnerabilities across their ecosystems.
It’s noteworthy that companies that have already experienced supply chain and trusted relationship attacks tend to adopt stronger security habits. Those hit by supply chain incidents are more likely to request penetration test results (56%), while victims of trusted relationship breaches prioritise checks on compliance with industry standards (56%) and their contractors’ own supply chain policies (53%).
“When security teams are overstretched, understaffed and have to prioritise urgent tasks over long term resilience priorities, organisations are left exposed to threats that can move silently through their provider ecosystem.
“To break this cycle, the industry needs to adopt more unified and consistent mitigation strategies, from standardised contractor assessments to stronger cross‑team awareness. Supply chain security should become a shared, enforceable responsibility across the entire business network,” comments Sergey Soldatov, Head of Security Operations Center at Kaspersky.
Only by implementing preventive measures across the organisation and approaching partnerships with suppliers and contractors strategically can companies reduce supply chain risks and ensure the resilience of their business.
E-Business
Study Reveals 83% of Employees Stay Connected to Work During Time Off, Fuelling Digital Anxiety

A new Kaspersky survey undertaken in the Middle East, Turkiye and Africa (META) region reveals that digital anxiety is becoming a defining feature of modern work culture, as employees don’t disconnect even during their free time and vacations.

According to the findings, 83% of respondents keep an eye on work tasks outside working hours. An overwhelming 85% reply to all work-related messages in instant messaging apps, while the same share (85%) check work emails during their time off – and 81% admit they are responding to work emails while on vacation or in their personal time.
The pressure to remain constantly available is contributing to heightened stress levels in the workplace. Other sources of stress include work issues, for example, 43% experience anxiety after accidentally sending a random message to a work chat.
Interestingly, not all digital mishaps are perceived equally: 40% report that they take it calmly when they send an unfinished email, proving that some mistakes are considered less damaging than others.
Blurred boundaries between professional and personal life, combined with instant communication tools, are intensifying feelings of constant monitoring and fear of making digital errors.
More than a third (36%) of respondents say they feel extremely uncomfortable or even scared if their boss notices them scrolling through social media at work instead of working. The “always-on” culture may undermine employee well-being, increase burnout risks, and reduce overall productivity in the long term.
“Digital anxiety doesn’t just affect employee well-being – it can also increase cybersecurity risks for organisations. When people feel constant pressure to respond immediately to messages and emails, they are more likely to act impulsively, without carefully verifying links, attachments, or sender identities.
This urgency can make employees more vulnerable to phishing, and other scams using social engineering techniques,” comments Brandon Muller, Technical Expert at Kaspersky.
Kaspersky recommends employees to follow the below tips to avoid digital anxiety and associated cyber risks:
- Slow down before clicking or replying. Digital anxiety can trigger automatic reactions. A short pause to check sender details, URLs, or attachments can prevent security breaches.
- Treat urgency as a red flag. Cybercriminals often exploit pressure and fear. Always verify unexpected or urgent requests before responding.
- Avoid handling sensitive information on unsecured networks. Public Wi-Fi, often used when working outside regular hours, increases exposure to cyber threats. Mobile network and VPN should be applied in such cases.
- Use technologies that will help reduce risks. For example, Kaspersky Premium offers AI-powered anti-phishing features designed to help warn of potential threats.
Businesses can reduce cybersecurity risks related to employees’ digital anxiety by providing regular cybersecurity training that helps staff recognise threats and respond correctly even under stress.
At the same time, organisations should use robust cybersecurity solutions to minimise the impact of human error. Kaspersky Next’s adaptable and robust cloud-native protection, underpinned by an unequalled cybersecurity track record, is one of such products.
Protection solutions for mail servers, such as Kaspersky Security for Mail Server, with anti-phishing capabilities, help to additionally decrease the chance of infection through a phishing email.
E-Business
FG Approves Electric Buses for Civil Servants, Pushes Local Auto Growth

Federal Government of Nigeria has approved the acquisition of electric buses for civil servants as part of efforts to promote cleaner transportation and boost local vehicle manufacturing.

The development was disclosed in Abuja by Joseph Osanipin, Director-General of the National Automotive Design and Development Council (NADDC). Osanipin said the buses would be sourced from local assemblers to strengthen domestic production and stimulate growth in Nigeria’s automotive sector.
He stated: “The initiative is aimed at encouraging the transition to cleaner mobility while creating opportunities for local manufacturers.” According to him, the government has also procured charging infrastructure that will be deployed across parts of the country to support the adoption of electric vehicles.
As part of broader efforts to develop the sector, the council is establishing the Nnewi Automotive Development Park in Anambra State. Osanipin explained: “We are developing the Nnewi Automotive Development Park where we will provide the necessary infrastructure so that users of the park can share facilities.”
He added that the shared infrastructure model would enable investors and manufacturers to operate without bearing the full cost of setting up independent facilities. The council is also seeking additional investment to accelerate the development of the park and attract more industry participants.
Osanipin urged Nigerians to support locally assembled vehicles, noting that increased patronage would help create jobs and drive economic growth. He said the council is providing training to manufacturers and stakeholders to enhance local production of vehicle components such as batteries and tyres.
“The move will reduce import dependence, create employment opportunities, and contribute to the country’s Gross Domestic Product,” he said. The NADDC is also working with the Bank of Industry Nigeria to facilitate the disbursement of the National Automotive Development Fund to qualified stakeholders.
E-Financial1 day agoCBN Wins Central Bank of the Year Title @13th Global Awards
General News1 day agoTech Firms Sack over 45,000 so Far in 2026
Telecom1 day agoFG Taps Quest Merchant Bank for Advisory on 90,000km Fibre Project
General News1 day agoRockefeller, Global Energy Alliance Cross $100 million Mark in Africa Electrification Push
General News1 day agoJury Finds Elon Musk Liable for Misleading Twitter Investors
News1 day agoMorney Launches in Nigeria as E-invoicing Drives Finance Digitisation
News1 day agoDr Krishnan Ranganath to Lead UniCloud Africa in Continental Digital Infrastructure Push
General News1 day agoSEC, NYSC Partner to Combat Ponzi Schemes


















