E-Business
Citizen Lab Accuses Candiru, Israeli Group of Aiding the Hacking of Microsoft Windows, Google Chrome

Citizen Lab has accused Candiru, Israeli group of providing tools for hackers of Microsoft Windows, Google Chrome.

The revelation sheds light on the growing business of finding and selling tools to hack widely used software.
The hacking tool vendor, named Candiru, created and sold a software exploit that can penetrate Windows, one of many intelligence products sold by a secretive industry that finds flaws in common software platforms for their clients, said a report by Citizen Lab.
Technical analysis by security researchers details how Candiru’s hacking tool spread around the globe to numerous unnamed customers, where it was then used to target various civil society organizations.
Among those targeted were a Saudi dissident group and a left-leaning Indonesian news outlet, the reports by Citizen Lab and Microsoft show.
Attempts to reach Candiru for comment were unsuccessful, Reuters reported.
Evidence of the exploit recovered by Microsoft Corp (MSFT.O) suggested it was deployed against users in several countries, including Iran, Lebanon, Spain and the United Kingdom, according to the Citizen Lab report.
“Candiru’s growing presence, and the use of its surveillance technology against global civil society, is a potent reminder that the mercenary spyware industry contains many players and is prone to widespread abuse,” Citizen Lab said in its report.
Microsoft fixed the discovered flaws on Tuesday through a software update. Microsoft did not directly attribute the exploits to Candiru, instead referring to it as an “Israel-based private sector offensive actor” under the codename Sourgum.
“Sourgum generally sells cyberweapons that enable its customers, often government agencies around the world, to hack into their targets’ computers, phones, network infrastructure, and internet-connected devices,” Microsoft wrote in a blog post. “These agencies then choose who to target and run the actual operations themselves.”
Candiru’s tools also exploited weaknesses in other common software products, like Google’s Chrome browser.
On Wednesday, Google released a blog post where it disclosed two Chrome software flaws that Citizen Lab found connected to Candiru.
Google also did not refer to Candiru by name, but described it as a “commercial surveillance company.” Google patched the two vulnerabilities earlier this year.
Cyber arms dealers like Candiru often chain multiple software vulnerabilities together to create effective exploits that can reliably break into computers remotely without a target’s knowledge, computer security experts say.
Those types of covert systems cost millions of dollars and are often sold on a subscription basis, making it necessary for customers to repeatedly pay a provider for continued access, people familiar with the cyber arms industry told Reuters.
“No longer do groups need to have the technical expertise, now they just need resources,” Google wrote in its blog post.
E-Business
Offset Communications Slams N50m Suit against Qore Technologies for Alleged Copyright Infringement

Offset Communications Advisory Ltd has dragged Qore Technologies Ltd before a Federal High Court in Lagos, demanding the sum of N50 million as damages for the alleged infringement of its copyright.

Pic credit….https://copyrightalliance.org
Offset, in the suit marked: FHC/L/CS/1994/2025, is claiming that Qore used content from a proposal it submitted in December 2022, without formal engagement, attribution, or a licensing agreement.
“The Defendant’s execution of the content of the proposal submitted to it by the Plaintiff without any formal engagement, attribution or a licensing arrangement… amounts to an infringement of the Plaintiff’s copyright,” Offset stated in its writ of summon.
The suit filed on September 29, 2025, by Jimoh Bamigbola and Omobolaji Idris, on behalf of the plaintiff has Qore as sole defendant.
Plaintiff, a Lagos-based communications firm, in its statement of claim said it a had previously worked with Qore on Public Relations (PR) projects and was later asked to prepare a communications strategy for the company, adding that the said proposal contained ideas on employee engagement, branding, and stakeholder management.
Offset however, alleged that Qore implemented elements of the proposal, including internal communication initiatives and branding concepts, without payment or agreement.
“The Defendant executed and integrated the propositions into its Public Relations and Communication Strategy without any formal engagement… with the Plaintiff,” the statement of claim read.
The plaintiff said it discovered the alleged infringement in April 2025 and subsequently notified the defendant, but efforts to resolve the dispute failed.
It is seeking, among other reliefs, a declaration that the defendant’s actions amount to copyright infringement, N50 million in general damages, N5 million in litigation costs, 29 percent post-judgment interest, and “an order of perpetual injunction, restraining the Defendant… from further infringing on the Plaintiff’s copyright.”
Qore Technologies, however, denied the allegations in its statement of defence, arguing that the plaintiff was only engaged for limited Public Relations support services on a project basis and was paid for those services.
“The Plaintiff merely provided routine and secondary Public Relations support services… for which the Plaintiff was remunerated,” the defendant stated.
Qore further argued that the ideas referenced by the plaintiff are not protected under copyright law.
“The alleged ‘ideas’… consist of generic corporate communication practices widely used by companies… and cannot constitute original copyrightable works under Nigerian law,” it said.
The company also maintained that no binding agreement existed regarding the proposal and that its branding and communication strategies were developed internally and by its consultants.
In addition, Qore challenged the competence of the suit, stating that “the Statement of Claim discloses no reasonable cause of action” and that the court lacks jurisdiction to entertain the matter.
The defendant also filed a counterclaim, seeking N6.35 million as reimbursement for legal fees incurred in defending the suit, as well as N2 million in costs.
At the hearing on March 23, 2026, counsel to the parties identified their processes, and the court adjourned the matter to June 22, 2026, for further proceedings.
The case is expected to test the boundaries of copyright protection in Nigeria’s Communications and Public Relations industry, particularly regarding the ownership of proposals and business ideas.
E-Business
NDPC Investigates Remita, Others over Alleged Data Breaches

Nigeria Data Protection Commission (NDPC) said it is carrying out an investigation into alleged data breaches involving Remita Payment Services Ltd., Sterling Bank and other entities.

A statement on Sunday issued by Babatunde Bamigboye, head, Legal, Enforcement & Regulations, NDPC, said in line with the Commission’s procedure, Notice of Investigation was duly served on the 1st of April, 2026.
Bamigboye said relevant parties and individuals have been providing information for the purpose of addressing the incident.
“The aim of the investigation is to ensure that data subjects are protected with appropriate technical and organisational measures.
“The investigation by NDPC covers, among others, the types of personal data involved, the nature and scope of the alleged breach, the risk to data subjects and the mitigation measures carried out where a breach is confirmed,” he explained.
Vincent Olatunji, Commission’s National Commissioner/CEO, has directed that organisations that employ digital payment systems without putting in place appropriate technical and organisational measures as mandated under the Nigeria Data Protection Act, 2023 (NDP Act), will also be examined as part of a wider effort to ensure the integrity of the ecosystem.
E-Business
Nigeria Mulls National Cybersecurity Council

Federal Government has unveiled plans to establish a National Cybersecurity Coordination Council, signaling a shift toward a more unified, intelligence-driven approach to defending the country’s rapidly expanding digital economy.

Conceived as a non-statutory, multi-stakeholder body, the proposed Council will enhance coordination, enable trusted information sharing, and guide government strategy on cybersecurity, risk management, and national response amid increasingly complex cyber threats.
The initiative, championed by Bosun Tijani, minister of communications, innovation and digital economy, is designed to bring together government institutions, private sector players and technical experts into a single collaborative platform to strengthen the country’s cyber resilience.
Tijani noted that this initiative comes in response to a wave of recent cyber incidents that have disrupted operations across key private institutions and public sector.
In recent times, Nigeria’s financial system has faced mounting cyber pressure, reflecting global trends as cybercrime is projected to cost the world over $10.5 trillion annually, according to Cybersecurity Ventures.
Analysts say these attacks are increasingly coordinated and sophisticated, prompting the government to recognise that fragmented, institution-specific approaches can no longer manage systemic cyber risks effectively.
Under the new framework, the government aims to promote a “collective defence” model, an approach widely adopted in advanced digital economies where threat intelligence is shared in real time across institutions.
The Council is expected to include chief information security officers, cybersecurity associations, the Nigerian Computer Society, global technology providers, researchers, law enforcement agencies and civil society groups, ensuring a broad-based and technically grounded response architecture.
Key priorities will include developing national threat intelligence-sharing systems, harmonised cyber defence protocols, and coordinated incident response, while strengthening capacity to close Nigeria’s cybersecurity talent gap.
News2 days agoNITDA Strengthens Collaboration with NIPSS to Drive Digital Innovation, Orange Economy Growth
E-Financial2 days agoCBN, Banks, Fintechs Launch PSPC to Boost Nigeria’s Payment System
General News2 days agoFG, Others Say Nigeria Wastes 38m Tonnes of Food Annually
E-Financial2 days agoCycleFlow, IFC Launch Supply Chain Finance Platform in Nigeria
E-Financial2 days agoAnchor Gets Nigerian, Canadian Licences as Transactions Crosses $2.5Bn
E-Financial2 days agoEcobank Assures of Seamless Easter Banking Services
News2 days agoNRS Takes Over Mineral Royalties Collection Under New Tax Laws
E-Financial1 day agoN4.65 Trillion in the Vault, but is the Real Economy Locked Out?



















