Connect with us

E-Business

Almost Half of World’s Top Websites Risky – Report

Published

on

website-edit-2.jpg
Kindly share this post

Nearly half (46%) of the Internet’s top one million Web sites, as ranked by Alexa, are risky.

This is according to a study released yesterday by US-based cyber security firm Menlo Security, which notes this is largely due to vulnerable software running on Web servers and on underlying ad network domains.

The firm says the results are significant because risky sites have never been easier to exploit, and traditional security products fail to provide adequate protection.

Attackers have their veritable choice of half the Web to exploit, allowing them to launch phishing attacks from legitimate sites, it notes.

Menlo Security considers a site risky if the homepage or associated background sites are running vulnerable software, if the site is ‘known-bad’, or if it has had a security incident in the past 12 months.

Vulnerable software was the leading factor in classifying a site as risky, it points out. Of the one million sites, 355 804 were either running vulnerable software or accessing background domains running vulnerable software; 166 853 fell into known-bad categories; while 31 938 experienced a recent security incident.

Another key finding was that background requests sending content to Web browsers outnumber user requests at a ratio of 25:1.

The culprit sites found in the study include destinations that are widely unknown by name; however, these large ad service networks are found hidden behind the world’s most visited media sites and include sites for 24-hour news, weather sites and major metro newspapers.

“Browsing the Web is a leap into the unknown. We already knew that ad networks present risk to the public and businesses, but the extreme levels reached in 2016, affecting 46% of the most visited Web sites, mean that enterprises must address the problem,” says Kowsik Guruswamy, CTO at Menlo Security.

Greg Maudsley, senior director of product marketing, and Jason Steer, solutions architect, EMEA at Menlo Security, point out that risk is not just associated with the sites that users visit. Each site a user visits generates requests to on average 25 requests to background Web sites, such as social media and advertising.

They explain business and economy Web sites feature highly when the information is sliced all ways for risky issues (third highest for known-bad sites, highest for domains associated with recent threat history, and highest for sites with known vulnerable software), but almost all businesses would not block access to business and economy, leading many businesses into a false sense of security and more cyber incidents to deal with.

The security experts say uncategorised Web sites are the highest type of sites associated with being known-bad, followed by adult and pornography as well as business and economy. Vulnerable software was found to be 16 years old in the one million subset.

Menlo Security notes today, exploit kits are readily available to anyone, as are the instructional videos that provide step-by-step execution instructions.

The expertise requirement has all but vanished. Underscoring this point, the average age of suspected cyber attackers dropped from 24 to 17.

Compounding the issue, it says the vast majority of malware prevention products attempt to prevent attacks by distinguishing between “good” and “bad” elements, and then implement policies intended to allow “good” content and block the “bad”.

In every case, the firm explains, the detection is never perfect, and thus the policy choice involves a level of risk that the wrong decision is being made. Additionally, enterprises regularly allow access to popular Web sites for the sake of productivity. Given the risk associated with nearly half of popular sites, a Web security strategy based on categorisation is effectively useless, says Menlo Security.

It adds although traditional phishing attacks involve the creation of a new imposter, or “spoofed” site, the sheer volume of vulnerable trusted sites makes it very easy for attackers to compromise a legitimate site and send that link as part of a phishing campaign.

With this approach, the firm notes, attackers no longer need to worry that URL filtering will thwart their efforts, and they avoid anomalies in the link address, such as misspellings, special characters, or numbers that might raise suspicions.

Clicking on what is a perfectly legitimate link within such a phishing e-mail can expose a user to a drive-by malware exploit that could deliver ransomware, or mark the beginning of a larger breach.

Risk mitigation
To mitigate the risks, Maudsley and Steer recommend new threat prevention techniques, such as isolation and remote browsing.

They add Web site owners should make sure they are running up-to-date software, patch vulnerable software, and ensure only trusted resource files are loaded from third-party servers. Users should use browser extensions and plugins that stop execution of JavaScript, stop using Flash altogether, and use Adblockers to block ads on sites where possible, they note.

Gartner recommends isolation as part of its adaptive security architecture – this approach does not try to distinguish between good and bad, but assumes all active content is risky.


Kindly share this post

Nigeria CommunicationsWeek believes that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. So since 2007, we have devoted our energy to independent reportage of technology and how they affect lives.

Continue Reading
Advertisement
Comments

E-Business

Firm Identifies AI as Common Denominator in Entertainment Industry’s 2026 Security Threats

Published

on

Kindly share this post

In its Kaspersky Security Bulletin, the cybersecurity company’s researchers identified critical threats expected to affect the global entertainment industry in 2026, from ticketing and visual effects pipelines to content delivery networks, games and regulation.

Artificial intelligence is changing how people buy tickets, watch movies and play games – and it is also changing how malicious actors target those experiences.

The entertainment industry is particularly sensitive to AI because the technology does not only automate back-office workflows; it increasingly creates and imitates the core product itself – human-centered stories, performances and visual experiences.

Kaspersky researchers highlighted five critical threats emerging as AI integrates deeper into entertainment workflows and consumer experiences.

What happens when ticket markets become an arms race between algorithms and scalpers? Kaspersky predicts that AI will make dynamic pricing faster and more granular, while also giving scalpers better tools to identify profitable events, deploy bots at scale and manage resale pricing across multiple platforms.

Even when artists choose fixed face values, AI-driven resellers can recreate “dynamic” pricing on secondary markets by adjusting prices in real time based on demand signals.

How will AI-commodified visual effects affect the risk of leaks? As high-end computer-generated imagery becomes more accessible through cloud-based AI platforms, studios will connect to larger networks of small vendors and freelancers.

Kaspersky expects attackers to target this extended supply chain by compromising render farms, plug-ins or small post-production houses in order to quietly steal sequences, assets or episodes before release, bypassing more heavily protected studio environments.

Could content delivery networks become a direct target? CDNs now carry unreleased episodes, game builds and live streams for many major entertainment brands, concentrating valuable content in a small number of providers.

AI-enhanced attackers will be able to map CDN infrastructure more efficiently, locate where premium content resides and search for weak credentials or configuration errors. A single successful compromise could expose multiple titles at once or allow malicious code to be injected into legitimate streams.

How will generative tools change abuse patterns in games and fan communities? Players and power users will continue to jailbreak in-game AI companions and content editors, and to use external generative models to produce material that would normally be blocked – such as hyper-violent or sexualized scenarios – and then reimport it into games, mods, or fan videos.

There is also a risk of personal data appearing in “creative” outputs if training or fine-tuning data is not properly cleaned, for example, when lyrics, dialogue, or imagery inadvertently include real names or other identifying details.

What role will regulation and compliance play for AI in creative work? Lawmakers and industry groups are moving toward rules that require transparency about AI-generated media and clearer consent and licensing practices for training on copyrighted material.

Kaspersky expects this to drive the creation of new roles inside entertainment companies, similar to COVID-compliance managers on film sets, focused on AI governance: checking how AI tools are trained, how they are used in production and marketing, and whether they comply with contractual and legal requirements.

“As we examined different parts of the industry, it became clear that AI is the thread running through most of the emerging risks.

“By diving into this, we wanted to highlight that AI will not only help defenders detect anomalies faster, it will also help attackers model markets, probe infrastructure and generate convincing malicious content.

“Studios, platforms and rights holders need to treat AI systems, and the data behind them, as part of their core attack surface, not just as creative tools, and build security and governance around that reality,” said Anna Larkina, web content analysis expert at Kaspersky.

 


Kindly share this post
Continue Reading

E-Business

Firm Detected a Fivefold Surge in QR Code Phishing Attacks in the Second Half of 2025

Published

on

Kindly share this post

Kaspersky has reported a spike in phishing emails containing malicious QR codes. Detections for these jumped from 46,969 in August 2025 to 249,723 in November 2025 – a more than fivefold growth – as cybercriminals increasingly exploit QR codes, a trend that will likely continue in 2026.

Attackers use QR codes in emails more frequently because they provide a simple and cost-effective way to conceal malicious URLs, evading detection by many protective solutions.

These QR codes are often embedded directly in email bodies or, even more commonly, within PDF attachments – an evolution that both masks phishing links and encourages users to scan them on mobile phones, which may have weaker security than work PCs.

Malicious QR codes commonly appear in mass phishing campaigns as well as targeted ones. Links embedded within them may lead to:

  • Phishing forms impersonating login pages for services like Microsoft accounts or internal corporate portals, designed to steal usernames, passwords, and other credentials.
  • Fake HR notifications urging employees to review or sign documents, such as vacation schedules, or even view lists of terminated staff, ultimately directing to credential-stealing sites.
  • Fraudulent invoices or purchase confirmations in PDF attachments, often combined with vishing (voice phishing) tactics that prompt victims to call provided phone numbers to “cancel” or clarify the transaction, enabling further social engineering attacks.

These tactics exploit trust in routine business communications, leading to credential theft, account takeovers, data breaches, and financial fraud.

“Malicious QR codes have evolved into one of the most effective phishing tools, particularly when hidden in PDF attachments or disguised as legitimate business communications like HR updates.

“The explosive growth in November 2025 highlights how attackers are capitalising on this low-cost evasion technique to target employees on mobile devices, where protection is often minimal.

“Without advanced image analysis at the email gateway and safe scanning practices, organisations are left vulnerable to credential compromise and downstream breaches,” comments Roman Dedenok, Anti-Spam Expert at Kaspersky.

To defend against this escalating threat, Kaspersky recommends educating employees on cybersecurity and deploying a mail server security solution such as Kaspersky Security for Mail Server that provides trusted and secure corporate email exchange, countering spam, email-borne infections, all forms of phishing, business email compromise (BEC), QR code attacks, and other threats.


Kindly share this post
Continue Reading

E-Business

JustMarkets Unveils Top 5 Trading Assets for 2026 Profits

Published

on

Kindly share this post

As the world markets continue into a new cycle that sees them plunging into much trouble and uncertainty, the year 2026 beckons to be one that is ridden with high uncertainty and volatility in terms of geopolitical and macroeconomic trends. Although the year may pose various threats to traders, it also comes along with unparalleled opportunities that may be leveraged to achieve trading success through various trading assets set to display notable volatility trends in the year 2026.

JustMarkets Unveils Top 5 Trading Assets for 2026 Profits

JustMarkets

From long-term fundamentals to trading dynamics, these five key assets on JustMarkets are set to continue to be at the forefront in trading in 2026.

1. Gold (XAU/USD): The Ultimate Macro-Driven Asset

The gold price in 2025 reached $4,500 per troy ounce, and it continues to be one of the most traded assets world-wide. Gold is extremely sensitive to changes in the levels of inflation, interest rate forecasts, geopolitical events, and currency exchange rate movements. The recent years have shown the ability of the gold market to provide an extremely strong bullish momentum, as well as intraday momentum.

The relevance of the market of gold in the year 2026 specifically stems from the fact that the environment surrounding the economy of the world is facing challenges associated with growth, debt, and the policies of monetary easing. Despite the falling inflation rate in the economy, the real interest rates are also expected to be pressured downward, which has traditionally translated to favorable market conditions for the price of gold. The factor of geopolitics uncertainty and tensions between specific countries also adds to the significance of the market of gold.

For traders, the market offers favorable conditions because of its high volatility regime with adequate liquidity.

2. Silver (XAG/USD): Volatility with a Dual Personality

Silver often overshadows gold, but its performance in 2025 significantly outperformed its main competitor. The precious metal briefly reached $85, making it one of the best-performing assets in 2025. While silver, like gold, is sensitive to monetary policy and market sentiment, it also enjoys strong industrial demand related to energy transition technologies, electronics, and manufacturing.

This dual nature makes silver one of the most volatile and fastest-growing precious metals and trading instruments overall. In 2026, as global growth expectations fluctuate and industrial cycles remain uneven, silver will experience sharp directional movements and prolonged periods of volatility, but will fundamentally maintain a growth trend similar to gold.

For traders seeking high volatility, silver offers even greater percentage swings than gold, making it a powerful tool for well-managed strategies, both scalping and holding positions for multiple days.

3. Oil (WTI & Brent): Trading Supply, Politics, and Policy

Oil is still among the market-sensitive commodities. The change in OPEC+ production levels, global events affecting major oil-producing nations, as well as changes in global demand can cause prices to surge within a matter of hours.

Turning the focus on the outlook for the year 2026, it seems likely that the oil market will face well-supplied conditions. However, this will not mean extremely small degrees of volatility. Events surrounding Venezuela represent yet another key source of uncertainty. Changes within US policies regarding Venezuela, the export of oil, and the political leadership of the country could represent important influences on the levels of supply, especially when the focus shifts towards the heavier grades. Yet, the possibility of a substantial recovery looks very unlikely.

Even in highly saturated markets, surprise disruptions, production policy changes, or geopolitical tensions, particularly in the Middle East, Eastern Europe, and Latin America, can cause sharp price moves. Conversely, macroeconomic growth slowdowns or money market cycles may exert pressures on demands, thereby leading to highly two-sided markets.

4. US Stock Indices (Dow 30, S&P 500, Nasdaq): Liquidity and Trend Potential

US indices continue to be key trading assets in global trading activity. The Dow Jones, S&P 500, and Nasdaq reflect US economic performance, as well as global risk appetite, capital flows, and technological leadership, primarily driven by the AI boom.

In 2026, stock markets are likely to face divergent forces. On the one hand, monetary easing is supporting valuations, while slowing economic growth, declining interest in AI, and political uncertainty are increasing volatility and the risk of a deeper sell-off. This combination often leads to strong moves, deep corrections, and renewed all-time highs.

Indices offer unrivaled liquidity, clear technical behavior, and the ability to express macroeconomic views without the risk associated with individual stocks, making them important tools for both short-term and position traders.

5. EUR/USD: The World’s Most Traded Currency Pair

EUR/USD remains the benchmark for forex trading. Its deep liquidity, tight spreads, and technical clarity make it a favorite among professional traders. More importantly, the euro reflects the balance between the world’s two most influential central banks: the Federal Reserve and the European Central Bank.

As interest rate differentials narrow and fiscal dynamics shift on both sides of the Atlantic, there’s every reason to believe EUR/USD will experience prolonged and powerful trending phases, punctuated by strong reactions to economic data and central bank signals.

In 2026, shifts in growth expectations, inflation trajectories, and political developments in both regions will keep this pair highly active, making EUR/USD a preferred option for traders who value stability, transparency, and adaptability across all trading styles.

Perfect Assets to Trade in 2026

These five markets unite their relevance on a global stage, and the responsiveness of these markets to macroeconomic and geopolitical events. Markets traded in gold, silver, oil, US indices, and the currency pair EUR/USD include the combination of markets most traders seek: deep liquidity, clear structure, and meaningful volatility.

On the JustMarkets trading platform, these instruments excel because of the optimal trading conditions offered, ensuring effective active trading. Tight spreads, fast execution of orders, as well as high leverage of up to 3000, enable traders to react swiftly to key market drivers, such as central bank statements or inflation figures, as well as geopolitical events.


Kindly share this post
Continue Reading

Trending