Connect with us

E-Business

Cybercriminals Wipe Out Logs in Most Attacks –  Sophos

Published

on

Kindly share this post

Sophos, a global leader in innovating and delivering cybersecurity as a service, has released its Active Adversary Report for Security Practitioners, which found that telemetry logs were missing in nearly 42 per cent of the attack cases studied.

Cybercriminals Wipe Out Logs in Most Attacks -  Sophos

In 82 per cent of these cases, cybercriminals disabled or wiped out the telemetry to hide their tracks. The report covers Incident Response (IR) cases that Sophos analysed from January 2022 through the first half of 2023.

Gaps in telemetry decrease much-needed visibility into organisations’ networks and systems, especially since attacker dwell time (the time from initial access to detection) continues to decline, shortening the time defenders have to effectively respond to an incident.

“Time is critical when responding to an active threat; the time between spotting the initial access event and full threat mitigation should be as short as possible. The farther along in the attack chain an attacker makes it, the bigger the headache for responders. Missing telemetry only adds time to remediations that most organisations can’t afford. This is why complete and accurate logging is essential, but we’re seeing that, all too frequently, organisations don’t have the data they need,” said John Shier, field CTO, Sophos.

In the report, Sophos classifies ransomware attacks with a dwell time of less than or equal to five days as “fast attacks,” which accounted for 38 per cent of the cases studied. “Slow” ransomware attacks are those with a dwell time greater than five days, which accounted for 62 per cent of the cases.

However, defenders do need to be aware that fast attacks and the lack of telemetry can hinder fast response times, leading to more destruction.

“Cybercriminals only innovate when they must, and only to the extent that it gets them to their target. Attackers aren’t going to change what’s working, even if they’re moving faster from access to detection. This is good news for organizations because they don’t have to radically change their defensive strategy as attackers speed up their timelines. The same defenses that detect fast attacks will apply to all attacks, regardless of speed. This includes complete telemetry, robust protections across everything, and ubiquitous monitoring,” said Shier.

“The key is increasing friction whenever possible—if you make the attackers’ job harder, then you can add valuable time to respond, stretching out each stage of an attack.

“For example, in the case of a ransomware attack, if you have more friction, then you can delay the time until exfiltration; exfiltration often occurs just before detection and is often the costliest part of the attack. We saw this happen in two incidents of Cuba ransomware. One company (Company A) had continuous monitoring in place with MDR, so we were able to spot the malicious activity and halt the attack within hours to prevent any data from being stolen. Another company (Company B) didn’t have this friction; they didn’t spot the attack until a few weeks after initial access and after Cuba had already successfully exfiltrated 75 gigabytes of sensitive data. They then called in our IR team, and a month later, they were still trying to get back to business as usual.”

The Sophos Active Adversary Report for Security Practitioners is based on 232 Sophos Incident response (IR) cases across 25 sectors from Jan. 1, 2022, to June 30, 2023.

Targeted organizations were located in 34 different countries across six continents. Eighty-three percent of cases came from organizations with fewer than 1,000 employees.

The Sophos Active Adversary Report for Security Practitioners provides actionable intelligence on how security practitioners should best shape their defensive strategy.


Kindly share this post

Nigeria CommunicationsWeek believes that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. So since 2007, we have devoted our energy to independent reportage of technology and how they affect lives.

E-Business

Kaspersky Launches OT Calculator to Align Cybersecurity Investments with Business Goals

Published

on

Kindly share this post

Kaspersky’s new online tool has been specially developed for industrial organisations to assess the potential costs associated with insufficient operational technology (OT) security.

By offering detailed financial forecasts, the calculator empowers senior management to make well-informed decisions regarding security investments.

Industrial organisations increasingly depend on interconnected systems, elevating cybersecurity to a critical factor in business resilience and profitability.

According to VDC Research, over 60% of industrial companies last year reported that cybersecurity breaches had led to significant costs. Despite this, a persistent disconnect remains between security teams and executive leadership as security professionals focus on minimising risk, while executives must balance cybersecurity concerns with broader business objectives. This misalignment often results in competing priorities and underfunded security initiatives.

To bridge this gap, Kaspersky has launched the OT Cybersecurity Savings Calculator, an innovative online tool designed specifically for industrial organisations to assess the potential costs of inadequate operational technology (OT) security¹.

The primary aim of this tool is to translate cyber risks into tangible financial metrics and support strategic discussions around priorities and budget allocation. By entering details such as their sector, sub-sector, region, company size, breach history, and existing cybersecurity measures, organisations can estimate their potential cost savings and receive customised, actionable recommendations.

The calculator benchmarks performance against industry peers and highlights the company’s position within the current threat landscape.

“We believe this calculator is a powerful resource for transforming complex cyber risk data into straightforward financial insights. It enables OT leaders, security professionals, and executive teams to develop clear, data-driven business cases and recognise the value of cybersecurity investments. With actionable guidance, it promotes a comprehensive approach to resource management and strengthens overall organisational resilience,” comments Andrey Strelkov, Head of Industrial Cybersecurity Product line at Kaspersky.


Kindly share this post
Continue Reading

E-Business

Local App Developers Rake $1m in Sales in 2025- NOTAP

Published

on

Kindly share this post

National Office for Technology Acquisition and Promotion (NOTAP) has said Nigerian software developers have reached significant milestones with locally made applications generating over one million Dollar in sales across domestic and regional markets.

Local App Developers Rake $1m in Sales in 2025- NOTAP

Dr Obiageli Amadiobi, director-general of NOTAP, said this in an interview with the News Agency of Nigeria (NAN), on Thursday in Abuja.

Amadiobi said the development signified the growing strength of Nigeria’s digital innovation ecosystem and how local innovation powers digital growth.

She said it was also a direct outcome of targeted support initiatives led by NOTAP.

She added that the initiative helped to build capacity, protect intellectual property, and connect developers to market opportunities.

According to the NOTAP boss, the journey from concept to impact started with understanding and securing intellectual property (IP) rights, a step many local innovators missed.

“Whether it’s a literary work, a laboratory invention, or a creative digital product, the process of bringing an idea to life demands immense time, skill, and dedication.

“An innovator might wake up with a solution to a pressing problem; spend months testing and refining it and achieve remarkable results; so it is their fundamental right to patent that creation and claim ownership.

“Without this protection, someone else could easily replicate their work; patent it in their name; and legally control what was built with Nigerian brainpower,” she said.

Amadiobi said that the challenge was compounded by widespread digital piracy and counterfeiting, which hit the ICT sector hardest.

“From copied software applications to replicated content on social platforms like TikTok, unauthorised duplication has become a major barrier to growth.

“We see talented young creators develop unique digital content or tools, only to watch others rebrand and profit from their work within weeks,” she said.

The DG noted that most popular online personalities with distinctive styles often don’t realise they could protect their original contributions through IP registration.

She said that to address these gaps and unlock the value of Nigerian innovation, NOTAP implemented a multi-pronged strategy,- a cornerstone initiative – which is the Local Vendor Policy.

“The Local Vendor Policy mandates that foreign technology firms entering Nigeria partner with domestic counterparts,’’ she said.

Amadiobi said that among the performing apps are solutions addressing critical local challenges such as a mobile health platform that now serves 750,000 users across six states.

“There is also the agricultural marketplace connecting smallholder farmers to buyers; and an educational tool that has been adopted by 200 schools to improve learning outcomes,” she said.

She added that the apps were developed by teams that gained skills and resources through NOTAP’s Local Vendor Policy.

According to her, the policy requires foreign technology firms operating in Nigeria to allocate a portion of their technical service fees to local partners.

“Three years ago, many of these developers were only providing support services to foreign companies.

“But today, they are building their own products that compete globally. 60 per cent of last year’s sales came from other African countries, showing our developers can lead on the continent,” she said.

The D-G explained that the one million dollar figure represented sales from over 50 locally developed apps, with individual developers earning between 5,000 dollars and 80,000 dollars from their products.

“Looking ahead, NOTAP aims to double these sales figures by 2027, with plans to expand support to developers focusing on fintech, renewable energy management, and climate adaptation tools.

“These are the sectors identified as high-growth opportunities for Nigerian innovation,’’ Amadiobi said


Kindly share this post
Continue Reading

E-Business

Gold Hits Record $5,110/Ounce Amid Trump Tariff Threats, Geopolitical Fears

Published

on

Kindly share this post

Gold prices smashed through $5,100 per ounce on Monday, January 26, surging to a historic peak of $5,110.50 as investors rushed into the safe-haven asset amid escalating geopolitical tensions and U.S. policy volatility.

Gold Hits Record $5,110/Ounce Amid Trump Tariff Threats, Geopolitical Fears

Gold

Spot gold climbed 2.2% to $5,089.78 by 0656 GMT, while U.S. February futures rose similarly to $5,086.30. The metal, up 64% in 2025—its strongest annual gain since 1979—has now advanced over 18% year-to-date, fueled by safe-haven buying, anticipated U.S. rate cuts, China’s 14th consecutive month of central bank purchases in December, and massive ETF inflows.

Analysts point to a crisis of confidence in U.S. assets, sparked by President Trump’s erratic threats last week. He retreated from tariffs on European allies to pressure Greenland seizure, then vowed 100% tariffs on Canada over a potential China trade deal and 200% on French wines to push President Emmanuel Macron toward a “Board of Peace” initiative.

“This Trump administration has caused a permanent rupture in global norms, driving everyone to gold as the sole refuge,” said Kyle Rodda, senior market analyst at Capital.com.

A weakening dollar—hit by a rising yen and pre-Fed meeting caution—further boosted gold’s appeal for non-dollar holders, with markets eyeing possible yen intervention.


Kindly share this post
Continue Reading

Trending