Connect with us

Telecom

 Education Sector Strengthening against Ransomware, but IT Teams Pay Personal Price – Sophos Report 

Published

on

Kindly share this post

Sophos, a global leader and innovator of advanced security solutions for defeating cyberattacks, has released its fifth annual Sophos State of Ransomware in Education report.
The global study of 441 IT and cybersecurity leaders shows the education sector is making measurable progress in defending against ransomware, with fewer ransom payments, dramatically reduced costs, and faster recovery rates.
Yet, these gains are accompanied by mounting pressures on IT teams, who report widespread stress, burnout, and career disruptions following attacks – nearly 40% of respondents reported dealing with anxiety.
Over the past five years, ransomware has emerged as one of the most pressing threats to education, with attacks becoming a daily occurrence. Primary and secondary institutions are seen by cybercriminals as “soft targets”, often underfunded, understaffed, and holding highly sensitive data.
The consequences are severe: disrupted learning, strained budgets, and growing fears over student and staff privacy. Without stronger defenses, schools risk not only losing vital resources but also the trust of the communities they serve.
Indicators of Success against Ransomware
The new Sophos study demonstrates that the education sector is getting better at reacting and responding to ransomware, forcing cybercriminals to evolve their approach.
Trending data from the Sophos study reveals an increase in attacks where adversaries attempt to extort money without encrypting data.
Unfortunately, paying the ransom remains part of the solution for about half of all victims.
However, the payment values are dropping significantly, and for those who have experienced data encryption in ransomware attacks, 97% were able to recover data in some way. The study found several key indicators of success against ransomware in education:
• Stopping More Attacks: When it comes to blocking attacks before files can be encrypted, both lower and higher education institutions reported their highest success rate in four years (67% and 38% of attacks, respectively)
• Following the Money: In the last year, ransom demands fell 73% (an average drop of $2.83M), while average payments dropped from $6M to $800K in lower education and from $4M to $463K in higher education.
• Plummeting Cost of Recovery: Outside of ransom payments, average recovery costs dropped 77% in higher education and 39% in lower education. Despite this success, lower education reported the highest recovery bill across all industries surveyed.
Gaps Still Need to be Addressed
While the education sector has made progress in limiting the impact of ransomware, serious gaps remain. In the Sophos study, 64% of victims reported missing or ineffective protection solutions; 66% cited a lack of people (either expertise or capacity) to stop attacks; and 67% admitted to having security gaps. These risks highlight the critical need for schools to focus on prevention, as cybercriminals develop new techniques, including AI-powered attacks.
Highlights from the study that shed light on the gaps that still need to be addressed include:
• AI-powered threats: Lower education institutions reported that 22% of ransomware attacks had origins in phishing. With AI enabling more convincing emails, voice scams, and even deepfakes, schools risk becoming test grounds for emerging tactics.
• High-value data: Higher education institutions, custodians of AI research and large language model datasets, remain a prime target, with exploited vulnerabilities (35%) and security gaps the provider was not aware of (45%) as leading weaknesses that were exploited by adversaries.
• Human toll: Every institution with encrypted data reported impacts on IT staff. Over one in four staff members took leave after an attack, nearly 40% reported heightened stress, and more than one-third felt guilt they could not prevent the breach.
“Ransomware attacks on schools are among the most disruptive and brazen crimes,” said Alexandra Rose, Director, CTU Threat Research, Sophos. “It’s encouraging to see schools getting better at responding and recovering, but the real opportunity is to stop attacks before they start. Prevention, backed by strong incident response planning and collaboration with trusted public and private partners, is essential as adversaries adopt new tactics, including AI-driven threats.”
Holding on to the Gains
Based on its work protecting thousands of educational institutions, Sophos experts recommend several steps to maintain momentum and prepare for evolving threats:
• Focus on Prevention: The dramatic success of lower education in stopping ransomware attacks before encryption offers a blueprint for broader public sector organizations. Organizations need to couple their detection and response efforts with preventing attacks before they compromise the organization.
• Secure Funding: Explore new avenues such as the U.S. Federal Communications Commission’s E-Rate subsidies to strengthen networks and firewalls, and the UK’s National Cyber Security Centre initiatives, including its free cyber defence service for schools, to boost overall protection. These resources help schools both prevent and withstand attacks.
• Unify Strategies: Educational institutions should adopt coordinated approaches across sprawling IT estates to close visibility gaps and reduce risks before adversaries can exploit them.
• Relieve Staff Burden: Ransomware takes a heavy toll on IT teams. Schools can reduce pressure and extend their capabilities by partnering with trusted providers for managed detection and response (MDR) and other around-the-clock expertise.
• Strengthen Response: Even with stronger prevention, schools must be prepared to respond when incidents occur. They can recover more quickly by building robust incident response plans, running simulations to prepare for real-world scenarios, and enhancing readiness with 24/7/365 services like MDR.
Data for the State of Ransomware in Education 2025 report comes from a vendor-agnostic survey of 441 IT and cybersecurity leaders – 243 from lower education and 198 from higher education institutions hit by ransomware in the past year.
The organizations surveyed ranged from 100 – 5,000 employees and across 17 countries.
The survey was conducted between January and March 2025, and respondents were asked about their experience of ransomware over the previous 12 months.
Download the State of Ransomware in Education 2025 report on Sophos.com.

Kindly share this post

Ugo Onwuaso is an ICT enthusiast. He believes technology should be used for general good. He holds a Master of Public Administration (MPA) degree from the Lagos state University. Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

Telecom

Canal+ Unveils €100m Rescue Plan to Revive MultiChoice after Subscriber Slump

Published

on

Kindly share this post

French media group Canal+ has announced a €100 million turnaround plan to revive growth at MultiChoice, Africa’s largest pay-TV operator, after the DStv owner lost hundreds of thousands of subscribers and suffered a decline in revenue in 2025.

Canal+ Unveils €100m Rescue Plan to Revive MultiChoice After Subscriber Slump

MultiChoice

The move follows Canal+’s full takeover of the South Africa-based broadcaster, which has been squeezed by weaker household purchasing power across Africa and intensifying competition from global streaming platforms.

According to Canal+’s latest financial disclosures, MultiChoice ended 2025 with 14.4 million subscribers, down from 14.9 million a year earlier, while revenue fell 6 per cent to €2.4 billion.

Adjusted earnings before interest and tax dropped 14 per cent to €159 million, prompting Canal+ to describe 2025 as “another challenging year” marked by falling subscriber numbers and an unsustainably high cost base.

The group cited currency depreciation in key markets such as Nigeria and persistent electricity shortages as major headwinds making it harder for households to maintain pay-TV subscriptions.

Canal+ also pointed to problems at Showmax, MultiChoice’s streaming service, describing one of its key contracts as an “expensive failure” and confirming that the arrangement is being shut down as part of a wider refocus on the core pay-TV business.

Under the new “boost plan,” which will roll out from 2026, Canal+ aims to restart subscriber growth and improve profitability across MultiChoice’s footprint by investing in content, pricing, distribution and sales.

On content, the French group says it plans to assemble the “best content on the African continent” by blending premium international programmes with more locally produced films, series and sports tailored to African audiences.

It will also simplify subscription packages and adjust pricing structures to make DStv and related offerings easier for customers to understand and afford.

To expand reach, Canal+ intends to subsidise hardware such as decoders and satellite dishes, lowering entry costs for new users.

In addition, the company will recruit more than 1,000 sales staff across African markets as it shifts MultiChoice towards a more aggressive, “sales-focused” model designed to win back and attract subscribers.

Alongside this investment push, Canal+ is embarking on significant cost-cutting measures, including a voluntary severance plan for some MultiChoice support staff and a restructuring of Irdeto, its technology and cybersecurity subsidiary.

Canal+ now expects to generate over €250 million in synergies by 2026, up from an earlier €150 million estimate, driven by the shutdown of loss-making Showmax contracts, operational restructuring at MultiChoice and rationalisation of company-owned properties.

The cost of delivering these savings is projected at between €70 million and €100 million. Despite the planned reforms, the group still anticipates a slight further decline in MultiChoice’s subscriber base in 2026, though the pace of losses is expected to slow, with adjusted earnings before interest and tax forecast to rise modestly to about €170 million as cost savings begin to offset weaker revenue and higher expenses.

Canal+ gained effective control of MultiChoice on 20 September 2025 after acquiring a majority stake, later buying out remaining shareholders and delisting the company from the Johannesburg Stock Exchange in December 2025.

The French media group has said it intends to complete a secondary listing on the JSE before June 2026 to reinforce its presence in Africa’s fast-growing media and entertainment market.

The €100 million boost plan underlines the mounting pressure on traditional pay-TV operators across the continent as currency weakness, rising living costs and rapid expansion of streaming services force a strategic rethink of legacy television business models.


Kindly share this post
Continue Reading

Telecom

NCC Orders Telcos to Report Cyberattacks Within 4 Hours from 2027

Published

on

Kindly share this post

Starting February 2027, Nigerian Communications Commission (NCC), has mandated mobile network operators and other communications service providers to notify it within four hours of detecting any cyberattack.

NCC Orders Telcos to Report Cyberattacks Within 4 Hours from 2027

This is aimed at strengthening the protection of telecom infrastructure and subscriber data.

The directive is contained in the Cyber Resilience Framework for the Nigerian Communications Sector (CRF-NCS) released by the NCC last month.

According to the NCC, the rule will take effect in February 2027, giving operators a year to put in place the necessary monitoring and reporting systems.

Under the framework, telecommunications companies must alert the regulator within four hours of detecting a cyber incident and continue to provide updates every four hours until the situation is contained.

Operators are also required to submit a confirmation report within 24 hours through a dedicated reporting portal.

The commission said the framework is designed to strengthen cybersecurity oversight in a sector that handles vast volumes of sensitive consumer and national infrastructure data.

Cyber threats targeting telecom networks can lead to service disruptions, data breaches affecting subscriber information, malware infections and other attacks capable of crippling communications systems, according to the regulator.

By introducing faster reporting timelines, the commission said it hopes to improve sector-wide situational awareness and ensure quicker response to threats before they escalate into major outages or data compromises.

The framework also requires telecommunications companies to establish dedicated Security Operations Centres (SOC) to monitor networks continuously for suspicious activity and cyber threats.

These centres are expected to detect and report malicious activities promptly while coordinating responses internally.

In addition, each operator must designate a cybersecurity lead responsible for working with the commission’s Computer Security Incident Response Team (CSIRT) to share intelligence and coordinate responses to incidents affecting the communications ecosystem.

The NCC said the new framework forms part of broader efforts to strengthen resilience across Nigeria’s communications infrastructure and promote a unified cybersecurity posture in the sector.

The measures come amid growing global and domestic concern over data breaches and cyber intrusions targeting companies that manage large volumes of digital information.

Telecommunications companies, which serve as gateways for internet traffic, mobile banking, messaging and other digital services, are increasingly seen as critical infrastructure vulnerable to cyber threats.

Nigeria’s telecom regulator has in recent years tightened rules around data protection and network security as the country’s digital economy expands.

 

 


Kindly share this post
Continue Reading

Telecom

US Court Dismisses All Claims Against Binance in Major Anti-Terrorism Lawsuit Victory

Published

on

Kindly share this post

 A United States federal court in the Southern District of New York has comprehensively dismissed all claims against Binance, the world’s largest cryptocurrency exchange by registered users, in a high-profile lawsuit under the Anti-Terrorism Act (ATA).

US Court Dismisses All Claims Against Binance in Major Anti-Terrorism Lawsuit Victory

Binance

The 62-page decision represents a decisive legal victory, rejecting allegations from 535 plaintiffs who claimed the platform provided material support linked to 64 terrorist attacks.

The court meticulously examined and dismissed every central allegation, ruling that plaintiffs failed to establish Binance assisted terrorists, associated itself with the attacks, participated in or sought to advance them, or engaged in any conspiracy with terrorist organisations.

This full dismissal underscores the absence of evidence supporting the claims, affirming Binance’s long-standing position that the suit was meritless.

Binance General Counsel Eleanor Hughes described the outcome as “a complete vindication of all false allegations.” She emphasised: “The court has unambiguously rejected the false and damaging narrative that Binance assisted terrorists.

“We have always maintained these claims were without merit, and today’s ruling confirms that. We will continue to defend ourselves aggressively against any litigation or reporting that misrepresents who we are and how we operate.”

While the ruling grants plaintiffs 60 days to file an amended complaint in light of a recent appellate decision, Binance expressed strong confidence that no revisions can remedy the “fundamental deficiencies” identified by the court. The exchange views this as a thorough examination and rejection of the underlying assertions.

Binance reaffirmed its commitment to industry-leading compliance infrastructure, proactive regulatory engagement, and robust legal governance worldwide.

The company stressed that its operations do not support, facilitate, or enable terrorism in any form, and it plans to maintain constructive dialogue with regulators while pursuing vigorous defences against misleading narratives.

This development bolsters Binance’s position amid ongoing global scrutiny of crypto platforms, highlighting its operational integrity in a sector often targeted by unsubstantiated claims.


Kindly share this post
Continue Reading

Trending