Connect with us

E-Business

Experts Ring Fear as Cyber Thieves Exploit Security Lapses

Published

on

Kindly share this post

Experts in IT security have warned of a possible cyber racket insurgence in Nigeria, unless controls needed to protect sensitive data and critical infrastructure from abuse by insiders are firmly installed, Nigeria CommunicationsWeek can report. The independent Oracle users’ group survey, which first revealed that attackers exploited legitimate database access through SQL injection and stolen credentials, said laxity in the industry remains since the 2011 report. The Independent Oracle Users Group had more than 300 database and information security professionals recently surveyed on their data security practices with disturbing results. 60 per cent of respondents say data breach was most likely. Hamilton Iyoha, pre-sales consultant, Oracle Corporation, Nigeria, said over one billion records have been breached from database serves over the past six years. Iyoha said at a one-day ‘Data Security and Optimisation Summit’ hosted by Computer Warehouse Group (CWG), that the figure doubles every two years. He noted that ICT revolution in Nigeria would spur latent hullabaloo and cyber crime owing to porous nature of companies’ database in the country. Iyoha said hackers usually deploy SQL injection technique to attack databases through a website usually carried out by including portions of SQL statements in a web form entry field in an attempt to get the website to pass a newly formed rogue SQL command to the database. SQL injection is a code injection technique that exploits a-security vulnerability in a website’s software. The vulnerability happens when user input is either incorrectly filtered for string literal escape characters embedded in SQL statements or user input is not strongly typed and unexpectedly executed. Thus, unprotected site oftentimes dump the database contents to the attacker. Iyoha said: “With the fast growth in data generation, demand for data security will also increase in manifold. Actually, 48 per cent of data breaches are caused by insiders, 89 per cent records stolen using SQL injections. Hackers use stolen credentials; all this call for stringent security applications. “As it is now, existing IT security is not addressing database security, because only 20 per cent of companies that participated in the survey have a kind of forecast estimate,” he noted. Iyoha said CWG/Oracle partnership has provided the society with a preventive and detective control security solution that demands authentication, access control and auditing capable of blocking threats. “About 75 percent of organizations genuinely doing business encrypt their database traffic. Another 22 per cent encrypt only their database backup files; however, Oracle Advanced Security (OAS) was produced in such a way that it protects data from unauthorized users, particularly on enterprise solution base,” said Iyoha. Peter Boglo, the senior technology pre-sales consultant, Oracle, despite huge spends on IT security by Nigeria financial institutions, and operators in the oil and gas sector, tangible results are hard to come by because of inappropriate spend. “Nigerian companies, banks, IT firms, those in oil and gas spend more money on information security management and they have not gotten maximum result. So, the Oracle database 11g is an epoch-making event that spans the full range of customers need. Information security is a prerequisite for growth, confidence building and protection of stakeholders in the digital economy,” said Boglo. He notes that the “National Identity Management Scheme requires user provisioning, role management, entitlement management, and risk based access control virtual directive. Therefore, our database must be protected to avoid the impending cyber attacks.” Christy Elendu, manager, Oracle Channels Analyst representing the country manager, said that the company spent about $4.3 billion in 2011 on research and development aimed at producing best software to tackle global security threats. “Oracle has been there since 1971 which we started with proprietary system to open and standard systems and CWG has been a worthy partner. And we are committed to hardware engineering, new opportunities for partners, better solution for customers.


Kindly share this post

Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

Continue Reading
Advertisement
Comments

E-Business

NDPC Partners Gates Foundation, KPMG on Open Banking Frameworks

Published

on

Kindly share this post

Nigeria Data Protection Commission (NDPC), in partnership with Bill Gates and Melinda Foundation and KPMG are developing open banking frameworks in a move to deepen financial inclusion.

NDPC Partners Gates Foundation, KPMG on Open Banking Frameworks

L-r:; Anna Wallace, Senior Programme Officer for Regulatory and Consumer Protection Technologies at the Bill & Melinda Gates Foundation,; Dr. Vincent Olatunji , national commissioner of the NDPC; and John Anyanwu, KPMG Head of Cybersecurity and Privacy,

This was the focus of discussion when Dr. Vincent Olatunji , national commissioner of the NDPC, received Anna Wallace, Senior Programme Officer for Regulatory and Consumer Protection Technologies at the Bill & Melinda Gates Foundation, and John Anyanwu, KPMG Head of Cybersecurity and Privacy, in Abuja.

The commission revealed in a statement on X (formerly Twitter) that the purpose of the meeting was to discuss open banking frameworks for Nigeria, a project coordinated by the Gates Foundation.

Open banking refers to the practice of providing third-party financial service providers with access to bank account information, transaction data, and other financial data through the use of application programming interfaces.

The meeting served as a pivotal step in recognising NDPC’s crucial role in the project, formalising engagement to ensure robust input in the areas of data protection and privacy.

NDPC emphasised the crucial role of digital identity in the financial sector as well as open banking, stressing the importance of implementing measures to safeguard digital identities to foster trust and confidence

Dr. Olatunji also addressed challenges posed by digital lending companies regarding transparency in data processing activities.

The NDPC Boss noted that the Commission was already working with other stakeholders to tackle the challenges.

He highlighted the misconception among some banks regarding the roles of a Chief Information Security Officer and a Data Protection Officer, emphasising the legal requirement for all data controllers to have a Data Protection Officer.

 

 

 


Kindly share this post
Continue Reading

E-Business

32m Attacks Thwarted on World Password Day

Published

on

Kindly share this post

Passwords serve as the foundation of our digital lives, but they also serve as the gateway for cybercriminals to hack into sensitive personal information. Considering their essential function, passwords remain a prime target for increasingly sophisticated cybercriminal attacks.

Therefore, taking proactive measures to safeguard accounts and personal information is imperative.

To mark World Password Day on May 2nd – highlighting the essential role passwords play in protecting our lives online – Kaspersky experts are providing essential tips to enhance password security, ensuring that users data stays out of the hands of attackers.

Weak and simple passwords have always been an attractive target for scammers as cracking them gives criminals access to multiple types of data – personal data, financial information, medical records etc.

Kaspersky telemetry indicates more than 32 million attempts to attack users with password stealers took place in 2023, this followed more than 40 million incursions in 2022.

These alarming statistics highlight the need for users to create strong, unique and varied passwords for different accounts. This way they can mitigate the risks of cyber threats and maintain personal security online.

To enhance password security, Kaspersky experts recommend the following steps and practices:

The ‘association method’ helps create strong and memorable passwords

The association approach involves creating a password from a sequence of words or ideas that have personal significance but are not easily guessable by others. A password can be based on a favourite quote, a memorable song lyric, or a unique combination of objects. This technique generates strong passwords without requiring complex memorisation, helping to maintain security while reducing the risk of forgetting. For example, a phrase “I first visited Paris in 2008” could be transformed into a password “IfvPin2o:o8”.

Are regular passwords too boring? How about emoji?

If using the same password everywhere becomes too much and you lack the imagination to make up something new, emoji-passwords could be a non-standard and safe option. Since they are a part of the Unicode standard, it is potentially possible to use them as passwords.

One of the most significant pros is that scammers cannot brute-force emoji-passwords, since various tools and dictionaries can’t crack combinations like these. More detailed information on how to set up an emoji password and the necessary requirements is available here.

The most obvious option is not the safest one

Using common passwords or default values such as “1234”, “password” or “admin” could make personal data and accounts vulnerable to scammers, since they use automated tools to guess the correct combinations.

It may take several seconds to find the right answer and gain access to personal data. A strong and complicated password includes a mix of letters, numbers, and symbols, while avoiding personal information such as names or birthdays.

Additionally, there are online public free services that allow everyone check how strong their passwords are to mitigate possible risks.

Old, but gold: one account – one password

This practice ensures that if one account is compromised, others remain secure. By creating a unique password for each account, you minimise the damage a hacker can do if they manage to steal one.

This approach isolates security breaches and helps protect sensitive data. According to a global survey, the average user has approximately 8 accounts. Remembering even 2-3 long and complicated passwords (containing up to 15 symbols) could be impossible for the majority of users.

In this case it is both safe and useful to shift the responsibility of remembering all the passwords to a security solution, such as Kaspersky Password Manager.


Kindly share this post
Continue Reading

E-Business

Embracing AI to Help Reshape Business Dynamics and Customer Interaction

Published

on

Kindly share this post

By Tamara Rajić, Director of Business Strategy EMEA at Infobip

World Innovation and Creativity Day fell on the 21st of April, reminding us of the boundless potential inherent in human ingenuity and technological advancement. Artificial Intelligence (AI) stands at the forefront of this celebration, reshaping the landscape of business operations and customer engagement.

The combination of advanced data analytics with cloud computing has propelled AI into the spotlight, making its integration more accessible across industries.

Unlocking AI’s potential – why companies can’t afford to miss out

What is remarkable is how AI adoption is growing its accessibility to the public. Platforms such as OpenAI, ChatGPT, and Dall-E have opened the doors to AI technologies, empowering individuals, and businesses alike to effortlessly explore and incorporate AI-driven solutions into their plans. This has sparked a culture of innovation and empowerment, enabling businesses to harness AI to expand their performance and efficiency.

Take AI-driven communication tools, like chatbots and virtual assistants for example. They are changing customer service experiences by delivering personalised, efficient, and proactive interactions. These solutions not only streamline support processes but also forge deeper connections with customers, fostering satisfaction, loyalty, and ultimately, business growth. Furthermore, AI empowers businesses to gather actionable insights from customer data, facilitating informed decision-making and targeted strategies.

Data quality plays a crucial role in the successful implementation of AI. Without complete and consistent data, implementing AI-powered technologies can lead to inaccurate results and hinder business decision-making. This is why it is important for businesses to invest in data quality assurance processes. And by analysing customer feedback across various channels, AI offers a deeper understanding of preferences and needs, enabling businesses to tailor their offerings and communication strategies accordingly. This level of personalisation increases the customer experience, promoting long-lasting relationships and brand loyalty.

Chatbots and virtual assistants are some of the most widely used AI-powered communication solutions out there, spanning across multiple industries and business types. They provide instant responses to inquiries, assist with product recommendations, and help with tasks like order tracking and appointment scheduling.

Navigating challenges in AI implementation

AI-driven automation streamlines processes, reduces manual workloads, and enhances operational efficiency, driving competitiveness and revenue growth. By leveraging AI-powered insights, businesses can identify high-value opportunities, estimate market trends, and improve resource allocation, thereby increasing ROI and market share.

This innovation is expected to catalyse significant transformations in traditional sectors such as banking and retail, leading to more personalised experiences and innovative consumer approaches. By understanding individual preferences, behaviours, and purchasing patterns, these sectors can offer tailored product recommendations, targeted promotions, and customised services.

With this being said, it is important to underline the critical function AI serves in customer support. By reducing wait times through AI-powered chatbots and providing assistance through the customer’s preferred communication channel, businesses can ensure a significant uptake in customer satisfaction.

Integrating AI into existing tools and systems does not come without its challenges. Businesses can encounter compatibility issues, data silos, and a shortage of skilled professionals with expertise in AI and machine learning within their talent pool. Demonstrating ROI in the early stages of AI technology adoption can also be challenging due to these obstacles. It is therefore important to identify high-potential use cases and the most impactful areas where AI can drive business growth and positive customer satisfaction and start from there.

Overcoming obstacles – to maximise AI’s potential

With its increasing accessibility and transformative potential, AI is fostering innovation, and amplifying creativity. By taking into consideration AI-driven insights and solutions, businesses can personalise interactions, streamline operations, and anticipate customer needs. However, this journey is not without trial and error. It demands careful navigation of data quality and integration complexities. Nonetheless, businesses should embrace AI as a catalyst for creativity and innovation, to unlock new possibilities, enriching the human experience and propelling organisations towards a future where the boundaries between humanity and technology seize to exist.


Kindly share this post
Continue Reading

Trending