E-Business
How Cybersecurity Readiness Prevents Small and Medium Businesses (SMBs) from Fuelling Supply Chain Attacks

By Pankaj Bhula
Supply chain attacks aren’t new. If the past couple of years have taught businesses anything, it’s that the impact of supply chain cyber attacks is now universal, from the fallout of the SolarWinds software breach to the exposed Apache Log4j vulnerability and Kaseya last year.

Unfortunately, when such supply chain attacks hit smaller businesses, who are usually the suppliers to larger enterprises, their impact is especially prohibitive.
For SMBs already feeling the prolonged impact of the pandemic, the added pressure of dealing with sophisticated and frequent cyber attacks in real time are a heavy burden, as they try to protect their business against financial, legal and reputational damage, as well as their own suppliers and larger clients’ security.
It is now more important than ever for SMBs to implement strict security hygiene and effective cybersecurity processes to ensure their business is prepared for the event of cyber attacks happening.
SMBs as an indirect avenue of cyber attacks
The ‘new normal’ opened the door to several new vulnerabilities; cyber attacks globally increased by 50% on average in 2021, compared to 2020.
Our Check Point Threat Intelligence report revealed that an organisation in South Africa experienced a cyberattack 1,675 times per week, compared to 1,117 attacks per organisation globally.
While security breaches are on the rise, the top threats impacting SMBs have remained the same. In Check Point’s Small and Medium Business Security Report from 2020/2021, we revealed phishing, malware, credential theft and ransomware to be the top four threats impacting these businesses. So, what does this mean for them?
The reality is threat actors have taken advantage not only of the now-entrenched remote working model to target organisations, but also the usual limits preventing SMBs from bulking up on their cyber security defences – mainly lack of budget and expertise. SMBs often do not have a dedicated IT or security department.
With no in-house security expertise and reduced focus on security patching, these companies are easier to socially engineer and infiltrate.
Adding to this, SMBs usually have employees doing multiple roles, and thus a wider access to valuable areas of the business and information is given to them, and so if breached, they pose a threat to multiple areas within the business.
In addition, the business IT infrastructure is often shared for personal use communication as well, such as social media and personal emails, allowing easier access to hackers as the data is often not secured.
Threat actors often target SMBs as low hanging fruit for their vital role in supply chains. This is especially so as such attacks wreak havoc on not only one organisation but entire businesses within the supply networks.
By leveraging tactics such as phishing, cybercriminals gain access to an organisation to launch a malware attack, steal data and credentials or instigate a ransomware.
Take for example, the attack against Target USA where hackers used stolen credentials from an SMB vendor that serviced the HVAC systems in Target stores, to gain access to the retailer’s network and then laterally move to the systems that kept customer payment information. As a result, the global retailer was breached and 40 million credit and debit cards details stolen.
The key factor to preventing cyberattacks is threat prevention. With minimal time and lack of cyber expertise or manpower, SMBs must adopt a prevention mindset to minimise potential cyber attacks and threats.
Why cybersecurity readiness is paramount for SMBs
Beyond the immediate financial impact and reputational blow as a trustworthy, reliable partner, SMBs can also face legal or regulatory repercussions, operational disruption, flow-on costs for system remediation and cyberattack response, customer churn, and the loss of competitive advantage that can make or break a smaller business.
In fact, a tarnished reputation as an avenue of attack can be even more detrimental to an SMB organisation, as the loss of trust with a larger organisation could mean a loss of potential business and revenue down the line with them or other new, potential customers.
With this in mind, budgetary constraints to keep computers and corporate networks protected should never be an excuse, as keeping sensitive data and information protected will bring many advantages and benefits to companies.
This can range from overall cost savings, compliance with data protection laws, gaining the trust of customers and suppliers, to protecting your documents and information to the maximum by preventing any type of data breach.
How SMBs can prevent supply chain attacks
By applying stronger cyber defences, SMBs are in a position to provide larger organisations with assurance that larger companies they supply to will not be compromised via the SMB partner or third-party vendor.
Whilst there are multiple means to prevent such supply chain attacks, the first step is to have good software capable of covering the entire company, protecting the company’s endpoints and devices, and supported by regular backups so that, in the event of a cyber attack, they have the possibility of restoring all the data.
Any device that connects to the network can become a security breach, so it is important to secure all endpoints. It is especially critical for remote or hybrid workforces to avoid security breaches and data compromise.
Also, all employees should be trained in cybersecurity so that they themselves become the first barrier to any attempted attack, such as phishing via email or SMS. Keep in mind that prevention is one of the best protection measures available.
A viable option for SMBs is to also consider engaging an experienced Managed Security Service Provider (MSSP), who will have the skilled resources, updated security software and experienced expertise to monitor for and analyse threats on behalf of the SMB player. This is especially useful for SMBs who have neither the time nor resources to adequately enforce threat detection and response.
Partnering with a cybersecurity expert equipped with best-in-class security and scalable solution such as Check Point Software can put SMBs in good stead to protect against the most sophisticated attacks and generate trust among larger potential players.
Ultimately, SMBs seek a simple plug-and-play solution with best-in-class threat protection, given their lack of financial funding and skills.
With an effective cybersecurity strategy, SMBs are better placed to demonstrate their credibility as secure partners to larger organisations, opening up more business opportunities.
Pankaj Bhula is Regional Director for Africa at Check Point Software
E-Business
Nigeria Takes the Lead in the Global WSIS+20 Digital Agenda

Nigeria has unveiled a comprehensive, multi-pronged strategy designed to localise WSIS+20 commitments. This roadmap accelerates national transformation by prioritising robust infrastructure, transparent internet governance, and advanced cybersecurity through deep stakeholder collaboration.

Unveiled in New York at the Nigerian high-level side event titled “Re-Imagining Digital Cooperation for Sustainable Development: From WSIS+20 Vision to Local Action,” the strategy cements Nigeria’s position as a primary architect of the world’s digital future.
Speaking at the event, the Director General of the National Information Technology Development Agency (NITDA), Kashifu Inuwa, CCIE represented by Director, Corporate Planning and Strategy, Dr. Dimie Shively Wariowei said Nigeria’s approach is deliberately aligned with the four core activity areas identified under the ongoing WSIS+20 review process.
According to him, the focus areas provide a practical framework for translating global digital commitments into measurable national outcomes, ensuring that international resolutions drive inclusive growth and sustainable digital development at the country level.
Inuwa identified digital infrastructure as the foundation of effective localisation, noting persistent challenges in extending connectivity to underserved and remote communities. Beyond infrastructure gaps, he highlighted affordability constraints and digital literacy deficits, stressing that addressing these issues remains central to Nigeria’s digital inclusion drive.
He explained that government alone cannot shoulder the burden of nationwide digital infrastructure deployment, given Nigeria’s vast geographical spread, hence the adoption of collaborative Public-Private Partnership (PPP) models. He disclosed that Nigeria, in collaboration with the World Bank, is implementing a major fibre-optic project spanning about 90,000 kilometres nationwide to boost connectivity.
The NITDA DG also revealed that the current National Broadband Plan, which has guided broadband expansion in recent years, is nearing completion, with plans underway to renew and reposition it for the next five years. The renewed plan, he said, will strategically target increased broadband penetration as a catalyst for digital access and economic growth.
On internet governance, Inuwa referenced Nigeria’s active participation in the Internet Governance Forum (IGF), noting that the country successfully hosted its annual national IGF. He said the forum operates on a multi-stakeholder model that brings together government, the private sector, civil society and the technical community to foster cooperation and informed policy dialogue.
Cybersecurity, he added, remains a critical pillar of Nigeria’s localisation efforts. He cited the existing Cybersecurity Act and ongoing efforts to strengthen the legal framework through a reviewed version currently awaiting parliamentary approval. These measures, he said, are designed to mitigate risks associated with increased internet use and to protect users and critical digital infrastructure.
Inuwa further stressed Nigeria’s ambition to play a leadership role in advancing digital cooperation across Africa through inclusive, multi-stakeholder engagement. He underscored the importance of coordinated national data collection, noting that reliable, country-specific data is essential for tracking progress and presenting Africa’s digital development story on the global stage.
He concluded that sustained engagement and follow-up actions arising from the WSIS+20 review would strengthen digital cooperation among African countries and ensure that global digital commitments translate into tangible national and regional impact.
Stakeholders commended Nigeria’s efforts in the digital space, acknowledging the country’s growing role in shaping Africa’s digital future.
Earlier, Ms. Jennifer Chung, Co-Convener of the Informal Multi-Stakeholder Sounding Board (IMSB), praised Nigeria for convening a broad-based, multi-stakeholder delegation and for its commitment to the meaningful implementation of WSIS+20 outcomes.
Chung stressed the growing demand for localised WSIS follow-up mechanisms, noting that platforms such as the annual IGF, National and Regional IGF Initiatives (NRIs), and youth-led forums are vital for tracking progress towards the 2030 Agenda and Africa’s Agenda 2063.
She described the WSIS+20 review as a critical step toward effective monitoring, reliable data collection and evidence-based evaluation, particularly for developing countries in the Global South. According to her, these measures are essential to achieving WSIS targets and ensuring that no region is left behind.
Drawing parallels with the Asia-Pacific region, Chung noted that challenges around affordable and meaningful connectivity remain widespread across developing economies. She emphasised that expanding broadband penetration and reducing the cost of access are crucial to closing digital divides in Africa, Asia-Pacific and other parts of the Global South.
She also highlighted the need to enable active citizen participation in emerging technologies, including artificial intelligence and future innovations such as quantum technologies, stressing that inclusive digital access is key to maximising the benefits of digital transformation.
Reflecting on the WSIS+20 review process, Chung praised the innovative and inclusive approach adopted through the informal multi-stakeholder sounding board, describing it as one of the first of its kind in global digital governance. She called for sustained collaboration among governments, the private sector, civil society and the technical community to carry the WSIS vision from global commitments to local action.
E-Business
UBA Partners CIG Motors, Lagride, Launches $100m “Drive to Own” Scheme

United Bank for Africa (UBA) Plc has announced a $100 million financing partnership with CIG Motors, Lagride and the Lagos State Government to promote urban mobility and financial inclusion through a scheme tagged “Drive to Own.”

Group Managing Director/CEO, United Bank for Africa(UBA) and, Chairman, LagRide, Chief Diana Chen, flagged by LagRide drivers, at the signing ceremony of $100 Million Expansion Facility, strengthening smart mobility, driver asset ownership of over 3,500 cars, financed by UBA in partnership with Lagos State Government and LagRide, held in Lagos on Tuesday.
The initiative, unveiled on Wednesday in Alausa, Lagos, will empower 3,500 drivers in the state by enabling them to own vehicles with an equity contribution of 10 per cent of the total cost, while the balance is payable over 48 months.
UBA’s Group Managing Director/CEO, Oliver Alawuba, described the scheme as transformational, noting that it would foster inclusive economic growth, support MSME development and create opportunities for the younger generation.
“This partnership with Lagride is transformational. It will drive inclusivity for economic growth and ensure progress for everyone,” he said.
Alawuba shared a personal story, recalling that his father worked as a driver and was able to fund his education through that income. He said the scheme would provide similar opportunities for many families.
UBA’s Head of SME Banking, Babatunde Ajayi, said the partnership reflected a rethinking of traditional banking models.
“Not every business has a shop. Some businesses have wheels. Every commercial driver is running a business, yet they have remained outside formal finance. We designed credit that fits their reality,” he said.
Chairman of Lagride, Diana Chen, said the company had built a data-driven and credit-ready mobility platform for drivers, stressing that transportation remained the backbone of Africa’s economic future.
“Lagride now stands as the most structured, data-driven and credit-ready mobility platform in Nigeria,” Chen said.
The partnership aligns the strengths of the three organisations, with UBA providing financial support, CIG Motors offering viable business opportunities, and Lagride delivering a technology-driven platform to ensure sustainable livelihoods for driver-partners.
E-Business
Check Point Reveals Nigeria as Second Most Targeted African Country for Cyberattacks in November

The November 2025 Global Threat Intelligence report released by Check Point Research on Tuesday, shows Nigerian organisations faced an average of 3,374 cyberattacks per week.

Making the country as one of the primary targets for cybercriminals in Africa last month, with a record of a staggering volume of digital threats despite an overall decline in attacks across the continent.
The report shows that this figure places Nigeria second among the four major African nations analysed, trailing only Angola, which topped the list with 4,251 weekly attacks per organisation.
While Africa as a whole saw a 13 percent year-on-year decrease in cyber incidents, Nigeria’s high numbers reveal a persistent vulnerability within its digital infrastructure. Kenya and South Africa followed Nigeria with 2,384 and 1,863 weekly attacks, respectively.
The report also identified government institutions and financial services as the most targeted sectors across Africa. Globally, the education and research sector remained the most frequent victim, hit by an average of 4,656 attacks per week.
A significant highlight of the report is the emerging threat posed by Generative Artificial Intelligence (GenAI). Check Point Research found that one in every 35 GenAI prompts submitted within corporate networks globally posed a high risk of sensitive data leakage.
In Nigeria and abroad, employees are increasingly using AI tools that operate outside of formal security frameworks. The report noted that 87 percent of organisations using GenAI were affected by ‘high-risk’ prompts, which often included the input of proprietary code, customer data, or internal communications into public AI models.
Ransomware continues to be a primary tool for extortion, with global incidents rising by 22 percent year-on-year. While North America remains the most targeted region for ransomware, the impact is increasingly felt in emerging markets like Nigeria.
The most active ransomware groups identified in November were Qilin, Clop, and Akira, which primarily targeted industrial manufacturing and consumer goods sectors.
News2 days agoSiBAN New Executive Council to Champion Vision for Nigeria’s Digital Economy
Broadcasting2 days agoDavido, Babajide Sanwo-Olu, Karl Toriola, Others To Be Honoured At The Most Influential People of African Descent Awards In Lagos
E-Financial2 days agoTax Reform or Financial Exclusion? The Trouble with Mandatory TINs
General News2 days agoNITDA DG Calls for Innovation-Led Economic Rebirth @ Kano Startup Weekend
Telecom2 days agoNCC Blames NOGASA for Abuja Outage
News2 days agoAPC National Chairman Appoints Mr. Abimbola Tooki as Special Adviser on Media
General News2 days agoSterling Bank Renewable Energy Colloquium Urges Stakeholders to Unlock Nigeria’s Clean Energy Potential
Telecom1 day agoAirtel Africa Partners Starlink to Launch Direct-to-cell Service in 14 Markets


















