E-Business
HP Threat Research Shows Attackers Exploiting Zero-Day Vulnerability Before Enterprises Can Patch
HP Inc. has released its latest global HP Wolf Security Threat Insights Report, providing analysis of real-world cybersecurity attacks. By isolating threats that have evaded detection tools and made it to user endpoints, HP Wolf Security has a unique insight into the latest techniques being used by cybercriminals.
The HP Wolf Security threat research team found evidence that cybercriminals are mobilizing quickly to weaponize new zero-day vulnerabilities.
Exploits of the zero-day CVE-2021-40444 – a remote code execution vulnerability that enables exploitation of the MSHTML browser engine using Microsoft Office documents – were first captured by HP on September 8, a week before the patch was issued on September 14.
By September 10 – just three days after the initial threat bulletin – the HP threat research team saw scripts designed to automate the creation of this exploit being shared on GitHub.
Unless patched, the exploit enables attackers to compromise endpoints with very little user interaction. It uses a malicious archive file, which deploys malware via an Office document.
Users don’t have to open the file or enable any macros, viewing it in File Explorer’s preview pane is enough to initiate the attack, which a user often will not know has happened. Once the device is compromised, attackers can install backdoors to systems, which could be sold on to ransomware groups.
Other notable threats isolated by the HP Wolf Security threat insight team include a rise in cybercriminals using legitimate Cloud and web providers to host malware, JavaScript malware slipping past detection tools, and targeted campaign found posing as the Ugandan National Social Security fund. The team also that switching to HTA files spreads malware in a single click.
“The average time for a business to apply, test and fully deploy patches with the proper checks is 97 days, giving cybercriminals an opportunity to exploit this ‘window of vulnerability’.
While only highly capable hackers could exploit this vulnerability at first, automated scripts have lowered the bar for entry, making this type of attack accessible to less knowledgeable and resourced threat actors.
This increases the risk to businesses substantially, as zero-day exploits are commoditized and made available to the mass market in venues like underground forums,” explains Alex Holland, Senior Malware Analyst, HP Wolf Security threat research team, HP Inc.
“Such novel exploits tend to be effective at evading detection tools because signatures may be imperfect and become obsolete quickly as the understanding of the scope of an exploit changes.
“We expect threat actors to adopt CVE-2021-40444 as part of their arsenals, and potentially even replace common exploits used to gain initial access to systems today, such as those exploiting Equation Editor.”
“We are also seeing major platforms like OneDrive allowing hackers to conduct ‘flash in the pan’ attacks.
While malware hosted on such platforms are generally taken down quickly, this does not deter attackers because they can often achieve their objective of delivering malware in the few hours the links are live,” Holland continues. “Some threat actors are changing the script or file type they are using every few months.
“Malicious JavaScript and HTA files are nothing new, but they are still landing in employee inboxes, putting the enterprise at risk. One campaign deployed Vengeance Justice Worm, which can spread to other systems and USB drives.”
The findings are based on data from the millions of endpoints running HP Wolf Security. HP Wolf Security tracks malware by opening risky tasks in isolated, micro Virtual Machines (micro VMs) to understand and capture the full infection chain, helping to mitigate threats that have slipped past other security tools.
This has let customers click on over 10 billion email attachments, web pages, and downloads with no reported breaches. By better understanding the behavior of malware in the wild, HP Wolf Security researchers and engineers can bolster endpoint security protection and overall system resilience.
“We can’t keep relying on detection alone. The threat landscape is too dynamic and, as we can see from the analysis of threats captured in our VMs, attackers are increasingly adept at evading detection,” comments Dr. Ian Pratt, Global Head of Security for Personal Systems, HP Inc.
“Organizations must take a layered approach to endpoint security, following zero trust principles to contain and isolate the most common attack vectors like email, browsers, and downloads. This will eliminate the attack surface for whole classes of threats, while giving organizations the breathing room needed to coordinate patch cycles securely without disrupting services.”
It is holiday season in many parts of the world. These days though, going on holiday does not always mean turning your back on office life – hybrid work cuts both ways.
Today’s widespread connectivity—available at airports, train stations, restaurants, hotels, and most indoor public spaces—makes staying connected easier than ever, with free Wi-Fi in many locations and reliable 4G or 5G coverage elsewhere, helping to facilitate a seamless blend of work and leisure even while on holiday.
This increase in connectivity among travellers has not gone unnoticed by cyber criminals. Kaspersky experts analysed nearly 25,000 free Wi-Fi spots in Paris ahead of the Summer Olympic Games and Paralympic Games. The analysis revealed that almost 25% of these networks had weak or no encryption, making users vulnerable to personal and banking data theft.
Travellers often have their guard down. The unfamiliar surroundings of a new location or a different language can throw up a useful smokescreen for a cyberattack, meaning additional care needs to be taken when logging on. Fortunately, a few smart tools and habits can help you stay protected while enjoying the flexibility of remote work.
Use a VPN for secure connections
A VPN is one of the most effective ways to safeguard users’ online activity, especially when working from unfamiliar locations. By encrypting Internet traffic, a VPN ensures that hackers can’t intercept sensitive data like login credentials or financial details. This is particularly important when accessing work emails or company files on public Wi-Fi, where cybercriminals often lurk.
Switch to an eSIM for reliable, secure mobile data
Another useful digital tool that provides a seamless way to stay connected using local mobile networks with no physical SIM card required is the eSIM. This is a game-changer for international travellers who want to avoid sky-high roaming charges or the hassle of hunting down temporary SIM cards in foreign countries.
With an eSIM, a user can download a local data plan before you even arrive at your destination, ensuring instant connectivity the moment you land. This eliminates the need to rely on unsecured Wi-Fi hotspots, significantly reducing your exposure to cyber threats.
Plus, many eSIM providers allow you to manage multiple profiles on a single device, making it easy to switch between work and personal data plans without juggling multiple phones.
Services like Kaspersky eSIM Store enables users to purchase and activate data plans in advance, track usage and top up as needed, all from a single app.
Enable two-factor authentication (2FA)
When travelling, people often leave devices unattended. To protect against unwanted people logging in, travellers should ensure two-factor authentication (2FA) is enabled on all critical accounts and that passwords are used on all devices.
Final tips for a secure workation
Even with a VPN, eSIM and 2FA in place, your devices still need strong defenses against malware, phishing scams and ransomware. Cybercriminals often target remote workers who may let their guard down while travelling, making real-time protection essential.
Modern antivirus software does more than just scan for viruses, it actively blocks malicious downloads, warns you about phishing attempts and even secures your passwords and financial data.
For the most robust security, consider a solution like Kaspersky Premium, which combines antivirus protection, a VPN and password management into a single, easy-to-use package.
By combining a VPN, eSIM and strong antivirus, you can work from anywhere with confidence, whether you’re sending emails from a poolside or joining a video call from a festival tent.
E-Business
Zequence Digital Boss Calls for Strong IP Laws Enforcement, to Protect Nigeria’s Software Sector
Mr Adeoye Oludamilola, managing director, Zequence Digital, a digital agency, has said strong enforcement of Intellectual Property (IP) laws , protection of Nigeria’s software industry against piracy will encourage innovation and investment.
Adeoye told reporters lately in Lagos that software piracy and the unauthorised use of proprietary technology are widespread in the country.
According to report Intellectual Property (IP) laws in software refers to the legal rights that protect the creations of the mind used in software development.
These rights, which include copyrights, patents, trade secrets, and trademarks, grant developers exclusive control over their software and related assets, preventing unauthorised use or reproduction.
Adeoye said that many startups do not protect their innovations, due to a lack of knowledge and the cumbersome legal processes involved.
“IP registration and litigation are expensive and time-consuming, which further discourages developers from protecting their work,” Adeoye said.
He added that the lack of awareness among developers about their IP rights contributed to the problem.
To address these challenges, Adeoye stressed the need for the formation of an IP Protection Consortium, comprising tech firms, legal experts, and regulators, to advocate for stronger IP enforcement.
He also suggested collaborating with legal tech startups to create simplified platforms for fast-tracked IP registration.
The managing director further called for joint initiatives between legal bodies and tech communities to launch IP rights education campaigns.
This, he said, would equip developers with the knowledge they needed to protect their innovations and grow their businesses.
Adeoye emphasised the need for the government and stakeholders to create an ecosystem for development and inclusivity by proactively engaging with regulators.
According to him, this will help ensure that policies are created with the input of concerned agencies and industry experts.
PalmPay, a leading fintech platform and full-stack digital neobank for emerging markets, has partnered with Nigeria’s biggest Health Insurance Company, AXA Mansard Health a member of the globally trusted AXA Group, to provide millions of Nigerians with affordable, accessible digital health insurance.
This strategic partnership enables PalmPay users to seamlessly access a range of health insurance packages from AXA Mansard directly within the PalmPay app. With plans starting as low as N500 per month, users can now choose from flexible insurance options tailored to fit their everyday needs.
The plans are designed to meet a wide range of needs; for example, the AXA Digital Health plan offers access to telemedicine consultations with doctors, N5,000 worth of medications, and up to N40,000 in surgical coverage. Users can also opt for the AXA Mansard MicroHealth plan at N1,000 per month, which provides unlimited diagnostic tests and funeral benefits. Additionally, the AXA Mansard Accident plan, available for N500 monthly, offers comprehensive death cover for both accidental and non-accidental cases.
Speaking on the partnership, Habib Kowontan, Head of Wealth Product at PalmPay, said: “Insurance is a key pillar of financial security, yet millions of Nigerians remain underserved. Our partnership with AXA Mansard Health breaks down long-standing barriers by placing reliable and affordable insurance solutions right at our users’ fingertips.”
In her remarks, Jumoke Odunlami, Chief Distribution Officer, AXA Mansard Insurance said that the partnership with Palmpay presents the AXA with another opportunity to improve health and productivity of Nigerians. “Through partnerships like this, we are covering over 1.8 million Nigerians and ensuring that healthcare is accessible, available and affordable.
“So we are excited about joining forces with a brand like Palmpay to compliment the range of financial possibilities they offer their customers with health plans. It fits well with our mission and our purpose of acting for human progress by protecting what matters, and we are looking forward to doing even more with Palmpay”, she explained.
This partnership reflects PalmPay’s broader mission to create a more inclusive digital financial ecosystem, one that empowers users to not only manage their money efficiently, but also secure their future.
This partnership reflects PalmPay’s broader mission to create a more inclusive digital financial ecosystem, one that empowers users to not only manage their money efficiently, but also secure their future.
Firm Shares Tips for Safer Remote Working
NCC Bars Ex-Officials from Joining Telecom Firms for 5 Years
Airtel, Vodacom sign Network Infrastructure Agreement to Drive Digital Inclusion
Truecaller Crosses 100m Users in MEA Region
World Bank Approves $300m Loan to Support IDPs in Northern Nigeria
News3 days agoGoogle Hit by AI-driven Cyber Attack
General News3 days agoKuwait Busts Nigerian Cybercrime Ring Targeting Telecom Tower, Banks
News3 days agoFIRS Rolls out e-invoicing System for Large Corporate Taxpayers
E-Business3 days agoPalmPay Partners AXA Mansard Health to Make Digital Insurance Accessible, Affordable
E-Business3 days agoZequence Digital Boss Calls for Strong IP Laws Enforcement, to Protect Nigeria’s Software Sector
Telecom3 days agoMTN Nigeria’s Mega Billion Promo Turns Airtime into Fortune for Thousands Amid Economic Strain
E-Financial2 days agoNBS Reports ₦6.72 Trillion VAT Haul as Tax Reforms Pay Off
Telecom3 days agoI see Crisis, Resignations @ MTN, Airtel, Others – Primate Ayodele