E-Business
HP Top Cybersecurity Predictions for the Year

By HP Inc. Security Experts & Advisors
From ransomware pile-ons to increasingly commoditized supply chain TTPs, weaponized firmware exploits and targeted attacks on hybrid workers – the threat landscape is set to evolve at a worrying pace this year.

As 2021 drew to a close, our HP security experts and advisors reflected on what the year 2022 has in store. Here, we include insights from a range of HP security experts – including: Michael Heywood, Supply Chain Security Lead; Joanna Burkey, CISO; Dr. Ian Pratt, Global Head of Security for Personal Systems; Patrick Schläpfer, Malware Analyst; Alex Holland, Senior Malware Analyst; Julia Voo, Global Lead Cybersecurity and Tech Policy; and Michael Howard, Head of Security and Analytics Practice; alongside HP Security Advisory Board member and Partner at Deloitte, Robert Masse – identifying four key trends to look out for.
- Increasing commoditization of software supply chain attacks could result in more high-profile victims targeted
Supply chain attacks are likely to continue to present new opportunities for threat actors in 2022. According to Michael Heywood: “We’ll see supply chain attacks continue to rise in 2022 as threat actors search for weak links in software supply chains, targeting software being used widely and globally, or used by a specific company.”
As Joanna Burkey explains, this approach could create economies of scale for threat actors: “With the Kaseya breach – which impacted over 1,500 companies – we saw that supply chain attacks can be financially rewarding. This could lead to the continued commoditization of the tactics, techniques, and procedures (TTPs) used to conduct such attacks. This only adds fuel to the fire, giving threat actors more than enough motivation to exploit software supply chains this year.”
Ian Pratt says both SMBs and high-profile victims may be targeted: “Kaseya demonstrated a pathway to monetization for independent software vendor (ISV) breaches. This should be a wakeup call to all ISVs that even if their customer base doesn’t consist of enterprise and government customers, they can still be caught in the crosshairs of attackers looking to exploit their customers. Now that this blueprint is in place, we could see these types of attack become more widespread this year, targeting both SMBs and high-profile names.”
Some verticals are more likely to be targets of supply chain attacks than others, as Robert Masse explains: “Healthcare firms, as well as those in Energy and Resources (E&R), that use lots of different hardware and software from various vendors will be interesting targets for software supply chain attacks. Supply chain integrity will be vital in 2022, as attackers begin launching attacks quicker than organizations can invest in secure software development cycles.”
Organizations should also be aware of the threat posed by vulnerabilities in open-source software, as Patrick Schläpfer explains: “We’ll see an increase in open-source software packages containing malicious code. Attackers will proactively inject new threats into open-source libraries that feed into software supply chains. This could lead to more companies being compromised, regardless of whether they have a secure perimeter or good overall posture.”
- Ransomware gangs could put lives at risk and engage in ‘pile-ons’
Ransomware will continue to be a major risk this year, with victims potentially being hit more than once, as Burkey outlines: “What we’ll see will be akin to ‘social media pile-ons’, with ransomware victims repeatedly targeted by threat actors. Once an organization has been shown to be ‘soft’, others will pile-on to get their share of the action. In some instances, threat actors will hit a company multiple times in double or even triple dip extortion rackets.”
Extortion methods could also extend beyond the victim as ransomware gangs apply the pressure, comments Alex Holland: “Ransomware operators will almost certainly intensify the ways they pressure victims into paying their demands. Beyond data leak websites, attackers are using increasingly varied extortion methods, such as cold calling, and contacting customers and business associates of victim organizations.”
“Heywood highlights that ransomware gangs won’t just encrypt data, they will steal it too, turning the screws on victims: “As we have seen in 2021, threat actors will continue stealing data before encrypting devices, putting pressure on victims to pay ransoms to unencrypt systems, and prevent the release of data.”
Threat actors could also focus on specific verticals and use cases, as highlighted by Masse: “Attackers have noticed that hitting certain industries will produce a higher likelihood of payment. We could see more attacks on healthcare and E&R organizations.
“Threat actors may well target high risk devices, such as critical medical support systems and their supporting infrastructure, where the risk of significant harm will be highest and therefore a payout will come quickly. This has already started to happen in regions such as Canada, with surgeries being delayed due to ransomware attacks.”
The trend of cooperation between threat actors will continue this year too, as Pratt explains: “We’ve seen time and time again that threat actors are willing to cooperate on attacks. There is a vibrant cybercrime marketplace, empowering a criminal supply chain that enables even unsophisticated threat actors to obtain the tools and services needed to launch successful campaigns.
“Vendors may specialize in stealing credentials, creating exploits, writing email lures, or hosting backend services. The bottom line is that the availability of tools and expertise is enabling the sophistication of criminal attacks to rise.”
- Weaponization of firmware attacks will lower the bar for entry
Masse believes a lack of visibility and control over firmware security will exacerbate the issue: “Certain industries where these attacks could be more probable should start thinking about the risks posed by the weaponization of hardware-level malware and exploits.
“They are very difficult to detect even in the best-case scenario. Rogue processes and memory mapping bypasses will be hot topics in 2022, and we can also expect to see threat actors targeting CPUs, the BIOS and microcode as part of a revised kill-chain for ransomware attacks.”
Policy makers should take note of this trend and enforce change, according to Julia Voo: “The weaponization of hardware-level exploits means that policy makers must step in to develop standards that can help to improve firmware security. By working with industry through a bottom-up approach, policy makers can drive meaningful change in an area that has largely been overlooked.”
- Hybrid work and sporting events will create more opportunities to attack users
The distribution of teams within hybrid working models means identity management will continue to play a key role, as Burkey highlights: “Identity must be solid, verified and robust. Organizations need to make sure that every activity coming from an endpoint is authentic. Is it really the user conducting these activities? Are they who they say they are? Too many organizations think being behind a firewall is enough to keep an endpoint safe, but this isn’t true. In the era of hybrid work, identity management will never be more important.”
The shift to hybrid work will also continue to create problems for organizational security, says Michael Howard: “Every single employee remains a target for attackers, with the volume of unmanaged and unsecure devices creating a huge attack surface to defend.” Masse believes this could make it easier for attackers to go after high-profile staff: “Threat actors could start to target the homes and personal networks of top executives, even government officials, as these networks are easier to compromise than traditional enterprise environments.”
Phishing will remain an ever-present threat in the era of hybrid work, Pratt explains: “Employees have been using personal devices for work or corporate devices for personal tasks, like checking emails. This will continue, and it’s likely there will be an increase in phishing attacks targeting both corporate and personal email accounts. This essentially doubles attackers’ chances of launching a successful attack, so organizations need to educate the workforce on the risks of their behavior and enforce technical controls to prevent compromise.”
High-profile sporting events will also present new opportunities for attackers to target users, according to Schläpfer: “The Winter Olympics in Beijing and FIFA World Cup in Qatar give threat actors plenty of scope for exploitation. Such large events attract opportunistic attackers, be it a direct attack on organizers, sponsors, participants and fans, or as phishing lures for malware and ransomware campaigns targeted at users. Organizations and individuals alike need to be aware of the risks.”
A new approach to security is needed
“The rise of hybrid working and continued innovation from threat actors means 2022 has plenty of nasty surprises in store for enterprise security,” comments Ian Pratt. “As a result, we need to go about securing the future of work in an entirely different way. Organizations should embrace a new architectural approach to security that helps to mitigate risk and enable resilience.
“By applying the principles of Zero Trust – least privilege access, isolation, mandatory access control and strong identity management – organizations can drastically reduce the attack surface and secure the future of work.”
HP Wolf Security can help organizations defend against the plethora of new attacks and risks facing them in 2022. By combining hardware-enforced software and security features with industry-leading endpoint security services, HP Wolf Security provides defense-in-depth and enhanced protection, privacy, and threat intelligence, gathering data at the endpoint to help protect the business at large.
E-Business
NITDA Okays NiRA’s Annual, Business Report

National Information Technology Development Agency (NITDA) has said it has granted approval to the 2025 Annual Report and 2026 Business Plan of the Nigeria Internet Registration Association (NiRA).

The Agency, through an official statement it released on Sunday, also revealed that the “nation’s active .ng domains have hit a total of 241,000.”
Hajiya Hadiza Umar, director of Corporate Communications, NITDA, who signed the statement disclosed that the approval came during a strategic meeting at NITDA headquarters, Abuja, where Adesola Akinsanya, president, NiRA led members of the association’s board to present its 2026 vision to NITDA.
According to NITDA, the endorsement will ensure the acceleration of the adoption of Nigeria’s country code top-level domain, .ng.
It was also disclosed that through the endorsement, both organisations have pledged to strengthen collaboration towards increasing the adoption of .ng domains across Nigeria and supporting the Federal Government’s digital economy agenda.
The statement also noted that Kashifu Inuwa Abdullahi, director general, NITDA has directed NiRA to work closely with NITDA’s e-Governance and Digital Economy Department to ensure effective implementation, project monitoring and regular progress reporting.
You have my full approval for these initiatives. Let us change our strategy, sync up more closely, and ensure everything we have agreed upon during this presentation is fully implemented by next year,” Inuwa stated.
Speaking on the association’s achievements in 2025, Akinsanya disclosed that NiRA recorded 98,285 new domain registrations, 71,470 renewals and 1,970 restorations, bringing the total number of active .ng domains to 241,000.
He said that beyond the growth in registrations, NiRA strengthened the security of Nigeria’s internet ecosystem through the implementation of Domain Name System Security Extensions (DNSSEC), while also improving registrar support and stakeholder engagement.
According to him, the association’s 2026 strategy is focused on positioning .ng and .gov.ng domains as the preferred digital identity platforms for government institutions, businesses and citizens.
Akinsanya praised NITDA for its continued support and called for joint awareness campaigns and digital capacity-building initiatives to encourage wider adoption among state governments, local councils and public institutions.
He further revealed that NiRA is upgrading its internal systems through increased automation and constitutional reforms aligned with global best practices to ensure long-term sustainability.
NiRA is looking into deeper stakeholder engagement and moving into areas where we see massive possibilities. We are specifically targeting startups and aligning with tech events across the country. With stronger collaboration, we can drive widespread adoption across every tier of government,” he said.
E-Business
FG Seeks Inclusive, Human-centred Artificial Intelligence Policies

The Federal Government has called for the development of inclusive and human-centred artificial intelligence policies that protect workers’ rights and prevent job losses while harnessing the technology’s potential to drive economic growth and productivity.

The Minister of Labour and Employment, Dr. Muhammad Dingyadi, made the call during the 114th Session of the International Labour Conference in Geneva, Switzerland, while responding to the report of the Chairperson of the Governing Body and the Director-General of the International Labour Organisation, titled “A Moment of Choice: Harnessing Artificial Intelligence for Decent Work,” on Thursday.
Dingyadi said the rapid advancement of AI is transforming labour markets, workplace practices and employment relationships globally, creating both opportunities and challenges for governments, employers and workers.
He noted that while AI can stimulate innovation, improve productivity and expand economic opportunities, it also poses significant risks, including job displacement, widening inequalities and the erosion of the human role in some sectors of the economy.
“The world is moving forward at a rapid pace, underpinned by advances in AI, and we as an organisation must match that pace. While welcoming the positive transformations AI offers, we are also pondering the uncertainties it connotes.
“These shifts, despite their benefits, also cast a dark cloud of uncertainty. Where AI creates new jobs, there may be job losses. Where digital and AI infrastructures are created, there may be a loss of the traditional role and value of the human factor in the work process. We therefore need a balanced approach that ensures that, while harnessing the benefits of AI, the attendant risks do not rob our societies of the gains of decent work,” he said.
The minister commended the ILO leadership for its commitment to advancing the organisation’s mandate despite mounting global economic and social challenges.
Highlighting Nigeria’s efforts to position itself within the rapidly evolving digital economy, Dingyadi said the Federal Government had established the Ministry of Communications, Innovation and Digital Economy to spearhead policies aimed at accelerating technological development and strengthening the country’s competitiveness.
According to him, Nigeria has already begun integrating digital technologies and AI into governance systems through the automation of civil service processes and public service delivery.
“I’m also pleased to inform you that Nigeria is steadily harnessing the gains of this initiative in our Public Service. There is the service-wide automation of civil service processes and communication with AI playing a significant role. Additionally, platform work is gaining ground,” he said.
The minister also welcomed ongoing discussions within the ILO on regulating work in the platform economy, stressing the need for labour standards that protect workers engaged in emerging forms of employment created by digital technologies.
Beyond AI, Dingyadi reiterated Nigeria’s longstanding call for reforms within the ILO, urging member states to accelerate the ratification of the 1986 Amendment to the organisation’s Constitution and review the criteria used to determine countries of Chief Industrial Importance.
He argued that such reforms would promote greater inclusivity, fairness and regional representation within the ILO’s governance structures.
The minister further urged countries to align the ILO Centenary Declaration and the Global Coalition for Social Justice with national development priorities to ensure that technological innovation contributes to social progress and decent work.
Nigeria’s intervention comes amid growing global debate over the impact of artificial intelligence on jobs and the future of work.
According to international labour and development agencies, AI is expected to automate some routine tasks while simultaneously creating new employment opportunities in technology, data science, digital services and other emerging sectors.
However, concerns persist that workers in administrative, clerical and repetitive occupations could face significant disruptions if governments fail to implement policies that support skills development, social protection and workforce transition.
The issue has become a central focus of discussions at the ongoing International Labour Conference, where governments, employers and workers’ representatives are examining how AI can be deployed in ways that promote productivity and economic growth without undermining labour rights, job security and social justice.
For Nigeria, the conversation is particularly significant as the country pursues an ambitious digital transformation agenda aimed at expanding broadband access, growing the digital economy and creating millions of technology-driven jobs for its youthful population.
Experts have repeatedly stressed that achieving these goals will require investments in digital skills, education and worker protections to ensure that the benefits of AI are broadly shared across society.
E-Business
Kaspersky Reveals Credential Abuse Techniques Rank as Attackers’ Most Effective Tactic

According to a recent global report by Kaspersky Security Services, password guessing and valid account misuse rank among the most effective tactics used by cyber criminals in 2025.

This trend reflects a strategic shift, as attackers move away from triggering endpoint protection with noisy malware, in preference of leveraging legitimate access to evade detection.
The ‘Anatomy of a Cyber World’ is an in-depth global report based on data gathered from Kaspersky Managed Detection and Response (MDR), Incident Response (IR), Compromise Assessment and SOC Consulting in 2025. It covers the most common adversary techniques, tools and detection scenarios and highlights the peculiarities of detected incidents.
According to the report, a significant portion of the most frequently monitored attack techniques revolves around credentials and identity management. This analysis, which examines the conversion rates* of various Indicators of Attack (IoA), highlights the following prevalent malicious tactics:
Password guessing – 34.8%. This technique entails attackers systematically trying different passwords until successfully gaining access to an account. It tops the conversion list due to its occurrence in both actual attacks and authorised security assessments, making it a persistent threat in today’s cybersecurity landscape. Organisations who rely on weak or reused passwords continues to enable this age-old strategy.
Local account creation – 34.7%. Once inside a system, attackers frequently create new local accounts to maintain access even if their original foothold is discovered and removed. This technique is frequently observed during security exercises and can be detected — but only with the right telemetry in place, which is often lacking.
Valid account abuse – 34.5%. Instead of deploying malware, attackers log in using stolen or compromised credentials and simply blend in with normal user activity. This makes detection significantly harder, as the access itself appears legitimate. The high conversion rate underscores why compromised credentials remain one of the most dangerous attack vectors.
Account manipulation – 32%. Attackers modify existing accounts to consolidate access such as by activating disabled accounts, altering group memberships, or escalating privileges. This reinforces the broader pattern — rather than introducing new tools, adversaries deepen their control using what is already there.
Network service discovery – 31.2%. Before moving deeper into a network, attackers typically scan for open services and systems they can reach. This reconnaissance step is a strong predictor of what follows: lateral movement and further exploitation. Detecting it early provides security teams a critical window to intervene.
The report ranks attacker techniques by how frequently observed activity ultimately resulted in confirmed malicious incidents. According to Kaspersky experts, while MITRE ATT&CK® catalogs a vast number of adversary techniques, effective detection requires prioritising behaviours with the highest probability of malicious intent while avoiding excessive false positives.
“Threat actors do not always need sophisticated malware to achieve their objectives. In many cases, legitimate administrative tools and compromised accounts remain the fastest and most effective way to move inside an organisation while avoiding detection.
The continued popularity of these techniques shows that organisations need deep visibility into attacker behaviour and the ability to correlate suspicious activity across different stages of an attack.
To address these challenges, companies can enhance their security with our solutions: Kaspersky Managed Detection and Response and Incident Response which cover the entire incident management cycle – from threat detection to continuous protection and remediation,” comments Sergey Soldatov, Head of Security Operations Center at Kaspersky.
Telecom3 days agoTikTok Tax Scam Exposed: Two Arrested Over Alleged £153 Million Fraud Scheme
E-Financial3 days agoIFC, NGX Group Unveil Nigeria Gender Programme
Telecom3 days agoNITDA Backs NiRA’s Ambitious 2026 Plan to Drive Massive .ng Domain Adoption
General News3 days agoNITDA, Benin’s Digital Agency Strengthen Ties on Digital Transformation
Telecom3 days agoFG Targets Alleged N3tn Capital Flight, Opens Airtime Credit Market to Nigerian Fintechs
Telecom3 days agoMTN Dismisses Data Theft Claims, Blames Network Challenges on Fibre Cuts, Vandalism
E-Financial17 hours agoBOI Wins Dual Honours @ EMEA Finance Awards for Sustainability and Social Impact Leadership
E-Financial17 hours agoCBN Imposes N100m Penalty on Dealing Bank Inadequate Processing of Forex Documents



















