E-Business
HP Top Cybersecurity Predictions for the Year
By HP Inc. Security Experts & Advisors
From ransomware pile-ons to increasingly commoditized supply chain TTPs, weaponized firmware exploits and targeted attacks on hybrid workers – the threat landscape is set to evolve at a worrying pace this year.
As 2021 drew to a close, our HP security experts and advisors reflected on what the year 2022 has in store. Here, we include insights from a range of HP security experts – including: Michael Heywood, Supply Chain Security Lead; Joanna Burkey, CISO; Dr. Ian Pratt, Global Head of Security for Personal Systems; Patrick Schläpfer, Malware Analyst; Alex Holland, Senior Malware Analyst; Julia Voo, Global Lead Cybersecurity and Tech Policy; and Michael Howard, Head of Security and Analytics Practice; alongside HP Security Advisory Board member and Partner at Deloitte, Robert Masse – identifying four key trends to look out for.
- Increasing commoditization of software supply chain attacks could result in more high-profile victims targeted
Supply chain attacks are likely to continue to present new opportunities for threat actors in 2022. According to Michael Heywood: “We’ll see supply chain attacks continue to rise in 2022 as threat actors search for weak links in software supply chains, targeting software being used widely and globally, or used by a specific company.”
As Joanna Burkey explains, this approach could create economies of scale for threat actors: “With the Kaseya breach – which impacted over 1,500 companies – we saw that supply chain attacks can be financially rewarding. This could lead to the continued commoditization of the tactics, techniques, and procedures (TTPs) used to conduct such attacks. This only adds fuel to the fire, giving threat actors more than enough motivation to exploit software supply chains this year.”
Ian Pratt says both SMBs and high-profile victims may be targeted: “Kaseya demonstrated a pathway to monetization for independent software vendor (ISV) breaches. This should be a wakeup call to all ISVs that even if their customer base doesn’t consist of enterprise and government customers, they can still be caught in the crosshairs of attackers looking to exploit their customers. Now that this blueprint is in place, we could see these types of attack become more widespread this year, targeting both SMBs and high-profile names.”
Some verticals are more likely to be targets of supply chain attacks than others, as Robert Masse explains: “Healthcare firms, as well as those in Energy and Resources (E&R), that use lots of different hardware and software from various vendors will be interesting targets for software supply chain attacks. Supply chain integrity will be vital in 2022, as attackers begin launching attacks quicker than organizations can invest in secure software development cycles.”
Organizations should also be aware of the threat posed by vulnerabilities in open-source software, as Patrick Schläpfer explains: “We’ll see an increase in open-source software packages containing malicious code. Attackers will proactively inject new threats into open-source libraries that feed into software supply chains. This could lead to more companies being compromised, regardless of whether they have a secure perimeter or good overall posture.”
- Ransomware gangs could put lives at risk and engage in ‘pile-ons’
Ransomware will continue to be a major risk this year, with victims potentially being hit more than once, as Burkey outlines: “What we’ll see will be akin to ‘social media pile-ons’, with ransomware victims repeatedly targeted by threat actors. Once an organization has been shown to be ‘soft’, others will pile-on to get their share of the action. In some instances, threat actors will hit a company multiple times in double or even triple dip extortion rackets.”
Extortion methods could also extend beyond the victim as ransomware gangs apply the pressure, comments Alex Holland: “Ransomware operators will almost certainly intensify the ways they pressure victims into paying their demands. Beyond data leak websites, attackers are using increasingly varied extortion methods, such as cold calling, and contacting customers and business associates of victim organizations.”
“Heywood highlights that ransomware gangs won’t just encrypt data, they will steal it too, turning the screws on victims: “As we have seen in 2021, threat actors will continue stealing data before encrypting devices, putting pressure on victims to pay ransoms to unencrypt systems, and prevent the release of data.”
Threat actors could also focus on specific verticals and use cases, as highlighted by Masse: “Attackers have noticed that hitting certain industries will produce a higher likelihood of payment. We could see more attacks on healthcare and E&R organizations.
“Threat actors may well target high risk devices, such as critical medical support systems and their supporting infrastructure, where the risk of significant harm will be highest and therefore a payout will come quickly. This has already started to happen in regions such as Canada, with surgeries being delayed due to ransomware attacks.”
The trend of cooperation between threat actors will continue this year too, as Pratt explains: “We’ve seen time and time again that threat actors are willing to cooperate on attacks. There is a vibrant cybercrime marketplace, empowering a criminal supply chain that enables even unsophisticated threat actors to obtain the tools and services needed to launch successful campaigns.
“Vendors may specialize in stealing credentials, creating exploits, writing email lures, or hosting backend services. The bottom line is that the availability of tools and expertise is enabling the sophistication of criminal attacks to rise.”
- Weaponization of firmware attacks will lower the bar for entry
Masse believes a lack of visibility and control over firmware security will exacerbate the issue: “Certain industries where these attacks could be more probable should start thinking about the risks posed by the weaponization of hardware-level malware and exploits.
“They are very difficult to detect even in the best-case scenario. Rogue processes and memory mapping bypasses will be hot topics in 2022, and we can also expect to see threat actors targeting CPUs, the BIOS and microcode as part of a revised kill-chain for ransomware attacks.”
Policy makers should take note of this trend and enforce change, according to Julia Voo: “The weaponization of hardware-level exploits means that policy makers must step in to develop standards that can help to improve firmware security. By working with industry through a bottom-up approach, policy makers can drive meaningful change in an area that has largely been overlooked.”
- Hybrid work and sporting events will create more opportunities to attack users
The distribution of teams within hybrid working models means identity management will continue to play a key role, as Burkey highlights: “Identity must be solid, verified and robust. Organizations need to make sure that every activity coming from an endpoint is authentic. Is it really the user conducting these activities? Are they who they say they are? Too many organizations think being behind a firewall is enough to keep an endpoint safe, but this isn’t true. In the era of hybrid work, identity management will never be more important.”
The shift to hybrid work will also continue to create problems for organizational security, says Michael Howard: “Every single employee remains a target for attackers, with the volume of unmanaged and unsecure devices creating a huge attack surface to defend.” Masse believes this could make it easier for attackers to go after high-profile staff: “Threat actors could start to target the homes and personal networks of top executives, even government officials, as these networks are easier to compromise than traditional enterprise environments.”
Phishing will remain an ever-present threat in the era of hybrid work, Pratt explains: “Employees have been using personal devices for work or corporate devices for personal tasks, like checking emails. This will continue, and it’s likely there will be an increase in phishing attacks targeting both corporate and personal email accounts. This essentially doubles attackers’ chances of launching a successful attack, so organizations need to educate the workforce on the risks of their behavior and enforce technical controls to prevent compromise.”
High-profile sporting events will also present new opportunities for attackers to target users, according to Schläpfer: “The Winter Olympics in Beijing and FIFA World Cup in Qatar give threat actors plenty of scope for exploitation. Such large events attract opportunistic attackers, be it a direct attack on organizers, sponsors, participants and fans, or as phishing lures for malware and ransomware campaigns targeted at users. Organizations and individuals alike need to be aware of the risks.”
A new approach to security is needed
“The rise of hybrid working and continued innovation from threat actors means 2022 has plenty of nasty surprises in store for enterprise security,” comments Ian Pratt. “As a result, we need to go about securing the future of work in an entirely different way. Organizations should embrace a new architectural approach to security that helps to mitigate risk and enable resilience.
“By applying the principles of Zero Trust – least privilege access, isolation, mandatory access control and strong identity management – organizations can drastically reduce the attack surface and secure the future of work.”
HP Wolf Security can help organizations defend against the plethora of new attacks and risks facing them in 2022. By combining hardware-enforced software and security features with industry-leading endpoint security services, HP Wolf Security provides defense-in-depth and enhanced protection, privacy, and threat intelligence, gathering data at the endpoint to help protect the business at large.
LG Electronics has reaffirmed its commitment to advancing innovation and smart living across Africa by participating as a supporting sponsor at the Africa Technology Expo (ATE) 2026, where the company is showcasing its latest portfolio of premium consumer electronics and home appliance innovations.
The two-day expo, themed around strengthening Africa’s enterprise technology ecosystem through collaboration and innovation, has brought together industry leaders, technology innovators, multinational companies, policymakers, and entrepreneurs to explore opportunities for cross-border partnerships and digital transformation across the continent.
As one of the supporting sponsors of this year’s event, LG’s interactive exhibition booth has become a major attraction, offering visitors firsthand experience of the company’s latest AI-powered technologies designed to enhance everyday life while delivering greater comfort, convenience, energy efficiency, and connectivity.
Among the innovations on display are the latest LG QNED TV, delivering exceptional picture quality and immersive entertainment; the iconic MoodUP™️ Refrigerator, which combines intelligent cooling with customizable LED door panels; the innovative LG WashTower™️, an all-in-one premium laundry solution that maximizes space and efficiency; the energy-efficient LG ARTCOOL Air Conditioner and LG Air Tower, designed to provide smarter climate control; alongside LG’s advanced Dehumidifier and other intelligent home solutions.
Speaking on LG’s participation, Mr. H.S. ji, Managing Director, LG Electronics West Africa, said: “Africa Technology Expo provides an excellent platform to engage with innovators, businesses, and consumers who are shaping the future of technology across the continent. At LG, innovation goes beyond creating advanced products, it is about developing meaningful solutions that improve everyday life.
“Our participation reflects our commitment to supporting Africa’s digital transformation while introducing intelligent technologies that make homes and workplaces smarter, healthier, and more energy-efficient.”
The Africa Technology Expo was established to foster stronger collaboration among African businesses, emerging enterprises, and multinational organisations. During the opening ceremony, the organisers emphasized the need for deeper continental collaboration to unlock Africa’s innovation and economic potential, noting that previous editions of the expo have facilitated approximately $192 million in business deals among participating companies.
LG’s presence at the event aligns with this vision by demonstrating how cutting-edge consumer technology can support economic growth, digital inclusion, and sustainable development across Africa.
Visitors to the LG booth are participating in live product demonstrations, interactive experiences, and expert consultations, gaining valuable insights into how LG’s AI-powered ecosystem seamlessly connects home appliances and entertainment products to deliver a smarter lifestyle.
As technology continues to reshape industries and everyday living, LG remains committed to driving innovation that empowers consumers, supports enterprise growth, and contributes to Africa’s evolving digital economy.
Small and Medium Enterprises Development Agency of Nigeria (SMEDAN) has secured a 12 million-dollar commitment from the South Korean Government to establish a Skills Acquisition Centre in Abuja to boost entrepreneurship and strengthen Nigeria’s Micro, Small and Medium Enterprises (MSMEs).
SMEDAN
The Director-General of SMEDAN, Mr Charles Odii, disclosed this in a statement on Sunday to commemorate the 2026 World MSME Day with the theme: “Empowering MSMEs through Innovation and Sustainable Industrial Development.”
Odii said the proposed centre would provide vocational and entrepreneurial training for thousands of young Nigerians and improve the productive capacity of small businesses across the country.
He said the agency was awaiting the allocation of land by the Federal Capital Territory Administration (FCTA) to commence the project.
According to him, SMEDAN is determined not to allow Nigeria to lose the opportunity presented by the South Korean Government’s intervention.
“We need land in the FCT to build the Skills Acquisition Centre. If the FCT Administration is unable to provide one, we will use our office premises in Idu, Abuja, because we do not want Nigeria to miss this 12 million-dollar commitment and opportunity offered by the Korean Government to support skills and vocational training,” he said.
Odii described MSMEs as the backbone of Nigeria’s economy, noting that the agency’s interventions were aimed at empowering small businesses to drive employment and economic growth.
“Small businesses are the heartbeat of Nigeria’s economy. They contribute significantly to employment generation and economic growth.
“By providing infrastructure, skills and financing, we are creating an enabling environment for them to grow, thrive and contribute meaningfully to national development,” he said.
The SMEDAN boss also announced the launch of a N500 million zero-interest Grow Fund to improve access to affordable finance for MSMEs.
He said the facility would be disbursed through cooperative societies, trade associations and business membership organisations under a revolving loan arrangement.
Odii explained that the association-based lending model was designed to improve accountability, ensure effective monitoring and guarantee that funds reached genuine entrepreneurs.
“We visited traders at the market because it is not enough to sit in offices and formulate policies without understanding the realities of the people we are meant to serve.
“We met with butchers, pepper sellers, vegetable traders, provision store owners and market leaders, and they all said one thing: they need access to affordable finance.
“That was why we immediately decided to launch the N500 million Grow Fund. We are not giving the money directly to individuals. We are giving it to associations that know their members and can monitor how the funds are used,” he said.
According to him, beneficiaries will access loans ranging from N250,000 to N500,000, depending on their business needs, without paying interest.
“The funding is meant to support and improve businesses. It should be used for working capital, workspaces, tools and other productive business needs.
“It is a revolving fund. When one beneficiary repays, another entrepreneur can access the same money. This way, the impact of the intervention continues to expand and more small businesses can benefit,” he added.
Odii said the agency planned to expand the fund through partnerships with state governments, development partners and financial institutions willing to provide matching funds.
He also disclosed that SMEDAN had commenced consultations on a new National MSME Policy, expected to be relaunched in November, to strengthen the policy framework for the sector.
He reaffirmed the agency’s commitment to supporting small businesses through skills development, access to finance and policies that would enhance their competitiveness and contribution to Nigeria’s economic development.
Nigeria’s weak data protection guardrails may undermine the recent directive by Central Bank of Nigeria (CBN) to banks, fintech firms, and other payment service providers to store payment transaction data generated within the country local servers.
CBN said that the new rule will start from January 1, 2027, as part of new measures to strengthen oversight of the fast-growing digital payments ecosystem.
This will also provide the country greater control over critical data infrastructure, allowing authorities to easily access records, conduct audits, enforce compliance, and investigate, especially in cases where criminal offenses are involved, reducing delays often caused by intermediation between local and foreign entities.
Apart from data sovereignty, the CBN added that moving transaction records from foreign servers will help drive investments in local data centers and cloud storage capacity.
Though reliable estimates are hard to come by, it is believed that Nigeria loses over N60 billion in hosting data in foreign servers.
But a coalition of civil society organizations (CSOs), has raised concerns over safety measures in place to protect data of Nigerians, despite having data protection laws in place.
The coalition, comprising Media Rights Agenda, Paradigm Initiative, Digital Rights Lawyers Initiative, and Accountability Lab Nigeria, among others, released the “Protected From the State, Not By It: Nigeria’s Data Protection Crisis Is a Crisis of Implementation,” where they criticized regulators’ failure to effectively enforce data protection laws, which led to rising cases of digital fraud and rampant illegal sale of sensitive information.
There have been leaks of sensitive voter, financial, and personal records.
For instance, there was alleged unauthorized access to the Continuous Voter Registration (CVR) database of the Independent National Electoral Commission (INEC) during a nationwide CVR exercise.
INEC earlier released the preliminary findings of its investigation into the matter, saying that it found no external breach of its systems and that the personal information of over 90 million registered voters was not compromised.
Despite this, CSOs argued that the incident underscored the lack of oversight, adding that it showed that while data privacy laws are in place, sensitive information can be easily moved from a secure government database and into the hands of private political entities.
The coalition also pointed out regulators’ failure to conduct human rights impact assessments on public surveillance systems before related programs were deployed, urging the government to act on these issues by subjecting public institutions to the same compliance requirements as private organizations.
“This is the asymmetry at the heart of the crisis: citizens are under-protected from data abuse and over-exposed to state monitoring and punishment,” the CSOs stated.
Additional report by coingeek
FCCPC Dismisses Report Claiming Approval of 48 New Loan Apps
ALTON Backs NCC’s Local Smartphone Manufacturing Drive to Widen Digital Access
LASTMA Launches 3367 Toll-Free Hotline for Emergency Response, Traffic Management
PalmPay Calls for Trust, Infrastructure and Responsible AI to Drive Payment Ecosystem Innovation
OADC Reaffirms Abundant Capacity in Data Centres in Nigeria to Host Financial Data
London Strengthens Global Investment Ties with Africa @ First Ever London-Africa Business Summit
Mobile Internet Gender Gap Widest in Africa – GSMA
FG Targets Alleged N3tn Capital Flight, Opens Airtime Credit Market to Nigerian Fintechs
Japan, UNESCO Boost Digital Learning in 15 CoEs with Donation of ICT Equipment
Good News for DStv Users: Watch over 160 Channels Without Paying Extra
General News3 days agoTinubu appoints Adigwe to head National Health Technology, Data Analytics Office
E-Financial3 days agoPaystack Unveils AI-powered Payments Tools
E-Financial3 days agoFidelity Bank Wins DBN Award for Expanding First-Time Credit Access to MSMEs
E-Financial3 days agoNRS, CITN Deepen Partnership to Strengthen Tax Awareness
General News3 days agoPalmPay Strengthens Data Protection Culture with Employee Privacy Workshop and Privacy Champions Programme
E-Financial3 days agoFCMB Turns Normal Banking into Rewards with New Mobile App Upgrade
Telecom3 days agoMeta, FG Unveil New Safety Measures to Protect Nigerian Teens Online
E-Financial3 days agoDespite Warnings, FG Draws Down $1.5Bn as First Tranche of FAB $5Bn Loan Deal