E-Business
HP Wolf Security Report Reveals Perfect Storm of Cybersecurity Risks that Threatens Hybrid Workplace
HP Inc. yesterday released its latest HP Wolf Security report: Out of Sight & Out of Mind, a comprehensive global study highlighting how the rise of hybrid work is changing user behavior and creating new cybersecurity challenges for IT departments.
The research shows that a growing number of users are buying and connecting unsanctioned devices outside of IT’s purview. It also highlights that threat levels are rising, with attackers increasingly successful at bypassing defenses and tricking users into initiating attacks through phishing. All of this is making IT support more complex, time-consuming, and costly than ever.
The report combines data from a global YouGov online survey of 8,443 office workers who shifted to Working from Home (WFH) during the pandemic, and a global survey of 1,100 IT decision makers conducted by Toluna. Key findings include:
- New Shadow IT buying and installing endpoints with security out of mind: ‘Shadow IT’ typically refers to non-IT departments deploying software beyond the purview of IT. This shadow is now spreading, with individuals procuring and connecting devices without being checked by IT. 45% of office workers surveyed purchased IT equipment (such as printers and PCs) to support home working in the past year.
However, 68% said security wasn’t a major consideration in their purchasing decision, while 43% didn’t have their new laptop or PC checked or installed by IT, and 50% said the same of their new printer.
- Phishing becoming increasingly successful: 74% of IT teams have seen a rise in the number of employees opening malicious phishing links or attachments on emails in the last 12-months. 40% of office workers surveyed aged 18-to-24 have clicked on a malicious email with almost half (49%) saying they have done so more often since working from home.
Of office workers that clicked or nearly clicked a link, 70% didn’t report it to IT – 24% didn’t think it was important, 20% cited the “hassle factor”, while 12% had a fear of reprisal or being punished.
- Increase in devices being compromised fuels growth in rebuild rates: 79% of IT teams report rebuild rates increased during the pandemic. Rebuild rates directly correlate to the number of endpoints that require wiping and reimaging because they have been compromised, which implies more attackers are successfully breaching outer defenses. The real figure could be higher still: 80% of IT teams worry that employee devices might be compromised and they don’t know about it.
“People often don’t know if they have clicked on something malicious, so the real numbers are likely much higher,” comments Ian Pratt, Global Head of Security for Personal Systems, HP Inc. “Threat actors don’t always announce themselves, as playing the ‘long game’ to move laterally and infiltrate higher-value infrastructure has proven to be more lucrative. For example, by using cloud backups to exfiltrate sensitive data in bulk, encrypting data on servers, then demanding a multi-million-dollar ransom.”
Pratt continues: “It shouldn’t be this easy for an attacker to get a foothold — clicking on an email attachment should not come with that level of risk. By isolating and containing the threat you can mitigate any harmful impact, preventing persistence and lateral movement.”
With threats rising, it’s becoming more difficult for IT teams to deliver security support. 77% of IT teams said the time it takes to triage a threat has increased in the past year, while an estimated 62% of alerts relating to the endpoint are false positives, leading to wasted time. With IT teams tied up dealing with alerts, it’s becoming harder for them to onboard employees and identify threats:
- 65% of IT teams said that patching endpoint devices is more time-consuming and difficult due to the mass shift to home working, while 64% said the same of provisioning and onboarding new starters with secure devices.
- As a result, IT teams estimate the cost of IT support in relation to security has risen by 52% in the last 12-months.
- 83% of IT teams said the pandemic has put even more strain on IT support because of home worker security problems, while 77% of IT teams say homeworking is making their job much harder and that they fear teams will burnout and consider quitting.
“As IT continues to grow in complexity, security support is becoming unmanageable,” Pratt concludes. “For hybrid working to be a success, IT security teams need to be freed from spending hours provisioning and fielding user access requests so they can focus on tasks that add value.
“We need a new security architecture that not only protects against known and unknown threats, but that helps to reduce the burden to liberate cybersecurity teams and users alike. By applying the principles of Zero Trust, organizations can design resilient defenses to keep the business safe and recover quickly in the event of a compromise.”
HP is helping organizations to secure the hybrid workplace by delivering endpoint security that provides teams with greater visibility and management tools. With HP Wolf Security organizations benefit from robust, built-in protection from the silicon to the cloud, and BIOS to browser.
HP Wolf Security provides the ideal support for securing the hybrid workplace – for example HP Sure Click Enterprise reduces the attack surface by rendering malware, delivered via email, browser or downloads, harmless through threat containment and isolation.
HP Wolf Security enables teams to deliver defense-in-depth and enhanced protection, privacy, and threat intelligence, gathering data at the endpoint to help protect the business at large.
E-Business
Firm Discovered a New Corporate Phishing Technique using a Popular AI Web Development Platform
Kaspersky has discovered that attackers have begun exploiting another legitimate service for malicious purposes – this time it is Tencent EdgeOne Pages, a platform for creating and hosting web applications.
Attackers are misusing its capabilities to generate phishing emails targeting corporate users. Previously Kaspersky has described similar attacks leveraging Google services and web applications generated by Bubble, an AI-powered app builder, to hunt for corporate credentials.
Employees across multiple industries including the industrial sector, sales, and government are among the targets. The goal of the attack is to steal login credentials for corporate resources. Over the past 30 days, the company’s experts have detected more than 8,000 phishing emails using this tactic, including messages in English, Korean, and Russian.
The Tencent EdgeOne Pages service is positioned as a platform for quickly creating and deploying web applications using AI. Scammers misuse it to generate and publish phishing pages in minutes with virtually no web development skills.
Attackers host phishing pages on EdgeOne’s legitimate cloud infrastructure and use trusted domains. As a result, such sites appear to be established and secure to many protective solutions, complicating the detection of such attacks.
How the attack begins
The user receives an email from the alleged “corporate email support team”. The message states that the account login credentials will expire in 48 hours, and that failure to update them may result in problems receiving or sending emails.
To avoid restrictions, the user is prompted to click a link and enter relevant information. Phishing emails are not limited to this narrative, and could deliver any corporate message, such as a message from the HR department or a notification of a received document that should be downloaded.
Clicking the link in the email opens a page with a form for entering the victim’s name, email address, and password. It is a simple design, with virtually no additional elements.
After the user enters their login and password, the data is transferred to a server controlled by the attackers.
“We are seeing a continuation of the trend in which attackers use AI and no-code platforms as part of their phishing infrastructure. We’ve previously observed a similar scheme using the Bubble platform, and here we have yet another example.
“While the communication used in these phishing attacks is typical and has been used before multiple times, the attack technique itself significantly lowers the barrier to entry for attackers and accelerates the creation of phishing resources.
“Previously this required at least basic web development skills, but now an infrastructure for fraudulent emails can be created in minutes,” comments Roman Dedenok, Anti-Spam Expert at Kaspersky.
E-Business
Kaspersky Report Shows Early 2026 Witnessed an Increase in Cyberattacks on the Manufacturing Sector
According to a new Kaspersky ICS CERT report, in Q1 2026 the percentage of industrial control systems (ICS) on which malicious objects were blocked reached 19.6% globally. Kaspersky security solutions blocked malware from 10,052 different malware families of various categories on industrial automation systems.
Regionally, the share of ICS computers that were attacked ranged from 27.4% in Africa to 9.1% in Northern Europe. Compared to the previous quarter, attacks on the manufacturing sector in Q1 increased in multiple regions, including in Europe and Asia.
Regional split
In terms of overall numbers across all industry sectors, five regions saw an increase in the share of attacked ICS computers in Q1 2026 compared to the previous quarter. These were Southern Europe, Russia, Northern Europe, Canada and Africa.
Industries
In Q1, biometric systems traditionally placed first in terms of the share of ICS computers on which malicious objects were blocked, at 26.4%. These systems commonly have Internet access, are used for email, and, in many cases, have minimal cybersecurity controls within the organisations that use these systems.
Regionally, Southern Europe leads the ranking based on the percentage figures for biometric systems, at 35.15%. Africa follows at 29.58%, and Central Asia comes in third at 28.53%.
In the manufacturing industry, Southeast Asia ranks first among regions in terms of the percentage of ICS computers attacked (23.21%), followed by Africa (21.36%) and South Asia (20.13%).
In 2025, Kaspersky and VDC Research estimated that in just the first three quarters of 2025 cyberattacks on manufacturing organisations via ransomware could have generated over $18 billion globally in losses. Actual business losses could have been even higher when factoring in supply-chain disruptions, reputational damage, and recovery expenses.
“Legacy operational technology systems remain deeply embedded in manufacturing environments, which makes them vulnerable. Supply chain complexity and branching of the trusted partner network expands the attack surface beyond the network perimeter.
Attackers are realising that targeting OT assets of an industrial enterprise is not rocket science, which is why factory shutdowns bring massive financial losses,” commented Evgeny Goncharov, Head of Kaspersky ICS CERT.
Nigeria Data Protection Commission (NDPC) has launched the Meta-Supported Initiatives for Data Protection (M-SIDP), a strategic programme aimed at strengthening data privacy awareness, regulatory compliance and institutional capacity across Nigeria’s digital ecosystem.
The initiative follows the conclusion of regulatory proceedings involving Meta Platforms Inc., the parent company of Facebook, Instagram and WhatsApp, over concerns relating to the processing of personal data belonging to Nigerian users. The matter was resolved in 2025 through a court-approved settlement.
Under the agreement, Meta committed to supporting a two-year programme of public-facing data protection measures designed to advance the objectives of the Nigeria Data Protection Act (NDP Act) 2023, the General Application and Implementation Directive (GAID), and the NDPC Strategic Roadmap and Action Plan (SRAP) 2023–2027.
Announcing the initiative, the Commission said the programme would strengthen safeguards for data subjects while promoting responsible data processing practices among organisations operating in Nigeria.
According to a statement signed by Itunu Dosekun, head of the NDPC Media Unit, the programme will focus on governance, research and development, safety and sustainability mechanisms for technology ecosystems, capacity building for Data Protection Officers (DPOs) and Data Protection Compliance Organisations (DPCOs), as well as public awareness campaigns targeted at vulnerable groups.
The Commission stated, “As part of the settlement, Meta committed to supporting a two-year programme of public-facing data protection measures that aligns with the objectives of the Nigeria Data Protection Act, 2023 (NDP Act), the NDP Act General Application and Implementation Directive (GAID) and the NDPC Strategic Roadmap and Action Plan (SRAP) 2023–2027.”
The NDPC stressed that the settlement does not limit its regulatory authority.
“Nothing in this settlement limits the Commission’s independent statutory powers as we continue to exercise our regulatory mandate in relation to data processing activities in Nigeria, in accordance with the NDP Act and other applicable laws,” it stated.
The development comes amid rising global scrutiny of technology companies over data privacy practices, with regulators in regions including the European Union and the United States tightening enforcement against breaches and non-compliance.
Nigeria has also intensified efforts to strengthen its privacy framework following the enactment of the Nigeria Data Protection Act in 2023, which established the NDPC as an independent regulator empowered to monitor compliance, investigate violations and impose sanctions.
Industry experts warn that increasing digital adoption across banking, telecommunications, e-commerce, healthcare and public services has heightened risks of identity theft, cybercrime and unauthorised data sharing.
The NDPC has in recent years stepped up enforcement actions against organisations that violate data protection rules, while also expanding accreditation for Data Protection Compliance Organisations and training for privacy professionals.
The Meta-supported initiative is expected to address gaps in public awareness and technical capacity, while also supporting research and policy development on emerging issues such as artificial intelligence, cross-border data transfers and platform governance.
The Commission said it would provide periodic updates on the implementation of the programme and called on stakeholders to support efforts to build a secure, transparent and accountable privacy ecosystem in Nigeria.
Airtel Africa Foundation Publishes Inaugural Annual Report
Mobile Internet Gender Gap Widest in Africa – GSMA
Kaspersky Warns of “Grey” Scam Websites Exploiting User Trust
Access Holdings Affirms Long-Term Value Strategy @ 4th AGM
Zoho Unveils Homegrown Server, Takes Bold Step Toward Tech Independence
CBN Extends PoS Geo-Fencing Enforcement Deadline to August 2026
FG to Launch Nationwide Free Digital TV Platform June 17
Jumia Nigeria Records Strong Q1 2026 Growth as Technology-Led Strategy Drives Market Expansion
NCC Drafts New Rules for Virtual Mobile Operators
FG to Balance Innovation with National Security with Stronger Drone Regulations
E-Business2 days agoKaspersky Report Shows Early 2026 Witnessed an Increase in Cyberattacks on the Manufacturing Sector
E-Business1 day agoFirm Discovered a New Corporate Phishing Technique using a Popular AI Web Development Platform
Telecom2 days agoNigeria, Others Stuck on WiFi 4 As World Adopts WiFi 6, WiFi 7
E-Financial2 days agoSenate Moves to Regulate Crypto Sector, Seeks Investor Protection
Telecom2 days agoYuno Partners with Onafriq to Unlock Pan-African Payments for Global Merchants
General News2 days agoIMF Warns Nigeria of Risks in $5Bn Swap Deal with First Abu Dhabi Bank
Telecom1 day agoNo More Deleting and Reposting: Instagram Unveils Long-Awaited Profile Update
Telecom1 day agoAirtel Nigeria Launches Web Data Calculator to Give Customers Greater Visibility into Data Usage