E-Business
IT Managers are Inundated with Cyberattacks, Struggling to Keep Up, Says Sophos Global Survey
Sophos, a global leader in network and endpoint security, has announced the findings of its global survey, The Impossible Puzzle of Cybersecurity, which reveals that IT managers are inundated with cyberattacks coming from all directions and are struggling to keep up due to a lack of security expertise, budget and up to date technology.
The survey polled 3,100 IT decision makers from mid-sized businesses in the US, Canada, Mexico, Colombia, Brazil, UK, France, Germany, Australia, Japan, India, and South Africa.
Cybercriminals Use Multiple Attack Methods and Payloads for Maximum Impact
The Sophos survey shows how attack techniques are varied and often multi-staged, increasing the difficulty to defend networks.
One in five IT managers surveyed didn’t know how they were breached, and the diversity of attack methods means no one defensive strategy is a silver bullet.
“Cybercriminals are evolving their attack methods and often use multiple payloads to maximize profits. Software exploits were the initial point of entry in 23 percent of incidents, but they were also used in some fashion in 35 percent of all attacks, demonstrating how exploits are used at multiple stages of the attack chain,” said Chester Wisniewski, principal research scientist, Sophos.
“Organizations that are only patching externally facing high-risk servers are left vulnerable internally and cybercriminals are taking advantage of this and other security lapses.”
The wide range, multiple stages and scale of today’s attacks are proving effective. For example, 53 percent of those who fell victim to a cyberattack were hit by a phishing email, and 30 percent by ransomware. Forty-one percent said they suffered a data breach.
Weak Links in Security Increasingly Lead to Supply Chain Compromises
Based on the responses, it’s not surprising that 75 percent of IT managers consider software exploits, unpatched vulnerabilities and/or zero-day threats as a top security risk.
Fifty percent consider phishing a top security risk.
Alarmingly, only 16 percent of IT managers consider supply chain a top security risk, exposing an additional weak spot that cybercriminals will likely add to their repertoire of attack vectors.
“Cybercriminals are always looking for a way into an organization, and supply chain attacks are ranking higher now on their list of methods. IT managers should prioritize supply chain as a security risk, but don’t because they consider these attacks perpetrated by nation states on high profile targets. While it is true that nation states may have created the blueprints for these attacks, once these techniques are publicized, other cybercriminals often adopt them for their ingenuity and high success rate,” said Wisniewski.
“Supply chain attacks are also an effective way for cybercriminals to carry out automated, active attacks, where they select a victim from a larger pool of prospects and then actively hack into that specific organization using hand-to-keyboard techniques and lateral movements to evade detection and reach their destination.”
Lack of Security Expertise, Budget and Up to Date Technology
According to the Sophos survey, IT managers reported that 26 percent of their team’s time is spent managing security, on average.
Yet, 86 percent agree security expertise could be improved and 80 percent want a stronger team in place to detect, investigate and respond to security incidents.
Recruiting talent is also an issue, with 79 percent saying that recruiting people with the cybersecurity skills they need is challenge.
Regarding budget, 66 percent said their organization’s cybersecurity budget (including people and technology) is below what it needs to be.
Having current technology in place is another problem, with 75 percent agreeing that staying up to date with cybersecurity technology is a challenge for their organization.
This lack of security expertise, budget and up to date technology indicates IT managers are struggling to respond to cyberattacks instead of proactively planning and handling what’s coming next.
“Staying on top of where threats are coming from takes dedicated expertise, but IT managers often have a hard time finding the right talent or don’t have a proper security system in place that allows them to respond quickly and efficiently to attacks,” said Wisniewski.
“If organizations can adopt a security system with products that work together to share intelligence and automatically react to threats, then IT security teams can avoid the trap of perpetually catching up after yesterday’s attack and better defend against what’s going to happen tomorrow.
“Having a security ‘system’ in place helps alleviate the security skills gap IT managers are facing. It’s much more time and cost effective for businesses to grow their security maturity with simple to use tools that coordinate with each other across an entire estate.”
Synchronized Security Solves the Impossible Puzzle of Cybersecurity
With cyberthreats coming from supply chain attacks, phishing emails, software exploits, vulnerabilities, insecure wireless networks, and much more, businesses need a security solution that helps them eliminate gaps and better identify previously unseen threats.
Sophos Synchronized Security, a single integrated system, provides this much needed visibility to threats by integrating Sophos endpoint, network, mobile, Wi-Fi, and encryption products to share information in real-time and automatically respond to incidents. More information about Synchronized Security is available at Sophos.com.
The Impossible Puzzle of Cybersecurity survey was conducted by Vanson Bourne, an independent specialist in market research, in December 2018 and January 2019.
This survey interviewed 3,100 IT decision makers in 12 countries and across six continents in the US, Canada, Mexico, Colombia, Brazil, UK, France, Germany, Australia, Japan, India, and South Africa. All respondents were from organizations with between 100 and 5,000 employees.
Nigeria has taken a major step toward strengthening its digital governance framework as the National Information Technology Development Agency (NITDA) officially assumes control of the Nigeria Government Enterprise Architecture (NGEA) infrastructure.
The handover ceremony held in Abuja, marks the culmination of a high-level partnership with the Korea International Cooperation Agency (KOICA).
This transition signals a shift from fragmented IT projects to a unified, disciplined approach to national digital investment.
The NGEA initiative forms a core part of the e-Government Masterplan 2.0 (Ne-GMP 2.0), aimed at establishing a unified and structured approach to managing government IT investments and digital resources.
The framework is designed to ensure that technology deployment across public institutions aligns with national priorities while improving efficiency and accountability.
With the system now operational, government agencies are expected to adopt more integrated digital processes, allowing seamless data sharing and interoperability.
This is anticipated to reduce duplication, strengthen risk management, and translate policy objectives into measurable digital outcomes.
Over the past two and a half years, Nigerian technical experts worked closely with their Korean counterparts to develop the architecture framework, create reference models, and execute pilot programmes in key institutions.
These include the National Identity Management Commission, Nigeria Customs Service, Nigeria Immigration Service, and NITDA.
Officials say the NGEA represents a shift from fragmented digital efforts to a more coordinated, citizen-focused system.
The infrastructure is hosted by Galaxy Backbone Limited, providing a secure and reliable platform for nationwide deployment.
Looking ahead, NITDA is expected to work with government stakeholders to expand and sustain the system, while the Federal Ministry of Communications, Innovation and Digital Economy will provide policy guidance to ensure its adoption across the country.
Bosun Tijani, minister of Communications, Innovation and Digital Economy, has said the government is shifting focus from expanding access to ensuring “meaningful connectivity” that drives economic growth and inclusion.
Bosun Tijani, minister of Communications, Innovation and Digital Economy
The minister made the statement on Friday while addressing stakeholders at the inauguration of board members of the Universal Service Provision Fund (USPF) in Abuja.
He said that although Nigeria had made significant progress since the introduction of GSM services, millions of people, particularly in rural and underserved communities, remain either unconnected or unable to fully benefit from digital services.
Dr Tijani highlighted ongoing investments in digital infrastructure, including plans to deploy 90,000 kilometres of fibre optic network and nearly 4,000 telecom towers nationwide.
He said initiatives under the USPF had improved access through projects such as rural connectivity and digital facilities in schools but stressed that the next phase must prioritise effective usage.
“It is not enough to connect a community. We must ensure that schools can teach with digital tools and that small businesses can access market opportunities,” he said, citing a pilot project in the Kura community where connectivity has enhanced access to communication, education and healthcare.
Aminu Maida, executive vice chairman, Nigerian Communications Commission (NCC) also called for a shift towards meaningful connectivity, noting that while data usage had grown significantly, it remained concentrated in urban areas.
According to him, recent data shows that telecom usage has increased by about 160% over the past two years, largely driven by urban demand.
“When we drill down, we see that a lot of that growth is actually in urban centres. So, the gap between those who are not connected or not meaningfully connected is growing,” he said.
Dr Maida added that the trend underscored the need for the USPF board to intensify efforts to bridge both access and usage gaps across the country.
Both officials emphasised the importance of collaboration, sustainable investment models and improved digital literacy to ensure that connectivity translates into real economic benefits for Nigerians.
A jury in Los Angeles has found technology companies, Meta and Google liable for contributing to a young woman’s social media addiction, in a case being described as a landmark ruling.
The 20-year-old woman, identified only as Kaley, argued that she became addicted to Google’s YouTube and Meta’s Instagram from an early age due to their attention-driven design features.
According to her testimony, she began using YouTube at the age of six after downloading the app on her iPod Touch to watch videos about lip gloss and online games.
Kaley told the court that she joined Instagram at nine, bypassing parental restrictions put in place by her mother, and spent extended periods on social media.
The trial, which lasted about a month, with arguments and evidence from both sides.
Jurors also heard testimony from Mark Zuckerberg, chief executive, Meta and Adam Mosseri, Instagram head.
However, Neal Mohan, YouTube chief executive, did not testify.
The jury found that the companies were negligent in the design of their platforms and failed to adequately warn users about potential harms. Meta and Google were ordered to pay the woman $3 million in damages.
Jurors also recommended additional punitive damages, including $900,000 against YouTube and $2.1 million against Meta, according to company spokespersons.
The jury apportioned 70 per cent of the responsibility to Meta and 30 per cent to YouTube.
Kaley was present in the courtroom when the verdict was delivered, alongside parents of other teenagers who say they were harmed by social media use. Both companies said they plan to appeal the decision.
“We respectfully disagree with the verdict and will appeal. Teen mental health is profoundly complex and cannot be linked to a single app. We will continue to defend ourselves vigorously as every case is different, and we remain confident in our record of protecting teens online”, a Meta spokesperson said.
José Castañeda, Google spokesperson, said the case misunderstands YouTube, which is a responsibly built streaming platform, not a social media site.
Anti Graft Agencies Raise Alarm over Rising Crypto-Linked Financial Crimes
NITDA Takes Over National Digital Architecture System
NDIC Insures 99 Percent of Bank Customers
FG Shifting Focus to “Meaningful Connectivity” to Drive Inclusion – Minister
CBN Bars Chronic Loan Defaulters from Accessing Loans
Kaspersky Discovers New Phishing Campaign Exploiting Google Tasks Notifications to Steal Corporate Credentials
Spotify’s Loud & Clear Report Reveals Over ₦60Bn Revenue for Nigerian Artists in 2025
China Threatens to Shut Nigeria’s Satellite Over $11.44m Unpaid Debt
MTN Nigeria Posts Record N1.70 Trillion Pre‑Tax Profit, Declares N20 Dividend for 2025
Madonna University Taps Tech Guru Adote for Strategic Board Role
Telecom3 days agoUS Jury Finds Meta, Google Liable in Landmark Social Media Addiction Case
News3 days agoEU Pumps €290m into Nigeria’s Digital, Health, Agri Sectors
News3 days agoFirm Shares Tips for Updating Your Digital Habits for an AI-driven World
E-Business3 days ago5 Wealth-Building Strategies for Nigerian Women-led Businesses
E-Business3 days agoNigeria, Finland Sign Cybersecurity Pact
Telecom3 days agoMobile Money Transactions Accounted for $2 trillion in 2025
General News2 days agoNCC to Curb SIM Fraud, Strengthen Digital Security with New Platform
Broadcasting2 days agoNBC Boss Urges Content Ceators to Participate in DSO