E-Business
IT Managers are Inundated with Cyberattacks, Struggling to Keep Up, Says Sophos Global Survey
Sophos, a global leader in network and endpoint security, has announced the findings of its global survey, The Impossible Puzzle of Cybersecurity, which reveals that IT managers are inundated with cyberattacks coming from all directions and are struggling to keep up due to a lack of security expertise, budget and up to date technology.
The survey polled 3,100 IT decision makers from mid-sized businesses in the US, Canada, Mexico, Colombia, Brazil, UK, France, Germany, Australia, Japan, India, and South Africa.
Cybercriminals Use Multiple Attack Methods and Payloads for Maximum Impact
The Sophos survey shows how attack techniques are varied and often multi-staged, increasing the difficulty to defend networks.
One in five IT managers surveyed didn’t know how they were breached, and the diversity of attack methods means no one defensive strategy is a silver bullet.
“Cybercriminals are evolving their attack methods and often use multiple payloads to maximize profits. Software exploits were the initial point of entry in 23 percent of incidents, but they were also used in some fashion in 35 percent of all attacks, demonstrating how exploits are used at multiple stages of the attack chain,” said Chester Wisniewski, principal research scientist, Sophos.
“Organizations that are only patching externally facing high-risk servers are left vulnerable internally and cybercriminals are taking advantage of this and other security lapses.”
The wide range, multiple stages and scale of today’s attacks are proving effective. For example, 53 percent of those who fell victim to a cyberattack were hit by a phishing email, and 30 percent by ransomware. Forty-one percent said they suffered a data breach.
Weak Links in Security Increasingly Lead to Supply Chain Compromises
Based on the responses, it’s not surprising that 75 percent of IT managers consider software exploits, unpatched vulnerabilities and/or zero-day threats as a top security risk.
Fifty percent consider phishing a top security risk.
Alarmingly, only 16 percent of IT managers consider supply chain a top security risk, exposing an additional weak spot that cybercriminals will likely add to their repertoire of attack vectors.
“Cybercriminals are always looking for a way into an organization, and supply chain attacks are ranking higher now on their list of methods. IT managers should prioritize supply chain as a security risk, but don’t because they consider these attacks perpetrated by nation states on high profile targets. While it is true that nation states may have created the blueprints for these attacks, once these techniques are publicized, other cybercriminals often adopt them for their ingenuity and high success rate,” said Wisniewski.
“Supply chain attacks are also an effective way for cybercriminals to carry out automated, active attacks, where they select a victim from a larger pool of prospects and then actively hack into that specific organization using hand-to-keyboard techniques and lateral movements to evade detection and reach their destination.”
Lack of Security Expertise, Budget and Up to Date Technology
According to the Sophos survey, IT managers reported that 26 percent of their team’s time is spent managing security, on average.
Yet, 86 percent agree security expertise could be improved and 80 percent want a stronger team in place to detect, investigate and respond to security incidents.
Recruiting talent is also an issue, with 79 percent saying that recruiting people with the cybersecurity skills they need is challenge.
Regarding budget, 66 percent said their organization’s cybersecurity budget (including people and technology) is below what it needs to be.
Having current technology in place is another problem, with 75 percent agreeing that staying up to date with cybersecurity technology is a challenge for their organization.
This lack of security expertise, budget and up to date technology indicates IT managers are struggling to respond to cyberattacks instead of proactively planning and handling what’s coming next.
“Staying on top of where threats are coming from takes dedicated expertise, but IT managers often have a hard time finding the right talent or don’t have a proper security system in place that allows them to respond quickly and efficiently to attacks,” said Wisniewski.
“If organizations can adopt a security system with products that work together to share intelligence and automatically react to threats, then IT security teams can avoid the trap of perpetually catching up after yesterday’s attack and better defend against what’s going to happen tomorrow.
“Having a security ‘system’ in place helps alleviate the security skills gap IT managers are facing. It’s much more time and cost effective for businesses to grow their security maturity with simple to use tools that coordinate with each other across an entire estate.”
Synchronized Security Solves the Impossible Puzzle of Cybersecurity
With cyberthreats coming from supply chain attacks, phishing emails, software exploits, vulnerabilities, insecure wireless networks, and much more, businesses need a security solution that helps them eliminate gaps and better identify previously unseen threats.
Sophos Synchronized Security, a single integrated system, provides this much needed visibility to threats by integrating Sophos endpoint, network, mobile, Wi-Fi, and encryption products to share information in real-time and automatically respond to incidents. More information about Synchronized Security is available at Sophos.com.
The Impossible Puzzle of Cybersecurity survey was conducted by Vanson Bourne, an independent specialist in market research, in December 2018 and January 2019.
This survey interviewed 3,100 IT decision makers in 12 countries and across six continents in the US, Canada, Mexico, Colombia, Brazil, UK, France, Germany, Australia, Japan, India, and South Africa. All respondents were from organizations with between 100 and 5,000 employees.
Mallam Kashifu Abdullahi, director-general, National Information Technology Development Agency (NITDA), has reaffirmed the importance of collaboration in advancing Nigeria’s digital transformation agenda.
L-R: Mallam Kashifu Abdullahi, director-general, National Information Technology Development Agency, with Brig. Gen., Abdulrahman Idris, team lead of the Senior Executive Course 46 2024, National Institute for Policy and Strategic Studies, Kuru, Jos during a strategic tour visit to the agency headquarters in Abuja.
Abdullahi disclosed this during a strategic engagement with participants of the 2024 Senior Executive Course 46 from the National Institute for Policy and Strategic Studies (NIPSS), a delegation led by Brigadier General Abdulrahman Idris.
Abdullahi emphasised that no organisation can achieve its goals in isolation, stressing the need for collaborative efforts to harness ideas, experiences and insights for national development. He highlighted the potential of collaboration between NITDA and NIPSS to leverage technology and digital innovation for driving economic growth, creating job opportunities and attracting foreign direct investment (FDI).
“At NITDA, we have re-imagined our social contract with Nigerians, focusing on improving service delivery and fostering the swift growth of the ICT sector,” said Abdullahi. He emphasised the agency’s commitment to serving Nigerians and outlined the strategic direction outlined in NITDA’s Strategic Roadmap and Action Plan (SRAP 2024-2027) 2.0. The SRAP is structured around eight pillars aimed at fostering digital literacy, building a robust technology research ecosystem, strengthening policy implementation, promoting inclusive access to digital infrastructure, enhancing cybersecurity, nurturing innovation and entrepreneurship, forging partnerships and cultivating a vibrant organisational culture.
The brigadier-general provided insights into NIPSS’s role as Nigeria’s foremost policy think-tank, tasked with developing top-class technocrats to drive national development initiatives. He highlighted NIPSS’s contributions to policy formulation and implementation over the years, emphasising the institution’s mandate to address issues of national interest, particularly in the digital economy sector.
The collaboration between NITDA and NIPSS underscores the importance of synergistic efforts in harnessing technology and innovation for national development. By leveraging each other’s expertise and resources, both organisations aim to drive economic growth, foster job creation, and position Nigeria as a leading player in the global digital economy.
Through strategic partnerships and collaborative initiatives, NITDA and NIPSS are poised to chart a path towards sustainable development, leveraging digital innovation as a catalyst for socioeconomic transformation and inclusive growth.
Ivorypay, a blockchain-based payment and remittance firm, has teamed with Tether, the stablecoin pioneer, to improve crypto-based transactions across Africa.
Tether is the business that developed the stablecoin, USDT, and with this agreement, it will mint and issue USDT straight to IvoryPay.
According to the partners, this agreement would provide more dependable and economical digital transaction choices to businesses and consumers across Africa.
Ivorypay will leverage Tether’s widespread acceptance to provide a buffer against the typically unpredictable nature of crypto-currencies, increasing user confidence in using digital currencies for daily transactions as well as cross-border transfers.
“Partnering with Tether is a strategic move that aligns perfectly with our vision of simplifying and securing crypto transactions across Africa,” said Oluwatobi Ajayi, CEO, IvoryPay.
He added: “It gives us easy access to the liquidity we need to cater to more businesses and individuals across the continent and to do that cheaper and faster than anybody else, which we believe will significantly enhance user trust and increase adoption rates across our platforms.”
“This strategic partnership between Ivorypay and Tether represents a transformative step for digital transactions across Africa,” said Aly Madhavji, managing partner of Blockchain Founders Fund.
“By incorporating USDT into their payment systems, IvoryPay aims to increase financial inclusion and streamline cross-border remittances, establishing a new standard for stability and efficiency in the region’s financial services We are thrilled to assist Ivorypay as they endeavour to create new opportunities for businesses and consumers across Africa.”
The Corporate Affairs Commission (CAC) has revoked the certificates of incorporation of NIPOST Properties and Development Company and NIPOST Transport and Logistics Services Limited.
This revocation followed the discovery of an illegal transfer of N10 billion in restructuring funds released by the Federal Ministry of Finance to the agency’s subsidiaries.
The CAC, in a statement on Monday, said, “The General Public is hereby informed that the Commission, sequel to its powers contained in Section 41 (7) of the Companies and Allied Matters Act No. 3 of 2020, revoked the Certificates of incorporation of the below-mentioned companies because the same was improperly procured. These companies are:
“1. NIPOST Transport and Logistics Services Company Ltd RC 1673881 and 2. NIPOST Properties & Development Company Ltd RC 1673971.
“By virtue of these revocations, the Companies are deemed to be dissolved and their Assets and Liabilities transferred to the Nigeria Postal Services established under the Nigerian Postal Services Act Cap N127 LFN 2004.”
It was gathered that CAC records confirm that as of November 8, 2023, some top officials of BPE control significant shares in the subsidiaries.
Responding to these discoveries, the Senate passed a resolution on December 30, 2023, for a probe into the matter.
The resolution declared the NIPOST subsidiaries in question “irregular and illegal” and recommended their immediate winding-up and deregistration.
The Senate resolution goes beyond immediate action; it demanded a thorough investigation into the N10 billion voted by the Ministry of Finance for NIPOST’s restructuring and recapitalisation.
Should evidence of “injudicious utilisation” surface, the Senate said the committee responsible must recover the full amount.
In its resolution of December 30, 2023, the Red Chamber said it uncovered an alleged illegal transfer of Federal Government shares in two NIPOST subsidiaries to private individuals.
The discovered infractions sparked outrage, prompting the lawmakers to call for immediate action.
Some individuals in key positions within the Bureau of Public Enterprises (BPE) and NIPOST were listed as shareholders of the two NIPOST subsidiaries.
Former SEC Leadership Failed to Regulate, Develop Capital Market- ASCSN
Students Loans’ Beneficiaries to Start Repayment 2 Years after Graduation- NELFUND:
Kenya to Extradite Anjarwalla, Binance Executive Linked to Tax Evasion to Nigeria
GPA Raises Alarm, Says Malaria Vaccine Can Cause Meningitis
Abdullahi, NITDA Boss Harps on Partnership to Drive Advance Digital Transformation Agenda
See Full List of Fake Loan Apps Blacklisted By CBN
FIRS Files Tax Evasion Charges against Binance
AXA Mansard Empowers Female SMEs with Financial, Digital Skills
IFC Invests in New 4DX Ventures Fund to Support Tech Startups in Africa
NGX RegCo, FRCN Unveil Roadmap for SFRS Adoption
Telecom2 days agoTelcos Record N27Bn Loss from Damaged Fibre Cables
Telecom2 days agoABoICT Lecture 2024 to Focus on Artificial Intelligence (AI) In A Digital Economy
News2 days agoWema Bank Launches 5th Edition of Youth-Focused Hackathon, “Hackaholics”
Telecom2 days agoNCAIR Relaunch: Pantami, Tijani Fight for Credit
News2 days agoFG to Secure Fresh $2.25Bn World Bank Loan
E-Business2 days agoForex Volatility will Not End Overnight- CBN Gov
E-Financial2 days agoDimon, JP Morgan CEO Describes Bitcoin as Fraud, Ponzi Scheme
E-Financial2 days agoAccess Holdings to Use Tech in Raising N365bn Capital