E-Business
IT Managers are Inundated with Cyberattacks, Struggling to Keep Up, Says Sophos Global Survey
Sophos, a global leader in network and endpoint security, has announced the findings of its global survey, The Impossible Puzzle of Cybersecurity, which reveals that IT managers are inundated with cyberattacks coming from all directions and are struggling to keep up due to a lack of security expertise, budget and up to date technology.
The survey polled 3,100 IT decision makers from mid-sized businesses in the US, Canada, Mexico, Colombia, Brazil, UK, France, Germany, Australia, Japan, India, and South Africa.
Cybercriminals Use Multiple Attack Methods and Payloads for Maximum Impact
The Sophos survey shows how attack techniques are varied and often multi-staged, increasing the difficulty to defend networks.
One in five IT managers surveyed didn’t know how they were breached, and the diversity of attack methods means no one defensive strategy is a silver bullet.
“Cybercriminals are evolving their attack methods and often use multiple payloads to maximize profits. Software exploits were the initial point of entry in 23 percent of incidents, but they were also used in some fashion in 35 percent of all attacks, demonstrating how exploits are used at multiple stages of the attack chain,” said Chester Wisniewski, principal research scientist, Sophos.
“Organizations that are only patching externally facing high-risk servers are left vulnerable internally and cybercriminals are taking advantage of this and other security lapses.”
The wide range, multiple stages and scale of today’s attacks are proving effective. For example, 53 percent of those who fell victim to a cyberattack were hit by a phishing email, and 30 percent by ransomware. Forty-one percent said they suffered a data breach.
Weak Links in Security Increasingly Lead to Supply Chain Compromises
Based on the responses, it’s not surprising that 75 percent of IT managers consider software exploits, unpatched vulnerabilities and/or zero-day threats as a top security risk.
Fifty percent consider phishing a top security risk.
Alarmingly, only 16 percent of IT managers consider supply chain a top security risk, exposing an additional weak spot that cybercriminals will likely add to their repertoire of attack vectors.
“Cybercriminals are always looking for a way into an organization, and supply chain attacks are ranking higher now on their list of methods. IT managers should prioritize supply chain as a security risk, but don’t because they consider these attacks perpetrated by nation states on high profile targets. While it is true that nation states may have created the blueprints for these attacks, once these techniques are publicized, other cybercriminals often adopt them for their ingenuity and high success rate,” said Wisniewski.
“Supply chain attacks are also an effective way for cybercriminals to carry out automated, active attacks, where they select a victim from a larger pool of prospects and then actively hack into that specific organization using hand-to-keyboard techniques and lateral movements to evade detection and reach their destination.”
Lack of Security Expertise, Budget and Up to Date Technology
According to the Sophos survey, IT managers reported that 26 percent of their team’s time is spent managing security, on average.
Yet, 86 percent agree security expertise could be improved and 80 percent want a stronger team in place to detect, investigate and respond to security incidents.
Recruiting talent is also an issue, with 79 percent saying that recruiting people with the cybersecurity skills they need is challenge.
Regarding budget, 66 percent said their organization’s cybersecurity budget (including people and technology) is below what it needs to be.
Having current technology in place is another problem, with 75 percent agreeing that staying up to date with cybersecurity technology is a challenge for their organization.
This lack of security expertise, budget and up to date technology indicates IT managers are struggling to respond to cyberattacks instead of proactively planning and handling what’s coming next.
“Staying on top of where threats are coming from takes dedicated expertise, but IT managers often have a hard time finding the right talent or don’t have a proper security system in place that allows them to respond quickly and efficiently to attacks,” said Wisniewski.
“If organizations can adopt a security system with products that work together to share intelligence and automatically react to threats, then IT security teams can avoid the trap of perpetually catching up after yesterday’s attack and better defend against what’s going to happen tomorrow.
“Having a security ‘system’ in place helps alleviate the security skills gap IT managers are facing. It’s much more time and cost effective for businesses to grow their security maturity with simple to use tools that coordinate with each other across an entire estate.”
Synchronized Security Solves the Impossible Puzzle of Cybersecurity
With cyberthreats coming from supply chain attacks, phishing emails, software exploits, vulnerabilities, insecure wireless networks, and much more, businesses need a security solution that helps them eliminate gaps and better identify previously unseen threats.
Sophos Synchronized Security, a single integrated system, provides this much needed visibility to threats by integrating Sophos endpoint, network, mobile, Wi-Fi, and encryption products to share information in real-time and automatically respond to incidents. More information about Synchronized Security is available at Sophos.com.
The Impossible Puzzle of Cybersecurity survey was conducted by Vanson Bourne, an independent specialist in market research, in December 2018 and January 2019.
This survey interviewed 3,100 IT decision makers in 12 countries and across six continents in the US, Canada, Mexico, Colombia, Brazil, UK, France, Germany, Australia, Japan, India, and South Africa. All respondents were from organizations with between 100 and 5,000 employees.
Kaspersky, a global cybersecurity company, and the Small and Medium Enterprises Development Agency of Nigeria (SMEDAN) have signed a memorandum of understanding (MoU) to assist small and medium businesses in the country to become more cyber-aware and less vulnerable to developing cyber threats.
The MoU reflects a shared view that SMEs, being the backbone of economy, require strong cybersecurity measures. Kaspersky and SMEDAN will work together on information sharing, training programmes, and other practical steps to raise awareness of digital threats and cybersecurity measures.
“Small and medium business owners are juggling a dozen things – accounting, promotion, legal issues. They are not cybersecurity experts. But they are being targeted by cybercriminals through malware, phishing, and online schemes using social engineering tactics that make them look realistic.
“Our aim is to provide these organisations with some best practice tools and inform about measures that will help them stay safer online,” says Chris Norton, General Manager for Sub-Saharan Africa at Kaspersky.
The cooperation will feed into SMEDAN’s wider SME development efforts, with Kaspersky contributing cybersecurity knowledge and joining forces on awareness campaigns. The idea is to bring cybersecurity-focused guidance into existing business support channels, and to do it in a way that actually makes sense to entrepreneurs who may not have technical teams behind them.
Charles Odii, DG/CEO of SMEDAN, comments: “Since the COVID-19 pandemic, digital adoption among business owners has accelerated significantly. Many now operate WhatsApp shops, use online banking, and send invoices via email, which has increased their exposure to cyber risks.
Together with Kaspersky, we intend to strengthen cybersecurity awareness and practices across Nigeria, helping SMEs protect their businesses as they embrace the digital economy.”
SMEDAN has long been a government agency that has consistently shown up for small business owners in Nigeria. Its work cuts across industries, regions, and stages of growth from traders and artisans to early-stage tech startups trying to get formalised. This partnership gives it another tool to help those businesses operate more securely in a digital world. For Kaspersky, the collaboration is part of a wider push across the continent to support under-resourced sectors that are quietly being targeted online.
Kashifu Inuwa, CCIE, the Director General of the National Information Technology Development Agency (NITDA), has emphasised that integrating intelligence, security, and sustainability is critical to driving Nigeria’s digital transformation and global competitiveness.
Inuwa made the remarks on Tuesday in Kano while delivering a goodwill message at the opening of the 19th International Conference (CONNOVATE 2025) of the Nigerian Computer Society (NCS), themed “Intelligent, Secure, and Sustainable Innovations for a Connected World.”
Represented by Engr. Salisu Kaka, Director of E-Government and Digital Economy Development, Inuwa said the three elements were now indispensable drivers of national progress. He highlighted the need for their convergence to unlock new opportunities in Nigeria’s technology sector, citing Estonia’s X-Road platform — which enables 99% of government services online — as a global model.
“In Nigeria, trust is the ultimate currency in our high-stakes digital environment, where scams and cybercrime are prevalent. Security builds and protects this trust,” Abdullahi said.
He stressed that while security provides the foundation, intelligence builds the structure, pointing to Artificial Intelligence (AI), Machine Learning (ML), and data analytics as tools for addressing Nigeria’s complex challenges. Warning that “innovation without security is unsustainable,” he likened it to “a high-performance race car without brakes.”
The DG urged the next wave of Nigerian startups to go beyond digitising existing processes to creating new value, citing AI-powered wealth management and ML-driven remote diagnostics as examples.
He further highlighted the various Federal Ministry of Communications, Innovation and Digital Economy (FMCIDE) initiatives supporting this vision, including the National Centre for Artificial Intelligence and Robotics (NCAIR), the Computer Emergency Readiness and Response Team (CERRT), the Nigeria Data Protection Act (NDPA) 2023, the national digital identity programme, interoperable payments, and human capital initiatives such as the 3 Million Technical Talent (3MTT) and Digital Literacy for All (DL4ALL) programmes.
Inuwa cited example with International Federation for Information Processing (IFIP) President, Antony Wong, that called for stronger protection and strategic use of data in the Global South to safeguard indigenous knowledge. He stressed the importance of legal clarity on data ownership as Nigeria’s cultural heritage in medicine, ecology, and art is digitised and incorporated into AI systems. Wong praised Nigeria’s role in the recent World Intellectual Property Organization (WIPO) treaty protecting genetic resources and traditional knowledge.
Delivering his welcome address, the NCS President, Dr. Muhammad Sirajo, said the conference would serve as a platform for IT professionals to address critical issues, including intelligent systems, fintech, sustainable energy, and innovations in agriculture, health, education, and national planning.
“This conference will provide an interdisciplinary platform for researchers, practitioners, and educators to present and discuss recent innovations, trends, and solutions for improving technological systems,” Sirajo said.
The week-long event includes plenary sessions, a doctoral consortium, a youth and entrepreneurship forum, the Fellows Forum, the Annual General Meeting, an IT quiz competition for students, and an induction ceremony for new members. It will conclude with the election of new national executives, a dinner, and an awards night honouring contributions to the ICT sector.
The African Development Bank (AfDB) is betting big on Artificial Intelligence (AI) as a catalyst for delivering Africa’s ambitious Agenda 2063.
With hands-on training in tools like ChatGPT and Google Gemini, the Bank believes the results could redefine how the continent plans, measures, and delivers its development goals.
Through its Joint Secretariat Support Office, the AfDB has provided technical and financial support to the 5th annual training workshop for African Union member states, focusing on the use of AI to track and implement the second ten-year plan (2024–2033) of Agenda 2063.
The five-day workshop, held in Lusaka, Zambia, was co-organised by the African Union Commission and the African Capacity Building Foundation.
Participants from across the continent rolled up their sleeves for hands-on training with emerging AI platforms like Ailyse, Google AI Studio, and Perplexity.
The goal of Africa’s multilateral development finance institution is to turn complex development data into actionable insights that can drive smarter decisions, faster interventions, and more accountable governance.
AbibuTamu, lead programme co-ordinator at the AfDB, said AI was now an indispensable tool for Africa’s future.
“These tools are not only revolutionizing how data is collected, analysed, and reported, they are also enabling more targeted policy interventions and efficient resource allocation,” Tamu told delegates.
Agenda 2063, dubbed “The Africa We Want,” is the African Union’s 50-year blueprint for inclusive growth and sustainable development. The second 10-year plan prioritises industrialisation, digital transformation, and sustainable livelihoods.
With AI now in the mix, African policymakers can track progress in real-time, spot bottlenecks before they choke projects, and reallocate resources where they are needed most.
The AfDB’s backing underscores a broader strategy of boosting both human and institutional capacity that propels African states to harness the digital revolution.
Beyond technical skills, the Lusaka workshop doubled as a peer-learning platform, with countries sharing real-world success stories on integrating AI into national planning and reporting.
“If Agenda 2063 is Africa’s long-term roadmap, this AI training is about upgrading the continent’s GPS that ensures leaders not only know the destination, but also have the intelligence to navigate every twist and turn on the way,” said Tamu.
OAfabric Goes Live in Nigeria, DRC, Redefines African Interconnectivity
FCCPC Bars Digital Loan Firm from Forcing Services on Residents
Vitel Wireless, First MVNO Begins SIM Distribution
Glo Subscribers Applaud Network Upgrade
Banigbe, T2 CEO says Nigeria’s Growth Hinges on Learning, Innovation, and Afrocentric Content
Telecom2 days agoFG Scraps 5 Percent Telecom Excise Duty Under New Tax Law
News2 days agoNACCIMA, TETFund Forge Alliance to Boost Innovation, Skills, Economic Growth
News2 days agoWinners Emerge in the PalmPay, Glo Campaign
General News2 days agoIHS Nigeria, Osun State partner to transform technical education
E-Financial2 days agoFlutterwave, iPaylinks Partner on Africa–Asia Payments
Telecom2 days agoRoqqu, SiBAN Unite to Drive Blockchain Innovation Across Nigeria
General News2 days agoHow Poor Public Power Supply Stalls Digital Adoption- Ekeh
General News2 days agoFG Hails Moniepoint’s Role in Showcasing Northeast’s Agricultural Resilience Through Digital Innovation