Connect with us

E-Business

Sophisticated Cyberattacks Drive Innovation Btw Adversaries & Defenders- Cisco

Published

on

Cisco-Logo-Sml1.jpg
Kindly share this post

Both the attackers and defenders in the cyber world are innovating. The Cisco® 2015 Midyear Security Report released on Tuesday, tell us how.

The report which analyzes threat intelligence and cybersecurity trends, reveals the critical need for organizations to reduce time to detection (TTD) in order to remediate against sophisticated attacks by highly motivated threat actors.

The Angler Exploit Kit represents the types of common threats that will challenge organizations as the digital economy and the Internet of Everything (IoE) create new attack vectors and monetization opportunities for adversaries.

The report shows that new risks associated with Flash, the evolution of ransomware, and the Dridex mutating malware campaign, reinforce the need for reduced time to detection.

With the digitization of business and the IoE, malware and threats become even more pervasive, which shines a light on the security industry’s estimates of 100 to 200 days for TTD.

In contrast, the average TTD for Cisco Advanced Malware Protection (AMP), with its retrospective analysis of attacks that make it past existing defenses, is 46 hours.

The findings also underscore the need for businesses to deploy integrated solutions vs. point products, work with trustworthy vendors, and enlist security services providers for guidance and assessment.

Further, geopolitical experts have declared that a global cyber governance framework is needed to sustain economic growth.

Other key findings from the study include the following:

Angler: Adversaries Darting in the Shadows Angler is currently one of the most sophisticated and widely used exploit kits because of its innovative use of Flash, Java, Internet Explorer, and Silverlight vulnerabilities.

It also excels at attempting to evade detection by employing domain shadowing, as one of its techniques, accounting for the lion’s share of  domain shadowing activity.

Flash is Back – Exploits of Adobe Flash vulnerabilities, which are integrated into Angler and Nuclear exploit kits, are on the rise.

This is due to lack of automated patching, as well as consumers who fail to update immediately.

In the first half of 2015, there has been a 66 percent increase in the number of Adobe Flash Player vulnerabilities reported by the Common Vulnerabilities and Exposure (CVE) system over all of 2014.

At this rate, Flash is on pace to set an all-time record for the number of CVEs reported in 2015.

The Evolution of Ransomware – Ransomware remains highly lucrative for hackers as they continue to release new variants.

Ransomware operations have matured to the point that they are completely automated and carried out through the dark web.

To conceal payment transactions from law enforcement, ransoms are paid in cryptocurrencies, such as bitcoin.

Dridex: Campaigns on the Fly – The creators of these quickly mutating campaigns have a sophisticated understanding of evading security measures.

As part of their evasion tactics, attackers rapidly change the emails’ content, user agents, attachments, or referrers and launch new campaigns, forcing traditional antivirus systems to detect them anew.

A Call to Arms

The innovation race between adversaries and security vendors is accelerating, placing end users and organizations at increasing risk.

Vendors must be vigilant in developing integrated security solutions that help organizations be proactive and align the right people, processes, and technology.

Integrated Threat Defense – Organizations face significant challenges with point product solutions and need to consider an integrated threat defense architecture that embeds security everywhere, and will enforce at any control point.

Services Fill the Gap – As the security industry addresses increased fragmentation, a dynamic threat landscape, and how to cope with a rising shortfall of skilled talent, businesses must invest in effective, sustainable and trusted security solutions and professional services.

Global Cyber Governance Framework – Global cyber governance is not prepared to handle the emerging threat landscape or geopolitical challenges.

The question of boundaries — how governments collect data about citizens and businesses and share among jurisdictions — is a significant hurdle to achieving cohesive cyber governance as worldwide cooperation is limited.

A collaborative, multi-stakeholder cyber governance framework is required to sustain business innovation and economic growth on a global stage.

Trustworthy Vendors – Organizations should demand that their technology vendors are transparent about and able to demonstrate the security they build into their products in order to be considered trustworthy.

These organizations must carry this understanding across all aspects of product development starting with the supply chain and through the deployed life of their products.

They must ask vendors to contractually back up their claims and demand better security.

Speaking on the report, John N. Stewart, senior vice president, chief security and trust officer, Cisco, said, “Organizations cannot just accept that compromise is inevitable, even if it feels like it today. The technology industry must up the game and provide reliable and resilient products and services, and the security industry must provide vastly improved, yet meaningfully simplified, capabilities for detecting, preventing, and recovering from attacks. This is where we are leading.

“We are regularly told that business strategy and security strategy are the top two issues for our customers, and they want trusted partnerships with us. Trust is tightly linked to security, and transparency is key so industry-leading technology is only half the battle. We’re committed to providing both: industry-defining security capabilities and trustworthy solutions across all product lines.”

Also, Jason Brvenik, principal engineer, Security Business Group, Cisco, said, “Hackers, being unencumbered, have the upper hand in agility, innovation and brazenness. We see this time and again, whether it is nation state actors, malware, exploit kits or ransomware. A purely preventive approach has proven ineffective, and we are simply too far down the road to accept a time to detection measured in hundreds of days.

“The question of ‘what do you do when you are compromised’ highlights the need for organizations to invest in integrated technologies that work in concert to reduce time to detection and remediation to a matter of hours; and then they should demand their vendors help them to reduce this metric to minutes.”

 


Kindly share this post

Nigeria CommunicationsWeek believes that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. So since 2007, we have devoted our energy to independent reportage of technology and how they affect lives.

Continue Reading
Advertisement
Comments

E-Business

Study Reveals Majority of IT Professionals Show Openness to Cyber Immunity

Published

on

Kindly share this post

The cybersecurity landscape is evolving rapidly, with organisations seeking more robust ways to protect their digital assets. A recent global study conducted by Kaspersky reveals a growing shift toward proactive security strategies, particularly the adoption of Secure by Design development and Cyber Immunity – an innovative approach that embeds resilience directly into system architecture.

The study highlights that 90% of cybersecurity professionals surveyed in the Middle East, Turkiye and Africa (META) region are familiar with Secure by Design development. This methodology integrates security into the very fabric of a system from its inception, rather than treating it as an afterthought.

Such an approach is already employed in high-stakes industries like aerospace, where security cannot be bolted on later – it must be intrinsic. Despite its advantages, however, adoption has been slow due to challenges related to standardisation and cost.

Cyber Immunity is the next frontier in cybersecurity

Building on Secure by Design principles, Cyber Immunity takes cybersecurity a step further by creating systems that inherently resist attacks without the need for constant patching or additional security layers. The study reveals that most experts are familiar with Cyber Immunity but interpret it differently.

When asked what they associate with the term, 64% of respondents in the META region linked it to Secure by Design systems that remain resilient under attack, while 56% viewed it as a combination of technology and policy measures that block cybercriminal access. Another 48% connected it to highly skilled cybersecurity teams, indicating that while awareness is high, a unified understanding is still developing.

The growing demand for proactive security

One of the most striking findings is the optimism surrounding inherently secure systems. Over half of respondents in the META region (63%) believe it is already possible or definitely achievable to design systems capable of withstanding cyberattacks without relying on additional security solutions.

Another 32% think it might be possible, reflecting openness to this idea despite some uncertainty. This shift in mindset aligns with a broader industry trend: traditional reactive security measures are no longer sufficient.

With AI-powered threats and increasingly sophisticated attacks, organisations need solutions that do more than just detect breaches—they must prevent them by design.

Integrating Cyber Immunity into security strategies

The study emphasises that resilience, expertise, and flexibility will define the next generation of cybersecurity. While Secure by Design provides the methodology, Cyber Immunity represents the ultimate goal—systems so robust that they minimise reliance on external defences.

“For companies looking ahead, Cyber Immunity offers more than just protection — it brings clear business benefits. When systems are built to be secure from the ground up, there’s less need for constant updates, patches, and extra security tools. That means fewer costs, less strain on IT teams, and stronger, more reliable protection over time,” said Dmitry Lukiyan, Head of KasperskyOS Business Unit.

Most importantly in today’s threat landscape, Cyber Immunity offers robust protection against next-generation challenges — including AI-driven attacks capable of outmaneuvering traditional security measures.

When security becomes an intrinsic property of system architecture rather than an external addition, businesses gain more than just protection—they secure a competitive market advantage.

This proactive approach future-proofs critical infrastructure, enabling organisations to operate confidently even as threats evolve. It transforms cybersecurity from a defensive necessity into a strategic differentiator that accelerates digital transformation while mitigating risk.

As the cybersecurity environment becomes more complex, Cyber Immunity is emerging as a vital strategy. Organisations that adopt it now will not only enhance their protection but also position themselves ahead of the curve in an increasingly volatile digital world.

 


Kindly share this post
Continue Reading

E-Business

Konga launches Jara sales with 25% discount on Starlink kits, free delivery

Published

on

Kindly share this post

Konga, Nigeria’s leading composite e-commerce platform, has launched its inaugural 2026 shopping campaign, Konga Jara, offering 25 per cent discount on Starlink internet kits alongside free nationwide delivery.

Konga launches Jara sales with 25% discount on Starlink kits, free delivery

Konga

The campaign, drawing from the Nigerian concept of “jara” — the extra value traders add to purchases — aims to deliver exceptional deals across categories, helping shoppers turn new year aspirations into reality through affordable technology and value-driven shopping.

To qualify for the Starlink discount, customers must purchase kits on Konga.com, activate them at starlink.com/activate, and email activation details to [email protected] for verification against Starlink’s records. Discounts are subject to terms and conditions.

Konga said spotlighting Starlink underscores reliable internet’s role in Nigeria’s digital economy, supporting work, learning, entrepreneurship and communication for households and businesses.

Mr Onochie Melvin, Head of Commercial Planning at Konga, said: “We listened carefully to what Nigerians said they needed to truly kickstart 2026 on the right footing. Reliable internet connectivity emerged as the foundation upon which other aspirations depend.”

He added: “Students need it for online learning, entrepreneurs need it to scale digital businesses, and professionals rely on it for remote work. This Starlink offer is not just about selling products; it is about removing barriers that prevent Nigerians from fully participating in the digital economy.”

Beyond connectivity, Konga Jara provides genuine products from original equipment manufacturers (OEMs) with transparent pricing, warranties and authenticity guarantees.

As a composite e-commerce ecosystem, Konga integrates shopping, payments and logistics for seamless nationwide access, with exclusive deals shared via its social media channels throughout the campaign.

Shoppers can explore offers at www.konga.com and follow Konga’s official pages for updates across the Konga Group.


Kindly share this post
Continue Reading

E-Business

Firm Identifies Global Scam Activity Linked to the Release of Avatar 3

Published

on

Kindly share this post

The premiere of Avatar 3 has taken place in several countries and has been accompanied by a noticeable increase in online interest. Amid the heightened attention surrounding the release, Kaspersky experts identified an increase in cyber-scam campaigns that exploit the movie’s launch and users’ desire to watch it online. The fraudulent websites target users across multiple regions, indicating attempts by attackers to reach a global audience.

The scam operates as follows: cybercriminals create suspicious websites that offer online access to the Avatar 3 movie. Attackers place particular emphasis on localisation, publishing the sites in multiple languages to attract users from different countries. However, the translations are often poorly executed and contain grammatical errors and inconsistencies, which may serve as indicators of fraudulent activity.

When users attempt to start the video, they are presented with a fake media player and prompted to register in order to obtain “full” or “unlimited” access to the film. As part of the registration process, users are asked to provide personal information, including an email address and mobile phone number.

At later stages, scammers may request additional data, including payment details, under the guise of activating a “free trial.” This creates risks of credential compromise, particularly if users reuse passwords across multiple services, and may also lead to financial losses.

“Cybercriminals consistently exploit major movie premieres to capture users’ attention and increase the effectiveness of their schemes. We advise accessing films only through official platforms and exercising caution when encountering websites that request personal or payment information. It is also important to use reliable security solutions to protect all devices, including mobiles,” comments Olga Altukhova, Senior web content analyst at Kaspersky.

 


Kindly share this post
Continue Reading

Trending