Connect with us

E-Business

Top 5 Tips to Strengthen SME Cybersecurity

Published

on

Kindly share this post

As the global community commemorated the United Nations’ ‘Micro-, Small and Medium-sized Enterprises Day’ yesterday, June 27, Kaspersky called on SMEs across Africa to rethink their approach to cybersecurity.

Whether a tech startup, small bakery, or a plumber, SMEs are reliant on either a computer or smartphone for some aspects of their business.

The possibility of having data and systems compromised by cybercriminals is something that can have potentially devastating consequences for any SME, as reiterated in the latest Kaspersky Threats to SMB report.

SMEs are significant contributors to economic growth and employment for many African nations. In fact, across sub-Saharan Africa there are upwards of 44 million micro, small, and medium enterprises (MSMEs)¹ which constitutes over 90%² of all enterprises and accounts for most jobs across the region.

Whether it is leaving passwords on sticky notes, or sharing them between employees, not having backups in place or lacking cybersecurity protection entirely, SMEs often neglect this essential part of their business.

Even small businesses with limited IT resources still need to protect all their working devices and company data from cyber threats.

“Cybercriminals are already way ahead of the curve, so much so that virtually every organisation will experience a breach attempt at some point. Our ongoing research continues to demonstrate how the cyber threat landscape is expanding, and no one or enterprise is beyond reach.

“These enterprises must therefore see cybersecurity not as a choice, but a necessity in the digital age,” says Bethwel Opil, Enterprise Client Lead at Kaspersky in Africa.

In fact, the latest Kaspersky Threats to SMB report shows that the number of SME employees globally encountering malware or unwanted software disguised as legitimate business applications has remained relatively steady year-on-year (2,478 in 2023 compared to 2,572 in 2022), and cybercriminals are persisting in their efforts to infiltrate these businesses.

Fraudsters are employing a multitude of methods, including exploiting vulnerabilities, employing phishing emails, deceptive text messages, and even utilising seemingly harmless YouTube links, all with the aim of gaining unauthorised access to sensitive data.

Furthermore, according to the Kaspersky report, the total number of detections of these malicious files aimed at SMEs globally during the first five months in 2023 reached 764,015. Exploits were the most prevalent threat to SMEs, accounting for 63% (483,980) of all detections.

To navigate the complex cybersecurity landscape, Kaspersky shares five must-have suggestions every SME should consider:

  1. Endpoint Security: A key vulnerability in many businesses is the endpoint – the laptops, smartphones, and other devices that employees use every day. Endpoint Detection and Response (EDR) technology is designed to protect these access points from potential cyber threats, keeping data safe.

A SME’s EDR may include tools like advanced detection engines, real-time analytics, and the ability to hunt, investigate, and centrally respond to evasive threats across the protected infrastructure. There should be applied threat intelligence and visibility into endpoints.

  1. VPN (Virtual Private Network): A VPN enables a secure connection over the Internet, protecting data from cybercriminals and hackers. For SMEs who have employees working remotely, a VPN is essential to maintain secure connections.

These solutions are especially useful when using public Internet connections, such as in coffee shops, airports, or guest houses which can be vulnerable to hackers. A VPN gives users a secure connection which separates hackers from the data they are hoping to steal.

  1. Cybersecurity awareness training: Education is the first line of defence. Continuous cybersecurity awareness training can significantly reduce the risk of successful cyberattacks. Employees who can identify phishing scams, use strong passwords, and follow secure online practices are valuable assets in the ongoing fight against cybercrime.

This is where a series of interactive trainings through solutions like the Kaspersky Automated Security Awareness Platform can be a good starting point to instil in employees the importance of cybersecurity and give them advice and recommendations.

  1. Backups: Backups ensure that in the event of a cyberattack the business can recover quickly and with minimal disruption. Backups should be performed regularly and stored off-site or on the cloud for maximum protection.
  1. Cloud security: As more SMEs embrace the cloud, securing these environments is critical. Using a trusted cloud service provider and employing cloud-specific security measures to protect data is something that SMEs must understand is non-negotiable.

A SME is still responsible for getting their data into the cloud and they need to take the necessary steps to keep it safe while doing so.

“The digital landscape is complex and always evolving. By focusing on these five critical areas, SMEs can protect themselves and their customers from a significant number of potential cyber threats. Cybersecurity is an investment that pays off by safeguarding a company’s reputation and customer trust,” Opil concludes.

Kaspersky encourages all SMEs to act this ‘Micro-, Small and Medium-sized Enterprises Day’ by reevaluating their cybersecurity measures, investing in their future, and ensuring they are doing their part in contributing to a secure and resilient digital Africa.


Kindly share this post

Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

E-Business

Nigerians to Pay More to Obtain Multipurpose National ID Cards in 46 Hours

Published

on

Kindly share this post

National Identity Management Commission (NIMC) has said that Nigerians will pay through their banks to access general multipurpose card,

Nigerians to Pay More to Obtain National Identity Card in 46 Hours

Abisoye Odusote, director general/CEO, NIMC who stated this however said that NIN is free, but users will have to pay to obtain the card within 48 hours.

She said: “Just like how you pay to access your ATM cards in the banks, Nigerians will pay through the banks to access their cards within 48 hours after payment to get the digital multipurpose card.”

Applicants will get requests with their NIN via a self-service online portal or the banks, adding that they will have to pay through the banks.

The general multipurpose card will be launched in partnership with the NIMC and the Central Bank of Nigeria (CBN) and powered by the Nigeria Inter-bank Settlement System (NIBBS) and AfriGo.

Kayode Adegoke, head of Corporate Communications, NIMC, said the National ID card, which is embedded with verifiable national identity features, is backed by NIMC Act No 23 of 2007, mandating it to enroll and issue a general multipurpose card to Nigerians and legal residents.

According to Adegoke, the card will address the demand for physical identification, allowing holders to prove their identity, give them access to government and private social services, facilitate financial inclusion for Nigerians, empower citizens, and encourage increased participation in nation-building.

Credit: Legit

 


Kindly share this post
Continue Reading

E-Business

Collaborative Action Needed to Boost Digitalisation in Nigeria and Support Economic Growth

Published

on

Kindly share this post

In the face of serious economic and developmental challenges, the Nigerian Government through the Strategic Blueprint of the Federal Ministry of Communications, Innovation, and Digital Economy has identified digitalisation as a key enabler to stabilise and strengthen the macroeconomic environment.

L-R: Juergen Peschel, Chief Executive Officer, 9Mobile; Dr. Bosun Tijani, Honourable Minister of Communications, Innovation, & Digital Economy; Dr. Aminu Maida, Executive Vice Chairman, Nigerian Communications Commission; Gbenga Adebayo, Association of Licensed Telecommunications Operators of Nigeria (ALTON); Bella Disu, Executive Vice Chairperson, Globacom; Karl Toriola, Chief Executive Officer, MTN; Angela Wamola, Head of Sub-Saharan Africa, GSM Association (GSMA); Ibrahim Dikko, Chief Executive Officer, Backbone Connectivity Networks Nig. Ltd.; at the GSMA Nigeria Digital Economy Report launch in Abuja on May 9 2024.

It is pursuing structural reforms, creating an environment conducive to private and public sector growth and job creation, while concurrently recognising the need to diversify away from the reliance on the oil and extractives sector. This shift towards diversification underscores the digital sector’s significant role in steering Nigeria towards a more resilient and dynamic economic future.

The largest contribution of the digital sector to Nigeria’s overall GDP is through the impact digitalisation has on the productivity of other sectors. For example, in the short-term, measures such as cash transfers to citizens can be done more quickly and efficiently using mobile money payment platforms. Digital technologies also boost productivity in the agricultural sector through increased use of agricultural inputs, better storage facilities and more coordinated support across agencies with the use of digital technologies to communicate and support small-scale farmers. 

It is estimated that, in 2023, the telecoms sector was contributing 13.5% to the GDP of Nigeria. Considering the direct and indirect contribution of the mobile ecosystem, as well as the productivity impact throughout the economy, the telecom sector’s contribution to Nigeria’s overall economic activity is much greater, estimated at 33 trillion NGN in 2023, with 2.4 trillion NGN in tax revenue contributions. 

The GSMA today published its latest report ‘The role of mobile technology in driving the digital economy in Nigeria’ which addresses the challenges hindering the growth and development of the telecommunications industry and the crucial role of the mobile sector in Nigeria’s economic development. Connectivity to mobile services, including Mobile Money is the foundation on which digitalisation is built. The Mobile Network Operators (MNOs) are committed to investing to support the realisation of the digitalisation ambitions that will unlock economic growth and development in the country.

Navigating a complex operating environment

To unlock these economic opportunities, connectivity and mobile financial services are crucial foundations. The GSMA’s report emphasises that while 29% of Nigerians are regularly using mobile internet, there remains untapped potential, as 71% are not accessing these services on a regular basis. An improved policy environment has the potential to help the industry boost coverage and adoption, resulting in 15 million additional internet users by 2028. However, the sector faces challenges to infrastructure deployment.

These include:

  • Complex and costly process of securing Rights of Way (RoW) significantly increases the time and costs associated with rolling out infrastructure.
  • The complex tax environment in Nigeria, providing for high and increasing costs of tax compliance because of the complex and overlapping tax structure within the country.
  • Increasing costs are making it difficult for the industry to maintain sustainable levels of investment. The primary driver of this has been increases in the cost of power for sites due to the rapid increases in the price of fuel, increased government fees and levies, and increased demand for forex, in an import-dependent environment, due to contractual obligations for network infrastructure and services that are denominated in USD.

Transforming Nigeria into a digital economy

An enabling policy and regulatory framework will be critical to realising the full potential of Nigeria’s digital transformation, as recognised in Nigeria’s Strategic Plan 2023 – 2027 as well as the Federal Ministry’s National Broadband Alliance for Nigeria (NBAN). Without universal access to digital connectivity, a broader digital transformation of the Nigerian economy is not possible.

It is clear that the mobile industry is a key partner for the government in achieving its objectives and can contribute to some of the key elements of the government’s plan. The value of this contribution can significantly increase with the necessary support from government required to overcome the obstacles outlined above.

To this end, the report recommends initiatives to support policymakers in creating an economic and regulatory environment that supports growth, investment, and competition.

These include implementing a legal framework for Critical National Infrastructure to address challenges in building network infrastructure; simplifying and improving the process for issuing RoW and standardising it across the country; reducing the industry’s tax burden to help cut operating costs; and creating a regulatory environment that supports sustainable investment.

Angela Wamola, Head of Sub-Saharan Africa at the GSMA, said: “High-speed connectivity is the bedrock of any digital nation, and the Nigerian government recognises the mobile industry’s role in laying key foundations on which digital transformation is built.

“Future policies should be geared towards reducing the cost and complexity of infrastructure rollout to encourage investment and boost the adoption of mobile broadband.

“The impact of such actions would go far beyond mobile, driving productivity gains across the economy and creating millions of new jobs in Nigeria.”

 


Kindly share this post
Continue Reading

E-Business

Kaspersky Reports Show Every Third Cyber Incident was Due to Ransomware

Published

on

Kindly share this post

Ahead of International Anti-Ransomware Day on May 12, Kaspersky’s latest research reveals a concerning trend in the global cybersecurity landscape, with ransomware attacks accounting for every third cyber incident in 2023.

The report sheds light on the escalating threat of targeted ransomware groups, which have seen a Kaspersky30% increase globally compared to 2022, along with a 71% surge in known victims.

Kaspersky’s research, covering 2022 and 2023, revealed a worrisome escalation in targeted ransomware groups. The data indicated a staggering 30% global increase in the number of these groups compared to 2022, accompanied by a 71% surge in known victims of their attacks.

Unlike random assaults, these targeted groups set their sights on government agencies, prominent organisations, and specific individuals within enterprises. As cybercriminals continue to orchestrate sophisticated and extensive attacks, the threat to cybersecurity grows ever more pronounced.

In 2023, Lockbit 3.0 emerged as the most prevalent ransomware, leveraging a builder leak in 2022 to spawn custom variants targeting organisations worldwide. BlackCat/ALPHV ranked second, until December 2023, when a collaborative effort by the FBI and other agencies disrupted its operations.

However, BlackCat quickly rebounded, underscoring the resilience of ransomware groups. Third on the list was Cl0p, which breached the managed file transfer system MOVEIt, impacting over 2.5 thousand organisations by December 2023, according to New Zealand security firm Emsisoft.

In its 2023 State of Ransomware report, Kaspersky also identified several noteworthy ransomware families, including BlackHunt, Rhysida, Akira, Mallox, and 3AM. Moreover, as the ransomware landscape evolves, smaller, more elusive groups are emerging, posing new challenges to law enforcement.

According to the research, the rise of Ransomware-as-a-Service (RaaS) platforms further complicated the cybersecurity landscape, emphasising the need for proactive measures.

Kaspersky’s incident response team noted that ransomware incidents accounted for every third cybersecurity incident in 2023. In the research, attacks via contractors and service providers emerged as prominent vectors, facilitating large-scale assaults with alarming efficiency.

Overall, ransomware groups demonstrated a sophisticated understanding of network vulnerabilities, utilising a variety of tools and techniques to achieve their objectives.

They used well-known security tools, and exploited public-facing vulnerabilities and native Windows commands to infiltrate their victims, highlighting the need for robust cybersecurity measures to defend against ransomware attacks and domain takeovers.

“As ransomware-as-a-service proliferates and cybercriminals execute increasingly sophisticated assaults, the threat to cybersecurity becomes more acute. Ransomware strikes persist as a formidable menace, infiltrating critical sectors and preying on small businesses indiscriminately.

“To combat this pervasive threat, it’s imperative for individuals and organisations to fortify their defenses with robust cybersecurity measures. Deploying solutions such as Kaspersky Endpoint Security and embracing Managed Detection and Response (MDR) capabilities are pivotal steps in safeguarding against evolving ransomware threats,” commented Dmitry Galov, head of research center, Kaspersky’s GReAT.

 


Kindly share this post
Continue Reading

Trending