Connect with us

E-Business

Cybercriminals Wipe Out Logs in Most Attacks –  Sophos

Published

on

Kindly share this post

Sophos, a global leader in innovating and delivering cybersecurity as a service, has released its Active Adversary Report for Security Practitioners, which found that telemetry logs were missing in nearly 42 per cent of the attack cases studied.

Cybercriminals Wipe Out Logs in Most Attacks -  Sophos

In 82 per cent of these cases, cybercriminals disabled or wiped out the telemetry to hide their tracks. The report covers Incident Response (IR) cases that Sophos analysed from January 2022 through the first half of 2023.

Gaps in telemetry decrease much-needed visibility into organisations’ networks and systems, especially since attacker dwell time (the time from initial access to detection) continues to decline, shortening the time defenders have to effectively respond to an incident.

“Time is critical when responding to an active threat; the time between spotting the initial access event and full threat mitigation should be as short as possible. The farther along in the attack chain an attacker makes it, the bigger the headache for responders. Missing telemetry only adds time to remediations that most organisations can’t afford. This is why complete and accurate logging is essential, but we’re seeing that, all too frequently, organisations don’t have the data they need,” said John Shier, field CTO, Sophos.

In the report, Sophos classifies ransomware attacks with a dwell time of less than or equal to five days as “fast attacks,” which accounted for 38 per cent of the cases studied. “Slow” ransomware attacks are those with a dwell time greater than five days, which accounted for 62 per cent of the cases.

However, defenders do need to be aware that fast attacks and the lack of telemetry can hinder fast response times, leading to more destruction.

“Cybercriminals only innovate when they must, and only to the extent that it gets them to their target. Attackers aren’t going to change what’s working, even if they’re moving faster from access to detection. This is good news for organizations because they don’t have to radically change their defensive strategy as attackers speed up their timelines. The same defenses that detect fast attacks will apply to all attacks, regardless of speed. This includes complete telemetry, robust protections across everything, and ubiquitous monitoring,” said Shier.

“The key is increasing friction whenever possible—if you make the attackers’ job harder, then you can add valuable time to respond, stretching out each stage of an attack.

“For example, in the case of a ransomware attack, if you have more friction, then you can delay the time until exfiltration; exfiltration often occurs just before detection and is often the costliest part of the attack. We saw this happen in two incidents of Cuba ransomware. One company (Company A) had continuous monitoring in place with MDR, so we were able to spot the malicious activity and halt the attack within hours to prevent any data from being stolen. Another company (Company B) didn’t have this friction; they didn’t spot the attack until a few weeks after initial access and after Cuba had already successfully exfiltrated 75 gigabytes of sensitive data. They then called in our IR team, and a month later, they were still trying to get back to business as usual.”

The Sophos Active Adversary Report for Security Practitioners is based on 232 Sophos Incident response (IR) cases across 25 sectors from Jan. 1, 2022, to June 30, 2023.

Targeted organizations were located in 34 different countries across six continents. Eighty-three percent of cases came from organizations with fewer than 1,000 employees.

The Sophos Active Adversary Report for Security Practitioners provides actionable intelligence on how security practitioners should best shape their defensive strategy.


Kindly share this post

Nigeria CommunicationsWeek believes that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. So since 2007, we have devoted our energy to independent reportage of technology and how they affect lives.

E-Business

Jumia to Cease Operations in Non-Strategic Markets

Published

on

Kindly share this post

Jumia Technologies, a leading e-commerce platform in Africa, has announced the planned closure of its operations in South Africa, operated under the brand name Zando, and Tunisia.

Jumia to Cease Operations in Non-Strategic Markets

The closure of these markets will allow Jumia to focus resources on its most promising markets that have a stronger growth potential.

For the year ended December 31, 2023, and the six months ended June 30, 2024, South Africa and Tunisia combined accounted for only 3.5% and 2.7% of total orders, and 4.5% and 3.0% of GMV, respectively.

The strategic decision to close operations in these markets is expected to improve overall operational efficiency across Jumia’s business.

Francis Dufay, Jumia CEO, said, “Since assuming the role of CEO, I have focused on initiatives aimed at strengthening our business and placing us on a path to profitability. After a thorough analysis, we made the difficult decision to close down our operations in South Africa and Tunisia. Both businesses account for a negligible portion of our overall operations.

Furthermore, competitive and macroeconomic conditions in both markets have limited each country’s growth potential and their contribution to our overall business has not aligned with expectations. Decisions like these are never easy and we are extremely grateful to team members in both countries, who worked tirelessly to serve our customers every day. We are also grateful to our suppliers, vendors and logistics partners in these markets. We deeply thank them for their hard work and service to Jumia.”

Jumia believes that exiting these markets and refocusing resources on its other nine markets will leave the company better positioned to accelerate overall growth and further improve efficiency.

The Company expects to cease operations in both South Africa and Tunisia by year end 2024.

 


Kindly share this post
Continue Reading

E-Business

NEPC Partners NDPC to Safeguard Exporters Data

Published

on

Kindly share this post

Nigerian Export Promotion Council (NEPC) and Nigerian Data Protection Commission (NDPC) have agreed to provide a framework that will safeguard personal and corporate transactions within the exporting community.

NEPC Partners NDPC to Safeguard Exporters Data

L-r: Dr. Vincent Olatuniji, national Commissioner/CEO, NDPC and Nonye Ayeni, executive director/CEO, NEPC

Nonye Ayeni, executive director/CEO of NEPC, disclosed this while receiving Dr. Vincent Olatuniji, national Commissioner/CEO of NDPC in her office in Abuja

Ayeni noted that with the huge number of registered exporters in the country striving to fulfil several international contract obligations for the export of Made-in-Nigeria products, there was a need to protect these sensitive data to ensure that Nigerian businesses remain competitive in global trade.

She observed that safeguarding personal and corporate data will further attract positive endorsements from the international community and help increase Foreign Direct Investments (FDI) into the country.

Olatuniji revealed that the NDPC was established primarily to collaborate with critical stakeholders to safeguard the rights of natural persons to data privacy, foster safe conduct of transactions involving the exchange of personal data, prevent manipulation of personal data and ensure that Nigerian businesses remain competitive in international trade through the safeguards afforded by a just and equitable legal framework on data protection.

He implored the NEPC to establish a data protection and control unit, as the unit he adviced will determine the purpose and manner for processing data to ensure that the methods by which data is collected are strictly in line with the principles of data collection.

Towards this end,  Olatunji said the NDPC was willing to provide capacity building on data protection and control for officers of the Council to make the NEPC compliant with global best practices.

 

 

 

 

 

 

 


Kindly share this post
Continue Reading

E-Business

FG Moves to Boost Productivity in Agriculture with Emerging Technologies

Published

on

Kindly share this post

The Federal Government’s commitment to ensure food security in Nigeria through the infusion of emerging technologies in the agricultural sector has necessitated the collaboration between the National Information Technology Development Agency (NITDA) and the National Agriculture Development Fund (NADF) to sign a Memorandum of Understanding, (MoU) that aims to boost productivity in Agriculture.

The NITDA’s Director General, Kashifu Inuwa, CCIE, revealed this on Thursday while receiving the NADF Executive Secretary, Muhammed Abu, and his team at the Agency Corporate Headquarter in Abuja for the signing of the MoU.

Inuwa said “President Bola Ahmed Tinubu GCFR is big and loud on boosting agriculture to ensure food security and today you cannot talk about boosting agriculture without talking about digital technology. And that is the reason we are here to sign an MoU to see how we can infuse emerging technologies into Agriculture so we can boost productivity in Agriculture.”

He said “Our Minister is quite interested in this as he personally has his own farm where he is doing all these and he started the conversation with you, our teams worked to draft the MoU, both legal teams reviewed the document and today we are here to sign the MoU for immediate implementation.”

“We have started our initiatives around agriculture like the National Adopted Village for Smart Agriculture (NAVSA), we have a demo farm here in Abuja, and we have been partnering with Universities across the country doing research and Startups to develop technologies and do proof of concepts with the technologies on farmlands,” said Inuwa.

“This year, we gave grants to Startups who have ideas on how to use emerging technologies to boost agriculture. And we are working with some of them in existing farms across the country to demonstrate how technology can boost productivity in that space,” he added.

Speaking at the signing the Executive Secretary of NADF Mohammed Abu Ibrahim remarked that the nexus between Agriculture and Technology cannot be over emphasized, as the agricultural sector is facing some temporary challenges like the issues of funding, climate change, insecurity and many more.

“We have seen interesting technological patterns which have given a lot of impact and  optimisation in our sector like AI, WAV, IoT and many more and we feel like without optimising agriculture and looking at it from this evidence-based perspective as a Fund we may not achieve much.

“There is no denying the fact that empirical evidence, especially data backed evidence, would help us to allocate our limited resources better. So, in our stride to see that we are doing a lot more with less we have decided to come in and especially be part of monitoring and evaluation which will eventually direct us towards achieving that mantra of ‘doing more with less’ and that is why we are here.”

He said the Fund is hopeful that this will be the first of many more of such collaborations.


Kindly share this post
Continue Reading

Trending