Connect with us

E-Business

Experts Highlight Trusted Relationships as Key Vector

Published

on

Kindly share this post

In 2023, more than 1/5 of cyberattacks persisted for over a month, the annual Kaspersky Incident Response 2023 report has revealed, with trusted relationships emerging as one of the main attack vectors in these prolonged cases.

The report draws on the results of Kaspersky’s cyberattack investigations throughout the year, gathered when supporting organisations sought incident response assistance or when hosting expert events for their internal incident response teams.

Primary reasons of organisations approaching Kaspersky Incident Response team with service requests were encrypted files (32.8% of requests), suspicious activities (31%), data leakage (20%), and also included non-authorised accesses (3%), service unavailability (3%) and money theft (1.6%).

Among initial attack vectors of the investigated incidents were exploiting public facing application (42.4%), compromised accounts and BruteForce attacks (28.8% in total), trusted relationships (6.78%), phishing (5%), insider’s activity (3.4%).

Kaspersky Incident Response 2023 report indicates that long-lasting cyberattacks that persist for more than a month constituted 21.85% of the total, increasing from 2022 by 5.55%.

One notable trend observed in these attacks was the exploitation of trusted relationships as a primary vector. Compromises leveraging trusted relationships have occurred previously, but in 2023 their frequency increased.

As this method of attack enables threat actors to infiltrate multiple victims through a single compromised organisation, investigative teams face several additional challenges. Firstly, initially targeted organisations don’t always recognise the importance of thorough investigations and may be reluctant to cooperate.

Secondly, attacks initiated through trusted relationships often require more time to progress from the initial intrusion to the final incursion phase. Therefore 50% of these attacks lasted more than a month. A similar proportion of attacks exceeding one month were exclusively registered within the insider and phishing vectors.

“Our latest findings underscore the critical role of trust in cyberattacks. In 2023 and for the first time in recent years, attacks through trusted relationships were among the three most used vectors. Half of these incidents were discovered only after a data leak had been found.

“By exploiting trusted relationships, threat actors can prolong attacks and infiltrate networks for extended periods, posing significant risks to organisations. It’s imperative for businesses to remain vigilant and prioritise security measures to safeguard against such sophisticated tactics,” comments Konstantin Sapronov, Head of Global Emergency Response Team at Kaspersky.

 


Kindly share this post

Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

E-Business

South Korea Joins List of Countries Banning DeepSeek over Security Concerns

Published

on

Kindly share this post

South Korean authorities have temporarily blocked new downloads of the DeepSeek artificial intelligence (AI) app, citing concerns over the company’s handling of user data.

South Korea Joins List of Countries Banning DeepSeek over Security Concerns

The country’s Personal Information Protection Commission (PIPC) announced the decision on Monday, saying that the Chinese AI startup had failed to fully comply with South Korea’s data protection laws.

According to PIPC, DeepSeek recently appointed legal representatives in South Korea and admitted to partially neglecting regulatory considerations regarding user privacy.

“The Chinese startup appointed legal representatives last week in South Korea and had acknowledged partially neglecting considerations of the country’s data protection law,” the PIPC said.

The commission added that the app’s service would resume once the company implements improvements in accordance with national privacy laws.

According to Reuters, when asked about South Korea’s move, a spokesperson for China’s foreign ministry said the Chinese government prioritises data privacy and security, ensuring compliance with legal standards.

The spokesperson also said China does not require companies or individuals to collect or store data in violation of laws.

The ban follows similar actions by other governments.

On February 4, Australia prohibited the use of DeepSeek on government devices due to security concerns.

Italy’s privacy regulator recently blocked the AI service, citing the company’s failure to address data policy issues.

Taiwan has also warned about potential risks related to cross-border data transmission and information leaks.

Also, regulators in Ireland and France have launched investigations into DeepSeek’s data-handling practices.

DeepSeek gained global adoption for its advanced human-like reasoning capabilities and open-source model.

In January, it surpassed OpenAI’s Chatgpt as the most downloaded free app on the Apple store.

 

 


Kindly share this post
Continue Reading

E-Business

AU Endorses Nigeria as AfCFTA Digital Trade Champion

Published

on

Kindly share this post

The African Union (AU) has officially designated Nigeria as the Digital Trade Champion under the African Continental Free Trade Area (AfCFTA) Digital Trade Protocol, citing the country’s leadership in digital enterprise and innovation.

The endorsement came at the 38th Ordinary Session of the Assembly of Heads of State and Government, which concluded on Sunday in Addis Ababa.

Nigeria’s proactive role in advancing the digital trade protocol, adopted in February 2024, was a key factor in the decision.

The AfCFTA Digital Trade Protocol encompasses eight annexes covering crucial areas such as rules of origin, digital identities, cross-border data transfers, online safety, and financial technology. The protocol is expected to provide a robust framework for Africa’s digital economy.

According to a statement issued on Monday by Special Adviser to the President on Information and Strategy, Bayo Onanuga, former President of Niger Republic and AU AfCFTA Champion, Mahamadou Issoufou, praised Nigeria’s leadership, particularly for convening the Digital Economy Roundtable in January.

“No organization, region, or continent has negotiated or adopted such a comprehensive legal instrument on digital trade, positioning the African continent to benefit from the digital economy for innovation and job creation,” Issoufou said in his progress report to the AU Assembly.

He also highlighted Africa’s growing influence in digital innovation, particularly in mobile banking and financial technology, and noted that the protocol would create an enabling environment for young African entrepreneurs.

“The AfCFTA Protocol on Digital Trade will establish a conducive environment for these young people to fully participate in Africa’s digital economy,” Issoufou added.

Reflecting on the roundtable in Abuja, he commended President Bola Tinubu and his administration for facilitating discussions with key stakeholders.

“The Roundtable was attended by young pioneers in Fintech, mobile banking and other areas of the digital economy. It was evident from the discussions that young people are eager to take advantage of Africa’s digital economy through the AfCFTA Protocol on Digital Trade”, he said.

Speaking at the AU summit, Nigeria’s Minister of Industry, Trade and Investment, Dr. Jumoke Oduwole, described the AU’s endorsement as a milestone in Africa’s economic development.

“Africa has demonstrated global leadership by pioneering the first-of-its-kind AfCFTA Protocol on Digital Trade—establishing a comprehensive regulatory framework,” Dr. Oduwole stated.

She emphasized that the protocol is a “game changer” for the continent, predicting that it would generate millions of jobs, contribute billions to Africa’s GDP, and attract significant investments in digital infrastructure.

 


Kindly share this post
Continue Reading

E-Business

Schmidt, Ex Google Chief Says AI Risky in Terrorist Hands

Published

on

Eric Schmidt, former Google CEO
Kindly share this post

Eric Schmidt, former Google CEO has expressed concerns about the extreme risks posed by artificial intelligence (AI) falling into the hands of terrorists or rogue states.

Schmidt, Ex Google Chief Says AI Risky in Terrorist Hands

Eric Schmidt, former Google CEO

He warned that nations such as North Korea, Iran, and Russia could adopt AI technologies to develop weapons capable of causing significant harm, including biological weapons.

Schmidt urged governments to oversee private tech companies, emphasising, “The real fears I have are not the ones most people discuss about AI, I talk about extreme risk.”

“I’m always worried about an ‘Osama Bin Laden’ scenario, where truly evil individuals take control of some aspect of modern life to harm innocent people,” he added.

With private companies driving AI advancements, he stressed the need for careful government monitoring and regulation. “It’s really important that governments understand what we’re doing and keep their eye on us,” he said.

His remarks followed a two-day AI summit in Paris, where the UK and the U.S. declined to sign a communiqué outlining the future direction of AI. The declaration on “inclusive and sustainable artificial intelligence for people and the planet” was endorsed by 57 countries, including India, China, the Vatican, the EU, and the African Union Commission.

The UK justified its decision, stating that the agreement lacked “practical clarity” on global AI governance and national security concerns.

Schmidt supports U.S. export controls restricting the sale of advanced AI microchips to certain countries, aiming to slow adversaries’ progress in AI research.

He also highlights the importance of international collaboration on AI safety, suggesting that cooperation with nations like China is essential to addressing global AI challenges.

 

 


Kindly share this post
Continue Reading

Trending