Connect with us

E-Business

The Case of Simultaneous, Short Duration DDoS Attacks

Published

on

cyber attack.jpg
Kindly share this post

Over the last decade, DDoS attacks have proliferated, possibly becoming the primary threat for every website or web application.

The ultimate goal is to bring down sites by flooding them with fake requests, usually from multiple locations. The outcome of such attacks ranges from slow page loads to blocking legitimate traffic.

Among the thousands of DDoS attacks that happen every day, you’ll find attacks that last a number of days, as opposed to short-duration attacks that only take a few minutes for attackers to coordinate and launch at a time.

These attacks are becoming much more commonplace, whether the goal is to take a site down or if they’re used as a smokescreen to divert site owners’ attention.

In this article, I would like to share our real life experience with short-duration DDoS attacks, addressing what happens when this type of attack targets multiple sites simultaneously.

5 Short Attacks in 3 Days
We recently witnessed a three day, continuous attack that targeted two domains of a well-known bank.

On the first day, the bank suffered a significant volumetric attack that lasted five to six minutes, but consumed bandwidth at a rate of dozens of gigabytes per second.

Another attack, that lasted fifteen minutes, took place on the second day, targeting the second domain of the bank. On the third day, the same domain that was targeted the previous day was hit with a long duration attack.

We could see that the first and second attacks were reconnaissance attacks, executed to evaluate which of the two domains was more vulnerable. It is clear that the second domain was more susceptible since it was hit much harder in the third attack.

In parallel, we detected that there was another short-duration spike attack that targeted one of our Telco customers.

Just two hours later, there was another attack against a large utility organization. Because of this pattern, we were able to identify that all three attacks were performed by the same attacker and could warn and better protect our customers against further attacks.

Comparing the volume of bandwidth we’ve encountered on the first day of the attacks, to a DDoS attack’s average peak size of 7.39 Gbps, as reported by SCMagazine, we can see that short-duration attacks use large volumes of traffic in short, shotgun-like bursts.

Attackers leverage these short-duration attacks to evaluate which companies and organizations are easiest to infiltrate.

We assume that this also has to do with the availability of resources. These types of attacks are more likely to come from smaller, private groups that are shorter on resources, as opposed to criminal groups or countries which have access to unlimited resources and can therefore launch long-duration attacks from day-one.

Here’s what we’ve seen over time:

Mitigation
When it comes to short-burst attacks, time is of the essence. Attacks are likely to go under the radar and leave no time to respond.

Organizations managing multiple web domains must have the ability to centralize incoming data, preferably by working with the same security vendor across all their domains.

This enables them to predict attacks by analyzing trends and patterns across their sites. Organizations should demand this capability from their security vendors, who should also be willing to use data from various customers in order to predict potential attacks on other customers, as described in the above case study.

We see a growing number of short duration attacks across our customer base. Awareness to this new pattern is key: customers typically assume that the attack is over, while this may actually be a sign for a much larger attack coming through.

In light of this new pattern using services and tools that can aggregate attack information across customers and websites is an ideal way to predict and avoid the massive DDoS attacks about to come.

Yariv Hazony is VP Product at Sentrix, which provides protection against DDOS and other attacks against web applications, www.sentrix.com


Kindly share this post

Nigeria CommunicationsWeek believes that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. So since 2007, we have devoted our energy to independent reportage of technology and how they affect lives.

E-Business

Report Reveals Over Half of Security Experts Overwhelmed Managing Cybersecurity Tools from Multiple Vendors

Published

on

Kindly share this post

The majority of companies (78%) surveyed in South Africa and in the Middle East, Turkiye, and Africa (META) region, rely on multi-vendor ecosystems despite the fact that such fragmented security solutions lead to operational and financial strains. Such findings were revealed in recent Kaspersky research.

A study titled “Improving resilience: Cybersecurity through system immunity,” conducted by Kaspersky, examined how organisations manage cybersecurity today, focusing on vendor fragmentation, operational inefficiencies and future consolidation plans.

The survey was conducted across the META region, as well as in Europe, Russia, Latin America, and the Asia-Pacific region.

The report provides a comprehensive analysis of the current state of cybersecurity management across organisations, highlighting significant challenges associated with multi-vendor security environments.

The findings reveal that nearly half of security professionals (44%) surveyed in the META region find their security stacks to be overly complex and time-consuming to maintain, which hampers their ability to respond swiftly to emerging threats.

This complexity often results from the use of multiple security solutions from different vendors, each with its own management interface and operational requirements.

Furthermore, 49% of organisations surveyed in the META region experience budget overruns attributable to overlapping solutions.

These redundancies not only inflate costs but also complicate resource allocation and strategic planning. Compatibility issues exacerbate these difficulties as 43% of respondents indicate that they cannot automate security processes effectively because their tools lack proper integration, leading to manual interventions and increased chances of human error.

Additionally, 39% struggle with inconsistent threat visibility, as data collected from various vendors often fails to correlate seamlessly, creating blind spots and reducing overall situational awareness.

Despite these persistent challenges, the majority of organisations continue to operate within multi-vendor environments – 78% in the META region and in South Africa currently manage security across multiple providers.

Interestingly, 43% in META and in South Africa believe that a single cybersecurity provider could sufficiently meet all their needs, suggesting a recognition of the potential benefits of consolidation.

However, only 22% in the META region and 23% in South Africa have adopted a single-vendor approach in practice, reflecting a cautious approach driven by concerns over over-reliance on one supplier or the perceived risks associated with vendor lock-in.

The landscape is rapidly shifting toward consolidation: an overwhelming 88% of firms in the META region and 84% in South Africa are actively moving in this direction, over a third (34% in META and 39% in South Africa) have already begun merging their security tools into unified platforms, while an additional 55% in META and 45% in South Africa plan to do so within the next two years.

This trend underscores a strategic shift toward simplifying cybersecurity operations, reducing costs, and achieving more effective threat management through integrated solutions. As organisations increasingly recognise the advantages of streamlined security architectures, the move toward vendor consolidation is poised to reshape the cybersecurity landscape in the near future.

“The data from our research indicates that many organisations rely on multiple vendors by default, rather than through deliberate strategic planning. While diversification of security solutions can offer certain benefits, such as risk mitigation and coverage breadth, an unchecked increase in complexity often leads to significant resource drain and operational inefficiencies.

Moreover, this complexity can create critical blind spots, making it harder to maintain comprehensive threat visibility and respond effectively to emerging risks.

The emerging trend toward consolidation reflects a maturation in cybersecurity strategies, emphasising the adoption of integrated platforms that streamline management, reduce manual effort, and enhance overall visibility into security posture,” said Ilya Markelov, Head of Unified Platform product line at Kaspersky.

To enable comprehensive protection of all business assets and processes, Kaspersky experts recommend to use centralised and automated solutions such as Kaspersky Next XDR Expert.

By aggregating and correlating data from multiple sources in one place and using machine-learning technologies, this solution provides effective threat detection and fast automated response. Out-of-the-box integrations, automation features and case management help make infrastructure complexity much less of an issue.


Kindly share this post
Continue Reading

E-Business

Africa Tasked to Fast-track AI Skills Development

Published

on

Kindly share this post

Africa has been urged to fast-track the development of Artificial intelligence (AI) skill to benefit from its economic value. AI could contribute $1.5 trillion to Africa’s economy by 2030 if the continent secures 10% of the global AI market, according to SAP, which sourced the statistic from online media.

However, a shortage of AI talent, with the need to retain cyber security and cloud skills, threatens to block opportunities to monetise growth.

This is part of a report released by SAP: ‘Africa’s AI Skills Readiness Revealed’, which reveals that African organisations are rushing to enhance their traditional IT skills base in the wake of accelerating adoption of AI.

The report adds that while 94% of organisations offer monthly AI training, none currently allocate more than 10% of their HR or IT budgets to skills development, a sharp decline from 2022.

Genevieve Koolen, HR director at SAP Africa, said: “There is a near-universal need for AI-related skills among African companies this year. Since traditional IT skills such as cloud and cyber security related competencies remain in high demand, companies now face the dual challenge of attracting and retaining traditional tech talent while also building greater AI competencies within their businesses. It is unsurprising then that most African organisations provide career development opportunities for employees with AI specialisations.”

The report reveals that all companies surveyed expect the demand for AI skills to increase in 2025. Nearly half said they expect a ‘significant’ increase.

Koolen added that while there is an urgent need for policymakers and education institutions to fast-track AI skills development initiatives among Africa’s swelling youth population, companies also face pressure to equip existing workers with future-ready skills.

“Thirty-eight percent of companies surveyed said reskilling of employees is a top skills-related challenge for them in 2025, and nearly half said the same of upskilling. The impact of these changes creates its own challenges, as evidenced by the two-thirds of companies that said helping employees understand why reskilling is necessary is a top priority.”

Research also showed that African organisations are alive to the possibilities presented by AI-related innovation, with companies citing perceived value in improved decision-making (64%), marketing capabilities (51%) and innovation (47%) enabled by AI.

However, poor access to AI-ready skills is already causing negative impacts among the same companies, including failed innovation initiatives, delays completing projects, greater pressure on teams and an inability to take on new client projects.

“Organisations are rising to this challenge by increasing the frequency of training offered to employees, with 94% saying they offer training at least monthly,” said Koolen.

However, the latest data indicates a drop in the allocated budget for skills development.

In a previous survey conducted in 2022, a quarter of organisations said they spend more than 15% of their HR or IT budgets on skills development and training. This year, not a single organisation that formed part of the research spent more than 10%.

SAP lists several measures that companies can implement to ensure they cultivate the correct skills mix:

Be prepared: With universal demand for tech and AI-related skills and an ongoing skills scarcity, African organisations must prepare for a shortfall in critical AI-related skills this year.

“The moment calls for a pragmatic approach that combines longer-term skills development – including reskilling and upskilling – with short-term measures that alleviate some of the immediate pressures and creates space for more robust skills development initiatives. Organisations also need to take care to support employees through this uncertain period, for example, by using human capital management technologies that help HR teams identify concerns.”

Prioritise training: Koolen said it is surprising that budget allocations for training and skills development appear to be shrinking. “Too many digital transformation and innovation initiatives fail to deliver the expected business value due to a lack of appropriate skills.

“In light of the rapid pace of technological advancement, any organisation that fails to invest in skills will likely find they are unprepared and unable to leverage new innovations. In time, this will erode their competitiveness and lead to significant impacts to the bottom line.”

Instead, organisations should place skills development at the core of their business strategies to ensure a steady stream of work-ready talent and invest sufficient budget to guarantee high-quality outcomes for employees and the business.

Partner well: While Africa has the fastest-growing youth population of any continent, there are still significant systemic challenges with equipping youth with adequate work-ready skills.

“Africa’s ability to reap the benefits of AI-related innovation rests on broader public-private sector efforts at cultivating the correct skills mix,” said Koolen. “Partnering with educational institutions and other industry skills development initiatives can accelerate the rate at which skills become available to companies.”

She added that technology vendors can also play a valuable role. “Large technology companies often have large global workforces and strong employer brands, allowing them to attract top talent. Partnering with tech venters can augment organisations’ skills base and provide valuable support to AI-led initiatives.”

 


Kindly share this post
Continue Reading

E-Business

Google Announces $37m Funding in Africa

Published

on

Kindly share this post

Google has outlined a wave of AI support across Africa, representing $37 million in cumulative funding — including previously committed but unannounced funding — to research, talent development, and infrastructure.

Google Announces $37m Funding in Africa

The funding package includes funding and partnerships that aim to strengthen AI research, support African languages, improve food systems, expand digital skills, and build research capacity.

The AI Collaborative for Food Security, a multi-partner initiative launched with $25 million in funding from Google.org will bring together researchers, and nonprofit organizations to co-develop AI tools for early hunger forecasting, crop resilience, and tailored guidance for smallholder farmers.

The goal is to help make food systems across Africa more adaptive, equitable, and resilient in the face of increasing climate and economic shocks.

Google also announced $3 million in funding to the Masakhane Research Foundation, the open research collective advancing AI tools in over 40 African languages.

The funding will support the development of high-quality datasets, machine translation models, and speech tools that make digital content more accessible to millions of Africans in their native languages.

To further empower innovation, Google is launching a catalytic funding initiative to support AI-driven startups tackling real-world challenges.

This platform will combine philanthropic capital, venture investment, and Google’s technical expertise to help more than 100 early-stage ventures scale AI-based solutions in agriculture, healthcare, education, and other vital sectors.

Startups will also receive mentorship, access to tools, and technical guidance to support responsible development.

Africa’s AI talent is growing rapidly, but the infrastructure to support it must grow in tandem.

That’s why a cornerstone of this announcement is the launch of the AI Community Center in Accra — a first-of-its-kind space for AI learning, experimentation, and collaboration in Africa.

The Center will host training sessions, community events, and workshops focused on responsible AI development. Its programming will span four pillars: AI literacy, community technology, social impact, and arts and culture — providing a platform for a diverse ecosystem of developers, students, and creators to engage with AI in ways that are grounded in African priorities.

To help meet the rising demand for AI and digital skills, Google is rolling out 100,000 Google Career Certificate scholarships for students in higher learning institutions across Ghana.

These fully funded, self-paced programs will focus on AI Essentials, Prompting Essentials, and other high-growth fields like IT Support, Data Analytics, and Cybersecurity — enabling more learners to access job-ready training and build careers in AI and the digital economy.

Beyond Ghana, Google.org is committing an additional $7 million to support AI education across Nigeria, Kenya, South Africa, and Ghana.

The funding will support academic institutions and nonprofits building localized AI curricula, online safety training, and cybersecurity programs.

Additionally, two new $1 million grants from Google.org aim to bolster AI research capacity across the continent.

One grant goes to the African Institute for Data Science and Artificial Intelligence (AfriDSAI) at the University of Pretoria to support applied AI research and training.

The other supports the Wits Machine Intelligence and Neural Discovery (MIND) Institute in South Africa, which will fund MSc and PhD students to conduct foundational AI research and help shape Africa’s role in the global AI landscape.

Speaking about the announcements, James Manyika, senior vice president for Research, Labs, and Technology & Society at Google, said: “Africa is home to some of the most important and inspiring work in AI today. We are committed to supporting the next wave of innovation through long-term investment, local partnerships, and platforms that help researchers and entrepreneurs build solutions that matter.”

Yossi Matias, vice president of Engineering and Research at Google, added: “This new wave of support reflects our belief in the talent, creativity, and ingenuity across the continent. By building with local communities and institutions, we’re supporting solutions that are rooted in Africa’s realities and built for global impact.”

 


Kindly share this post
Continue Reading

Trending