Connect with us

E-Business

Africa: 2023 Cyberthreats Landscape, Next Year Predictions

Published

on

Kindly share this post

By Yusuph Kileo

In recent years, of African countries are working hard to adopt 2030 African digital transformation agenda. Finance, education, agriculture, government, security, and manufacturing, are actively adopting digital technologies and transitioning their operations to online platforms.

Africa: 2023 Cyberthreats Landscape, Next Year Predictions

As we advance in technology throughout the continent, nations need to remember, cybersecurity and personal data protection are fundamental principles in the implementation of the digital transformation project in order to minimise the challenges that come along with the technology.

The year 2023 was filled with countless cyberattacks across many countries — Some of these attacks targeted critical infrastructure, financial institutions, governments and other companies.

As African countries are now pushing for digital transformation and experiencing rapid economic development, cybersecurity remains a pressing concern for businesses across Africa.

Unfortunately, some of the African countries indicate inadequate security measures to fight off cybercrime, leaving them highly susceptible to cyberattacks — They have weak prevention mechanisms to combat cyber threats and poor intrusion detection systems, thereby placing sensitive transactions at significant risk.

There is an increase in the volume and sophistication of cyberattacks in financial institutions.

According to the 2023 Africa Financial Industry Barometer, 97% of surveyed leaders of financial institutions in Africa rank cybercrime and regulatory constraints on cybersecurity as the leading threat to the financial services industry alongside worsening economic conditions.

These massive cyberattacks in the region threatens the security of the growing economy and critical infrastructure.

MTN Nigeria, lost $53 million from its mobile money service which forces them to sue several banks in the Nigeria, financial institutions and e-citizen portal where halted by distributed denial of service attack in Kenya, South Africa there is an increase in backdoor and spyware attacks with an alarming 106,000 recorded attempts.

There are many similar cybersecurity incidents in other African countries and there is a need of urgent action to strengthen protection measures.

Failure to counter cyberthreats can have serious consequences for individuals, businesses and the socio-economic development of the continent.

Africa is not alone in this, In September alone other part of the world experience massive cyberattacks — To mention few notable cyberattacks; On September 6, the travel booking company Sabre experienced a serious ransomware attack where by 1.3 terabytes of data were stolen by Dunghill and just few days letter, on September 11th another ransomware attack on save the children lead to the loss of 6.8 terabyte of data and entertainment company MGM Resorts also suffered a cyberattack which was made public on X saying that the security incident severely impacted its business operations.

The following day on September 12, Hong Kong-based cryptocurrency exchange platform, CoinEx, saw the loss of US$70 million in cryptocurrency following a cyberattack launched against it.

In 2023, the most common cyberthreats in Africa includes Insider threats, Social Engineering, Software update supply chain attacks, Phishing attacks, Mobile malware, online shopping fraud, Ransomware, Man-in-the-middle (MitM) attack, Cryptojacking attacks, IoT botnet DDoS attacks and Malware attacks among others.

According to the year 2023 Positive technology report, the most targeted organizations with cyberattacks were those in the financial sector (18%), followed by telecommunications companies (13%), government agencies (12%), and organizations from the trade (12%) and industrial (10%) sectors.

The impact brought by these growing cyberattacks includes, Loss of customer/business, Loss of organisation critical data, Threat to organisation/National Security, Damage of goodwill and Reputation, Loss of Revenue — Economic Losses, Temporary or permanent closure, Lawsuits and arbitrations, Danger of terrorism, Time wastage and System down time — reduce productivity.

2024 cyberthreats prediction

Many report shows Africa being the most targeted region with cyberattacks, the year 2024 new techniques of cyberattacks will likely emerge, such as the increase in AI usage, hacktivism and targeting of smart home tech.

New botnets and rootkits will also likely appear, and hacker-for-hire services might increase, as will supply chain attacks, which might be provided as a service on cybercriminals’ underground forums.

According to Kaspersky, Advanced Persistent Threats (APT) is expected to expand surveillance efforts to include more smart home technology devices, such as smart home cameras and connected car systems.

This is particularly interesting for attackers because those devices are often uncontrolled, not updated or patched and subject to misconfigurations. This is also a concern because more people work from home nowadays, and their companies could be targeted via weak points in the home worker devices.

More hacktivism is expected affect many parts of Africa. Hacktivists will run Distributed Denial of Service attacks, increasingly use tools for Deepfakes and impersonation/disinformation. In addition, destructive and disruptive operations can be done. T

he use of wipers in several current political conflicts or the disruption of power in Ukraine are good examples of both types of operations.

Cybercriminals are also expected to develop new methods for automating cyberespionage. One method could be to automate the collection of information related to victims in every aspect of their online presence: social media, websites and more, as long as it relates to the victims’ identity.

State-sponsored cyberattack numbers also have the potential to surge, amid increasing geopolitical tensions. These attacks will likely threaten data theft or encryption, IT infrastructure destruction, long-term espionage, and cyber-sabotage.

The generative AI tools usage will increase, this will facilitate the mass production of spear phishing email content, which is often used as the initial vector of infection when targeting organizations. The messages written by the tools are more persuasive and well-written compared to the ones written by cybercriminals. It might also mimic the writing style of specific individuals.

The widespread use of technology, combined with insufficient cybersecurity measures, lack of right skillset, inadequate legislation in the field of information security, and a low level of public awareness concerning information security, creates favorable conditions for cybercriminals. Moreover, many African countries are facing economic constraints, making it difficult to allocate sufficient funds for cybersecurity.

African governments must develop, implement and regularly update national cybersecurity policies and strategies, involving a wide range of stakeholders in the process.

Establishing a dedicated national institution (Cybersecurity authority) to coordinate cybersecurity activities, respond to cyber incident, monitor threats and help organizations recover from major cyberattacks should be a top priority for governments.

Governments should work on creating and implementing legislation for the protection of personal data. This legislation should combat cybercrime, guarantee the protection of personal data, and maintain the digital security of citizens and organizations.

Regular cybersecurity awareness should be conducted. People should be educated on potential privacy risks when working in virtual environments.

Governments should identify critical information infrastructure, disruption of which could cause non-tolerable events at the level of industries and countries.

Collaboration between governments and industry peers is also recommended to enhance collective defense against cyberattacks and exchange best practices and thoughts.

Organisations should implement best practices in safeguarding personal and corporate data.

 

Organizations should have an up to date incident response plan that will help in case of cyberattack. The plan should contain steps to take, as well as a list of people and services to reach in case of emergency. This plan should be regularly tested by conducting attack simulations.

Network segmentation might limit an attacker’s exploration of compromised networks. Critical systems in particular should be totally isolated from the rest of the corporate network.

Establishing continuous vulnerability assessment and triage as a basement for effective vulnerability management process

Implementing strict access controls is highly recommended. The principle of least privilege should always be in use for any resource. Multifactor authentication should be deployed wherever possible.

 Mr Yusuph Kileo is an award-winning Cyber security and Digital Forensics Expert

 

 

 

 

 

 

 


Kindly share this post

Nigeria CommunicationsWeek believes that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. So since 2007, we have devoted our energy to independent reportage of technology and how they affect lives.

E-Business

Report Reveals Over Half of Security Experts Overwhelmed Managing Cybersecurity Tools from Multiple Vendors

Published

on

Kindly share this post

The majority of companies (78%) surveyed in South Africa and in the Middle East, Turkiye, and Africa (META) region, rely on multi-vendor ecosystems despite the fact that such fragmented security solutions lead to operational and financial strains. Such findings were revealed in recent Kaspersky research.

A study titled “Improving resilience: Cybersecurity through system immunity,” conducted by Kaspersky, examined how organisations manage cybersecurity today, focusing on vendor fragmentation, operational inefficiencies and future consolidation plans.

The survey was conducted across the META region, as well as in Europe, Russia, Latin America, and the Asia-Pacific region.

The report provides a comprehensive analysis of the current state of cybersecurity management across organisations, highlighting significant challenges associated with multi-vendor security environments.

The findings reveal that nearly half of security professionals (44%) surveyed in the META region find their security stacks to be overly complex and time-consuming to maintain, which hampers their ability to respond swiftly to emerging threats.

This complexity often results from the use of multiple security solutions from different vendors, each with its own management interface and operational requirements.

Furthermore, 49% of organisations surveyed in the META region experience budget overruns attributable to overlapping solutions.

These redundancies not only inflate costs but also complicate resource allocation and strategic planning. Compatibility issues exacerbate these difficulties as 43% of respondents indicate that they cannot automate security processes effectively because their tools lack proper integration, leading to manual interventions and increased chances of human error.

Additionally, 39% struggle with inconsistent threat visibility, as data collected from various vendors often fails to correlate seamlessly, creating blind spots and reducing overall situational awareness.

Despite these persistent challenges, the majority of organisations continue to operate within multi-vendor environments – 78% in the META region and in South Africa currently manage security across multiple providers.

Interestingly, 43% in META and in South Africa believe that a single cybersecurity provider could sufficiently meet all their needs, suggesting a recognition of the potential benefits of consolidation.

However, only 22% in the META region and 23% in South Africa have adopted a single-vendor approach in practice, reflecting a cautious approach driven by concerns over over-reliance on one supplier or the perceived risks associated with vendor lock-in.

The landscape is rapidly shifting toward consolidation: an overwhelming 88% of firms in the META region and 84% in South Africa are actively moving in this direction, over a third (34% in META and 39% in South Africa) have already begun merging their security tools into unified platforms, while an additional 55% in META and 45% in South Africa plan to do so within the next two years.

This trend underscores a strategic shift toward simplifying cybersecurity operations, reducing costs, and achieving more effective threat management through integrated solutions. As organisations increasingly recognise the advantages of streamlined security architectures, the move toward vendor consolidation is poised to reshape the cybersecurity landscape in the near future.

“The data from our research indicates that many organisations rely on multiple vendors by default, rather than through deliberate strategic planning. While diversification of security solutions can offer certain benefits, such as risk mitigation and coverage breadth, an unchecked increase in complexity often leads to significant resource drain and operational inefficiencies.

Moreover, this complexity can create critical blind spots, making it harder to maintain comprehensive threat visibility and respond effectively to emerging risks.

The emerging trend toward consolidation reflects a maturation in cybersecurity strategies, emphasising the adoption of integrated platforms that streamline management, reduce manual effort, and enhance overall visibility into security posture,” said Ilya Markelov, Head of Unified Platform product line at Kaspersky.

To enable comprehensive protection of all business assets and processes, Kaspersky experts recommend to use centralised and automated solutions such as Kaspersky Next XDR Expert.

By aggregating and correlating data from multiple sources in one place and using machine-learning technologies, this solution provides effective threat detection and fast automated response. Out-of-the-box integrations, automation features and case management help make infrastructure complexity much less of an issue.


Kindly share this post
Continue Reading

E-Business

Africa Tasked to Fast-track AI Skills Development

Published

on

Kindly share this post

Africa has been urged to fast-track the development of Artificial intelligence (AI) skill to benefit from its economic value. AI could contribute $1.5 trillion to Africa’s economy by 2030 if the continent secures 10% of the global AI market, according to SAP, which sourced the statistic from online media.

However, a shortage of AI talent, with the need to retain cyber security and cloud skills, threatens to block opportunities to monetise growth.

This is part of a report released by SAP: ‘Africa’s AI Skills Readiness Revealed’, which reveals that African organisations are rushing to enhance their traditional IT skills base in the wake of accelerating adoption of AI.

The report adds that while 94% of organisations offer monthly AI training, none currently allocate more than 10% of their HR or IT budgets to skills development, a sharp decline from 2022.

Genevieve Koolen, HR director at SAP Africa, said: “There is a near-universal need for AI-related skills among African companies this year. Since traditional IT skills such as cloud and cyber security related competencies remain in high demand, companies now face the dual challenge of attracting and retaining traditional tech talent while also building greater AI competencies within their businesses. It is unsurprising then that most African organisations provide career development opportunities for employees with AI specialisations.”

The report reveals that all companies surveyed expect the demand for AI skills to increase in 2025. Nearly half said they expect a ‘significant’ increase.

Koolen added that while there is an urgent need for policymakers and education institutions to fast-track AI skills development initiatives among Africa’s swelling youth population, companies also face pressure to equip existing workers with future-ready skills.

“Thirty-eight percent of companies surveyed said reskilling of employees is a top skills-related challenge for them in 2025, and nearly half said the same of upskilling. The impact of these changes creates its own challenges, as evidenced by the two-thirds of companies that said helping employees understand why reskilling is necessary is a top priority.”

Research also showed that African organisations are alive to the possibilities presented by AI-related innovation, with companies citing perceived value in improved decision-making (64%), marketing capabilities (51%) and innovation (47%) enabled by AI.

However, poor access to AI-ready skills is already causing negative impacts among the same companies, including failed innovation initiatives, delays completing projects, greater pressure on teams and an inability to take on new client projects.

“Organisations are rising to this challenge by increasing the frequency of training offered to employees, with 94% saying they offer training at least monthly,” said Koolen.

However, the latest data indicates a drop in the allocated budget for skills development.

In a previous survey conducted in 2022, a quarter of organisations said they spend more than 15% of their HR or IT budgets on skills development and training. This year, not a single organisation that formed part of the research spent more than 10%.

SAP lists several measures that companies can implement to ensure they cultivate the correct skills mix:

Be prepared: With universal demand for tech and AI-related skills and an ongoing skills scarcity, African organisations must prepare for a shortfall in critical AI-related skills this year.

“The moment calls for a pragmatic approach that combines longer-term skills development – including reskilling and upskilling – with short-term measures that alleviate some of the immediate pressures and creates space for more robust skills development initiatives. Organisations also need to take care to support employees through this uncertain period, for example, by using human capital management technologies that help HR teams identify concerns.”

Prioritise training: Koolen said it is surprising that budget allocations for training and skills development appear to be shrinking. “Too many digital transformation and innovation initiatives fail to deliver the expected business value due to a lack of appropriate skills.

“In light of the rapid pace of technological advancement, any organisation that fails to invest in skills will likely find they are unprepared and unable to leverage new innovations. In time, this will erode their competitiveness and lead to significant impacts to the bottom line.”

Instead, organisations should place skills development at the core of their business strategies to ensure a steady stream of work-ready talent and invest sufficient budget to guarantee high-quality outcomes for employees and the business.

Partner well: While Africa has the fastest-growing youth population of any continent, there are still significant systemic challenges with equipping youth with adequate work-ready skills.

“Africa’s ability to reap the benefits of AI-related innovation rests on broader public-private sector efforts at cultivating the correct skills mix,” said Koolen. “Partnering with educational institutions and other industry skills development initiatives can accelerate the rate at which skills become available to companies.”

She added that technology vendors can also play a valuable role. “Large technology companies often have large global workforces and strong employer brands, allowing them to attract top talent. Partnering with tech venters can augment organisations’ skills base and provide valuable support to AI-led initiatives.”

 


Kindly share this post
Continue Reading

E-Business

Google Announces $37m Funding in Africa

Published

on

Kindly share this post

Google has outlined a wave of AI support across Africa, representing $37 million in cumulative funding — including previously committed but unannounced funding — to research, talent development, and infrastructure.

Google Announces $37m Funding in Africa

The funding package includes funding and partnerships that aim to strengthen AI research, support African languages, improve food systems, expand digital skills, and build research capacity.

The AI Collaborative for Food Security, a multi-partner initiative launched with $25 million in funding from Google.org will bring together researchers, and nonprofit organizations to co-develop AI tools for early hunger forecasting, crop resilience, and tailored guidance for smallholder farmers.

The goal is to help make food systems across Africa more adaptive, equitable, and resilient in the face of increasing climate and economic shocks.

Google also announced $3 million in funding to the Masakhane Research Foundation, the open research collective advancing AI tools in over 40 African languages.

The funding will support the development of high-quality datasets, machine translation models, and speech tools that make digital content more accessible to millions of Africans in their native languages.

To further empower innovation, Google is launching a catalytic funding initiative to support AI-driven startups tackling real-world challenges.

This platform will combine philanthropic capital, venture investment, and Google’s technical expertise to help more than 100 early-stage ventures scale AI-based solutions in agriculture, healthcare, education, and other vital sectors.

Startups will also receive mentorship, access to tools, and technical guidance to support responsible development.

Africa’s AI talent is growing rapidly, but the infrastructure to support it must grow in tandem.

That’s why a cornerstone of this announcement is the launch of the AI Community Center in Accra — a first-of-its-kind space for AI learning, experimentation, and collaboration in Africa.

The Center will host training sessions, community events, and workshops focused on responsible AI development. Its programming will span four pillars: AI literacy, community technology, social impact, and arts and culture — providing a platform for a diverse ecosystem of developers, students, and creators to engage with AI in ways that are grounded in African priorities.

To help meet the rising demand for AI and digital skills, Google is rolling out 100,000 Google Career Certificate scholarships for students in higher learning institutions across Ghana.

These fully funded, self-paced programs will focus on AI Essentials, Prompting Essentials, and other high-growth fields like IT Support, Data Analytics, and Cybersecurity — enabling more learners to access job-ready training and build careers in AI and the digital economy.

Beyond Ghana, Google.org is committing an additional $7 million to support AI education across Nigeria, Kenya, South Africa, and Ghana.

The funding will support academic institutions and nonprofits building localized AI curricula, online safety training, and cybersecurity programs.

Additionally, two new $1 million grants from Google.org aim to bolster AI research capacity across the continent.

One grant goes to the African Institute for Data Science and Artificial Intelligence (AfriDSAI) at the University of Pretoria to support applied AI research and training.

The other supports the Wits Machine Intelligence and Neural Discovery (MIND) Institute in South Africa, which will fund MSc and PhD students to conduct foundational AI research and help shape Africa’s role in the global AI landscape.

Speaking about the announcements, James Manyika, senior vice president for Research, Labs, and Technology & Society at Google, said: “Africa is home to some of the most important and inspiring work in AI today. We are committed to supporting the next wave of innovation through long-term investment, local partnerships, and platforms that help researchers and entrepreneurs build solutions that matter.”

Yossi Matias, vice president of Engineering and Research at Google, added: “This new wave of support reflects our belief in the talent, creativity, and ingenuity across the continent. By building with local communities and institutions, we’re supporting solutions that are rooted in Africa’s realities and built for global impact.”

 


Kindly share this post
Continue Reading

Trending