Connect with us

E-Business

Check Point Cybersecurity Predictions Expect More Global Attacks, Government Regulation, and Consolidation in 2023

Published

on

Kindly share this post

Check Point® Software Technologies, a leading provider of cyber security solutions globally, has released its cybersecurity predictions for 2023, detailing the key security challenges that organisations will face over the next year.

Globally, cyberattacks across all industry sectors increased by 28% in the third quarter of 2022 compared to 2021. Check Point predicts a continued sharp rise worldwide, driven by increases in ransomware exploits and in state-mobilised hacktivism driven by international conflicts.

Additionally, Check Point Research has found that cyber threats targeting companies across Africa outnumber those in other parts of the world. Adding further pressure to the volatile environment, organisations’ security teams will face growing pressure as the global cyber workforce gap of 3.4 million employees widens further, and governments are expected to introduce new cyber-regulations to protect citizens against breaches.

The dearth of cybersecurity professionals across Africa means it is more important than ever for the private sector to partner with government and tertiary education institutions to develop relevant education programmes.

These cybersecurity skills programmes can filter through the entire educational environment and create an enabling environment where a much-needed gap can be addressed.

In 2022, cyber criminals and state-linked threat actors continued to exploit organisations’ hybrid working practices, and the increase in these attacks is showing no signs of slowing as the Russia – Ukraine conflict continues to have a profound impact globally.

Meanwhile in Africa, most cyberattacks are targeting the ISP and communication sector, with more than 5 600 attacks per week identified.

Organisations need to consolidate and automate their security infrastructure to enable them to better monitor and manage their attack surfaces and prevent all types of threat with less complexity and less demand on staff resources.

Check Point’s cybersecurity predictions for 2023 fall into four categories: malware and phishing; hacktivism; emerging government regulations; and security consolidation.

Hikes in malware and hacking exploits

  • No respite from ransomware: this was the leading threat to organisations in the first half of 2022, and the ransomware ecosystem will continue to evolve and grow with smaller, more agile criminal groups forming to evade law enforcement.
  • Compromising collaboration tools: while phishing attempts against business and personal email accounts are an everyday threat, in 2023 criminals will widen their aim to target business collaboration tools such as Slack, Teams, OneDrive, and Google Drive with phishing exploits. These are a rich source of sensitive data given most organisations’ employees continue to often work remotely.

Hacktivism and deepfakes evolve

  • State-mobilised hacktivism: in the past year, hacktivism has evolved from social groups with fluid agendas (such as Anonymous) to state-backed groups that are more organised, structured, and sophisticated. Such groups have attacked targets in the US, Germany, Italy, Norway, Finland, Poland, and Japan recently, and these ideological attacks will continue to grow in 2023.
  • Weaponizing deepfakes: in October 2022, a deepfake of US President Joe Biden singing ‘Baby Shark’ instead of the national anthem was circulated widely. Was this a joke, or an attempt to influence the important US mid-term elections? Deepfakes technology will be increasingly used to target and manipulate opinions, or to trick employees into giving up access credentials.

Governments step up measures to protect citizens

  • New laws around data breaches: the breach at Australian telco Optus has driven the country’s government to introduce new data breach regulations that other telcos must follow, to protect customers against subsequent fraud. We will see other national governments following this example in 2023, in addition to existing measures such as GDPR across the European Union and POPIA in South Africa.
  • New national cybercrime task forces: more governments will follow Singapore’s example of setting up inter-agency task forces to counter ransomware and cybercrime, bringing businesses, state departments and law enforcement together to combat the growing threat to commerce and consumers. These efforts are partially a result of questions over whether the cyber-insurance sector can be relied upon as a safety net for cyber incidents. Cross-Africa collaboration and the potential establishment of a continental cybersecurity body could benefit all member states and companies both in terms of common laws and regulations, but also when it comes to providing a unified response to cyberthreats.
  • Mandating security and privacy by design: the automotive industry has already moved to introduce measures to protect the data of vehicle owners. This example will be followed in other areas of consumer goods that store and process data, holding manufacturers accountable for vulnerabilities in their products.

Consolidation matters

  • Cutting complexity to reduce risks: the global cyber-skills gap grew by over 25% in 2022. Yet organisations have more complex, distributed networks and cloud deployments than ever before because of the pandemic.

Security teams need to consolidate their IT and security infrastructures to improve their defences and reduce their workload, to help them stay ahead of threats. Over two-thirds of CISOs stated that working with fewer vendors’ solutions would increase their company’s security.

 Predictions From Check Point Executives:

Issam El Haddioui, Head of Security Engineering, EMEA – Africa, Check Point Software: “The frontier between the cyber world and our everyday lives has become vanishingly small and the impact of a cyber threat can have multiple faces.

“Impact ranges from financial implications caused by ransomware attacks to the disruption of organisational profit flow, to the inability to bring goods and services to citizens. The cyber threat landscape is an evolving environment and therefore cyber security posture enhancement needs to be a continuous journey, with measures that need to be evaluated and adapted to new realities.”

Charnie-Lee Adams-Kruger, Country Manager for Southern Africa at Check Point: “Cybercrime is a global problem that has affected South Africa, both in the private sector and in government. Financial losses have been in the billions and could continue to increase if stricter measures are not put in place. The main target of the African continent is mainly South Africa due to its high connectivity rate, wealth, and GDP per capita.”

Mark Ostrowski, Office of the CTO, Check Point Software: “Deepfakes will go mainstream with hacktivists and cybercriminals leveraging video and voicemails for successful phishing and ransomware attacks.”

Maya Horowitz, VP of Research, Check Point Software: “We are entering a new era of hacktivism, with increasing attacks motivated by political and social causes. Threat actors are becoming increasingly shameless and will turn their attention to critical infrastructure.”

Micki Boland, Office of the CTO, Check Point Software: “We will see a nation-state lead a sustained and lengthy attack against the USA’s power grid, leading to power disruptions impacting critical business and societal functions.”

Deryck Mitchelson, EMEA CISO, Check Point: “Cloud transformation will slow due to cost and complexity, with many firms considering bringing workloads back in-house or to private data centres to reduce their overall threat surface.”

Deryck Mitchelson, EMEA CISO, Check Point Software: “We will see much more debate around and push for security regulation, as the current carrot and stick approach has not worked.”

Dan Wiley, Head of Threat Management, Check Point Software: “The cyber insurance industry is undergoing major tectonic shifts. Companies will most likely not be able to rely on insurance as a safety net for cyber incidents.

Like we have seen with the auto industry, policymakers will act to protect their constituents with legislation holding makers accountable for software defects that create cyber vulnerabilities. In turn, this will put the onus on software vendors to build in security validations.”

Jeremy Fuchs, Research Analyst, Avanan, a Check Point company: “While email and phishing go hand-in-hand and will still be dangerous and proliferate, in 2023 cyber criminals will also turn to business collaboration compromise, with phishing attacks used to access Slack, Teams, OneDrive, Google Drive, etc.

“Employees are often loose with sharing data and personal information while using these business apps, making them a lucrative source of data for hackers.”

Jony Fischbein, CISO, Check Point Software: “In our multi-hybrid environment, many CISOs struggle to build a comprehensive security program with multiple vendors. In 2023, CISOs will decrease the number of security solutions deployed in favour of a comprehensive, single solution to reduce complexity.”

Oded Vanunu, Head of Products Vulnerability Research, Check Point Software: “Dramatic increase of digital scams, due to a global economic slowdown and inflation. Cyber criminals will increasingly turn to social media campaigns via Telegram, WhatsApp, and other popular messaging apps. There will also be more cyber-attacks on Web3 blockchain platforms, mainly to overtake platforms and their users’ crypto assets.”


Kindly share this post

Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

E-Business

Data Commission, NAICOM Partner to Safeguard Data in Insurance Industry

Published

on

Kindly share this post

Nigerian Data Protection Commission (NDPC) and National Insurance Commission (NAICOM) have signed a Memorandum of Understanding (MoU) to protect data pilfering in the insurance industry.

Data Commission, NAICOM Partner to Safeguard Data in Insurance Industry

The agreement was finalised on Friday and aims to address critical concerns around data privacy and ensure that the insurance sector complies with global best practices in data management.

Some of the objectives of a MoU include training and capacity building to enhance awareness and skills in data protection, setting up specialized clinics to address data protection concerns and provide guidance; conducting compliance activities by regularly, monitoring and enforcing compliance with data protection regulations and educating insurance companies on the importance of data protection and the benefits of adhering to best practices.

Mr Olusegun Ayo Omosehin, commissioner for Insurance/ chief executive officer, NAICOM, said, “The collaboration marks a significant milestone in safeguarding the personal data of insurance policyholders and promoting trust in the insurance sector”.

To ensure the effective implementation of the Memorandum of Understanding (MoU), an Implementation Committee will be established.

This committee will comprise representatives from the 2 agencies, as well as other key industry associations, including the Nigerian Insurers Association (NIA) and the Nigerian Council of Registered Insurance Brokers (NCRIB).

The committee’s primary responsibility will be to monitor progress, provide guidance, and facilitate collaboration among stakeholders to guarantee the successful execution of the MoU.

Officials from both NAICOM and NDPC have expressed confidence in the partnership’s potential to strengthen data privacy frameworks within the insurance sector.

They noted that the initiative would boost public confidence, enhance compliance, and position the sector for greater innovation and credibility.

This collaboration is expected to pave the way for a more secure and trustworthy insurance landscape in Nigeria, ensuring the protection of personal data while fostering the industry’s growth.


Kindly share this post
Continue Reading

E-Business

NDPC to Begin Prosecution of Data Privacy Offenders from 2025

Published

on

Kindly share this post

Nigeria Data Protection Commission (NDPC) will start prosecuting data privacy offenders from the beginning of 2025, according to Babatunde Bamigboye, head of the Legal Enforcement and Regulation Department of the commission.

NDPC to Begin Prosecution of Data Privacy Offenders from 2025

This move is part of its efforts to enforce regulations and promote responsible data handling in Nigeria.

Bamigboye, disclosed this during a one-day cybersecurity awareness campaign with the theme “Utilising AI-Powered Services for Proactive Cybersecurity” in Abuja.

The event was organised by SOPHOS UK in collaboration with SPOKES Network and Net-Trix Solutions to foster networking with industry experts on how AI is shaping the future of cybersecurity.

Bamigboye explained that, due to the significant implications of data privacy breaches in Nigeria, the commission has embarked on awareness programmes to educate individuals on their data protection rights and inform data processors and controllers of their obligations.

To this end, he announced that beginning next year, the commission would prosecute any data controllers or processors found in breach of the law.

“At this moment, we have investigated quite a number of cases, and in terms of prosecution—as you know, as a lawyer, this means going to court—but we haven’t taken any matters to court yet.

“This is the formative stage; we understand the implications for the country as a whole. And usually, when you talk about prosecution, it also involves some criminal activities. So, at this moment, our focus has been on creating awareness.

“But from next year, we will step up enforcement in this area. What we have done so far is to take remedial actions against certain data controllers and processors who defaulted under the Act,” he noted.

He assured investors that Nigeria’s cyberspace is secure for digital transactions.

“Nigerian cyberspace is safe; otherwise, we wouldn’t be experiencing the smooth flow of digital transactions in Nigeria. It is safe but not without threats, and we are doing our best as a country to combat these threats.”

Christopher Odutola, a sales engineer at SOPHOS UK, noted in his presentation that 100% cybersecurity cannot be guaranteed, hence the need for proactive measures.

“A lot of people will come to you and say, ‘We can give you 99.9% or 100% cybersecurity.’ It’s not true.

“Nobody can provide 100% security anywhere in the world. What they can do, as I mentioned earlier, is reduce the risk for you. However, determining the extent of risk reduction is difficult.

“It’s impossible to eliminate 100% of risks anywhere in the world. What we provide is what we call a cybersecurity breach protection warranty. This warranty covers incidents such as data breaches or ransomware attacks. For instance, if you lose your files while we manage your SOC as a service, we will reimburse up to one million dollars in response costs.”

Odutola further stressed the importance of organisations reducing cyber threat risks to secure cyberspace.

“There are risks to businesses, risks from downtime, attackers, scammers, and the rest, trying to infiltrate networks.

“The risk is always high. As cybersecurity professionals, we are doing as much as possible to reduce these risks.

“The various security controls we implement—antivirus software, firewalls, email security, cloud security, network security, and others—are aimed at reducing risks. We must focus on minimising risks. For instance, we currently see risks originating from third-party suppliers and vendors.”

According to him, “We have a process called risk assessment, which helps to evaluate vendors to ensure they do not introduce risks into our environment. This is why these security controls are crucial.

“We have them in place. It’s equally important to involve senior management in the discussion, as this is often where the gap lies. Unfortunately, cybersecurity is often perceived as a cost centre.”

Harrison Oloye, chief executive officer (CEO) of Net-Trix Solutions, said the event aimed to raise awareness about cyber threats and equip users to manage potential attacks.

“What we did, as Net-Trix Solutions Limited in conjunction with Spokes Network, is to create awareness and educate the public and private sectors on how to use Artificial Intelligence (AI) to combat cyber threats.”

Speaking further on achievements in creating awareness, he said: “As part of our Corporate Social Responsibility (CSR), we educate and train as many people as possible on the dangers of cyber threats and cyber-related crimes.”

Ms. Sifon Ufot, head of Business at SPOKES Network, emphasised the need to take proactive measures against cyber threats.

“We need to stay cyber-safe because hackers working behind the scenes are not joking—they work 24/7. For us, staying proactive is essential. With the help of AI, we can stay proactive; it provides information beforehand and even prevents some attacks from reaching us.”

 

 

 

 

 


Kindly share this post
Continue Reading

E-Business

Nigeria, Others Confront Flood of Cyber-Attacks

Published

on

Kindly share this post

Check Point, a cyber security company has reported that Nigeria, South Africa, Kenya, and Morocco are seeing targeted cyber-attacks on government, education, and financial institutions.

Nigeria, Others Confront Flood of Cyber-Attacks

In its just released 2024 African Perspectives on Cyber security report, Check Point, said that the cyber security sector is growing by 20-25% annually, fuelled by investments in infrastructure and Artificial Intelligence-driven solutions.

The report said that  South Africa has seen 3,312 attacks on government institutions every week and a 90% increase in ransomware, with cybercrime costing the country nearly 1% of GDP.

Kenya, in East Africa, sees 4,719 attacks on the government sector each week, indicating an urgent need for enhanced defenses.

According to the report, Nigeria sees 4,718 attacks every week, which is one of the highest in Africa.

In a recent incident, the report states that a banking trojan assault affected 100,000 customer accounts, resulting in a $3 million loss.

Morocco is one of Africa’s most targeted countries, with 8,733 attacks on government entities reported each week, the report said.

According to Check Point, the Moroccan government recently faced a state-sponsored cyberattack that compromised classified communications, raising significant national security concerns.

“Organisations in Africa are attacked roughly 3300 times per week, if we look at the global average it is about 1 800, it is almost double the attacks,” said Hendrik de Bruin, head of security consulting at Check Point SADC during the presentation.

Check Point noted that the continent’s GDP is predicted to exceed $4 trillion by 2027, and digital infrastructure has emerged as a key driver of economic growth. However, rapid digitisation has resulted in increased vulnerability.

De Bruin explained: “We are slowly, but surely digitalising our industries, we are digitising our governments, private sectors are digitising themselves, so we have got an expanding digital attack footprint.

“We also have cloud adoption, which is not new, but picking up pace in Africa. That is another way that these attackers are using to gain access to organisations, and we also see a large uptake on cloud specific attacks as well.”

 

 

 

 


Kindly share this post
Continue Reading

Trending