E-Business
Cyberoam 2014 IT Security Predictions Cite Hyper Attacks Underway
Cyberoam Technologies Private Limited, a global Network Security appliances company with a careful analysis of security and IT trends in the most recent past and a strong foresight that comes from years of industry experience and intelligent extrapolation of the past and the present, on Friday released it security predictions for 2014.
Cyberoam offers future-ready security solutions to physical and virtual networks in organizations with its Next-Generation Firewalls (NGFWs) and Unified Threat Management (UTM) appliances.
Thus, in its intelligent analyses of IT security in the new year came up with the following ten (10) predictions.
“Client-Side Software Exploits” – It Will Be!
Cyberoam Threat Research Labs foresees an increase in Client-side software exploits compared to the Server-side in next few years.
2013 has seen numerous such exploits where base client software like Microsoft and Adobe were exploited to spread the attack vectors across the network.
The recent Microsoft advisories indicating client side exploits also support this prediction. Reasons for this hike include increased scope of exploitation with increase in attack vectors, higher base of users who use these softwares, and lastly, the money involved in it.
The exploit kits used to exploit server side vulnerabilities cost much less than client side exploit kits, indicating the premium the latter demand. Realizing that client side exploits will bring in more money, the focus on exploiting client-side vulnerabilities will increase too!
Attack Vectors To Get More Intelligent
Attacks in 2013 have left us with one clear picture – the rising sophistication and professionalism among attackers. In times to come, Cyberoam predicts attacks, wherein the attackers will get more specific, both in terms of their objective and attack strategies.
Gone are the days when attacks were meant for the masses. Attackers now know whom and how they would attack and they are changing their attack strategies to hit straight on the bull’s-eye rather than shooting in the dark.
In addition to this, few attacks from 2013 indicate the evolution of attacks including proven components from already-used attacks, combined to form more detrimental attacks.
Attacks On Industrial Control Systems & Scada Systems To Continue
The amplified impact that an attack on Industrial Control Systems (ICS) can cause, justifies the interest attackers have on such systems. ICS/SCADA system attacks can cause catastrophic damage not only to a single unit but at times to an entire country/province.
It is the spread of impact compounded with lack of adequate security available in such systems that have made ICS/SCADA networks a lucrative target for attackers. As per statistics, there were 198 cyber attacks in 2012 and the numbers increased to 240 in 2013. Cyberoam predicts further rise in such attacks on ICS/SCADA networks in 2014 and beyond.
New Exploit Kits Will Be Explored And Used
Use of Blackhole exploit kit for attacks is a known fact. It is no secret that it was used extensively for attacks in the past. But with the arrest of ‘Paunch’ in 2013, the man behind the Blackhole exploit kit, new exploit kits are slowly showing up. In addition to this, as attacks utilising Blackhole exploit kit have been exposed, it emerges as a need among attackers to come up with new ways to target their victims.
Also, with recent trends showing rise in exploits based on client side vulnerabilities, Cyberoam predicts that this menace is only going to aggravate.
Increase In Need For Context-Aware Security
With increase in number of security features or solutions in an organization’s network to tackle emerging security risks, the job of security professionals is getting more complex. With rising number of devices, users and applications to monitor, this becomes even more difficult. The volume of data that the security appliance(s) offer on various parameters is becoming a problem for network administrators, presenting a need for context-aware security that enables faster decision making and action with the security intelligence it offers.
Cyberoam predicts an increase in demand for context-aware security for 2014. The rising need in context-aware security goes in continuation with Cyberoam’s prediction in 2013 regarding the rise in need for User Threat Quotient & Device Threat Quotient.
Security of Hybrid Cloud
In a generation of increased mobility where tablets and smart devices are displacing desktops and paper-based processes, more users are turning to Cloud, specifically the Hybrid Cloud, as it offers more efficiency , business optimization, access to real-time data and always-on availability.
However , the ability of Hybrid clouds to burst into the public cloud space when necessary is bringing up security concerns.
Although this capability is particularly useful to organisations, it may be a call for danger and users and security vendors are realizing this. Cyberoam predicts an increase in demand for security in Hybrid Cloud environments.
Browser-Based Attacks Are Still Hot!
In a bait to achieve sure-shot infection and victimize users, use of browser-based attacks like Water hole will further rise. This will include a rise in exploitation of browser vulnerabilities and also use of malicious websites. Attackers will continue to target users by directing them to trusted and commonly visited URLs which would be infected with malicious codes.
Water hole mechanism includes cyber offenders infecting websites that are frequently visited by their targets. In 2013, many have already agreed on the rise seen in watering holes. In fact a lot of hackers that were using spear phishing attacks to target users have also started using watering holes.
Mobiles Still Remain A Darling Of Malware Attackers And Exploits
Increasing base of smartphone users is a primary reason for attackers to find interest in attacking those devices. In addition to this, users use their personal devices to access work emails and connect to company networks, which aggravates this interest further.
Applications are the backbones of smart phones and most of the mobile apps lack adequate security, adding to the misery of security on mobile devices.
All of these factors collate to increase the interest attackers have in smart devices. 2014 is sure to experience newer and sharper mobile threats
“Internet of Things” Adds Security Risks For Home Devices
IOT- ‘Internet of Things’ is something we all are waking up to, these days. Everything seems to be on the Internet! Right from our work to social lives, and storage needs, Internet has also opened its doors to home devices now! As more and more home devices get connected to the Internet, it is obvious that attackers will soon find their way through them too.
Cyberoam predicts a rise in need for security solutions for home devices, besides your office devices. Because one thing is evident – the level of risk and quantum of vulnerability is similar, irrespective of whether the device resides in your home or in your office network.
Windows Users At Risk As Windows XP Comes To End-Of-Life
As Microsoft decides to stop supporting Windows XP after 8th April 2014, users will need to upgrade to newer Windows versions, and so will the attackers shift their focus to these versions.
Moreover, users who still continue to use Windows XP, will not have their vulnerabilities patched, leaving them open to exploits.
E-Business
Mobile App Usage to Drop By 25 Percent on AI Assistants- Study
By 2027 mobile app usage will decrease by 25 per cent due to AI assistants, according to Gartner, Inc. Smartphone users will turn to AI assistants, such as Apple Intelligence, ChatGPT, Google Gemini, Meta AI, and others to replace apps for many functions.
In addition to the impact of AI assistants, apps will be consolidated across separate brands and companies, creating mobile app partnerships or consortiums to reach more users per app at scale and defray the cost of creation and maintenance.
“CMOs should begin scenario planning for the impacts of decreased mobile app usage,” said Emily Weiss, senior principal for the Gartner Marketing Practice.
“Brands with low app engagement and retention will likely be first impacted – this will be a positive development for brands that are not overly reliant on driving revenue via apps as app development costs will decrease.
Other brands may be severely impacted by the disintermediation of users turning to AI assistants for services.
The loss of app users will also result in the loss of first-party data collection and the ability to reach fewer users via mobile push notifications,” she added.
By 2026, over 1/3 of web content will be created for the purposes of Gen-AI powered search.
According to Gartner’s 2024 CMO Spend Survey of 395 respondents between February and March 2024, the average CMO allocated almost a quarter of their digital marketing budget to search.
Other than end users directly visiting a website, search currently drives more traffic to the average commercial enterprise website than any other referral source.
Given this, a loss of search driven traffic due to algorithmic shifts by major search engines would result in tangible, negative commercial impact to any organisation.
“CMOs will need to direct their teams to hire talent with a strong understanding of how GenAI, and broader AI influences, impacts the performance of their content in search algorithms,” said Weiss.
“It will be important to upskill the function by investing in search and content talent with AI skillsets. These associates will need to have familiarity with creating or optimising content to train and rank within evolving search algorithms,” Weiss added.
By 2028 digital marketers will move 30 per cent of their paid social budget to support advertising and partnerships on subscription-based channels.
It is becoming more challenging for CMOs to maintain, let alone grow, their reach and engagement among consumers.
This is especially true as consumers shift their tech and media behaviors away from social media, to other platforms and subscription based channels.
Gartner’s 2024 CMO Spend survey found that since 2022, paid social has maintained the highest budget allocation for all digital media spend.
In 2024, B2C Marketing leaders reported allocating 14.3 per cent for their digital channel budget to social media advertising (an increase from 12.3% in 2023).
“Closed group communities and subscription channels offer a potential alternative for social media weary consumers and content creators who want to do more than feed the algorithm,” said Weiss.
“Brands can leverage closed-group subscription channels – such as Substack, Patreon, and Discord – and the professional creators on them to reach relevant target audiences who are already engaging with content they self-selected into consuming.”
By 2027, 85 per cent of customer data will be xollected from automated interactions or those led by AI agents. Current AI models, such as large language models (LLMs), lack the agency to autonomously execute tasks and adapt in complex environments.
However, as new levels of intelligence are added, new AI agents are poised to quickly become more capable and reliable as brands seek to address customer facing use cases.
“There will be more AI agents than people, so while current approaches require humans in the loop, this idea will quickly become antiquated.
“Marketers will need to determine when and how they can trust AI agents to act on behalf of the brand and customers across key areas,” said Weiss.
E-Business
NIMC Trains 388 Personnel to Boost NIN Enrolment
National Identity Management Commission (NIMC) has kicked off a three-day training program for 388 personnel aimed at enhancing the National Identification Number (NIN) enrolment process across the country.
The training, tagged “Refresher Training of Trainers on NIN Integration to the National Social Register: Technical and hands-on devices and field operations and procedures”, is in collaboration with the National Social Safety-Net Coordinating Office.
The training is also to equip personnel with the necessary skills to efficiently handle the complexities of enrolment processes
In her address at the event held in Port Harcourt on Monday, Abisoye Coker-Odusote, director-general and chief executive officer, NIMC, noted that the initiative aligns with the commission’s overarching goal of achieving secured and great success for the Renewed Hope social initiatives.
Represented by Adedapo Adedoyin, her technical advisor on ICT, the NIMC DG said the event is a pivotal initiative that marks a significant step forward in our mission to enhance and modernize the National Identification Number enrolment process across Nigeria.
She stated, “Today, I am pleased to announce the launch of a comprehensive training program aimed at refreshing the technical and operational skills of the National Social Safety-Net Coordinating Office State Operations Coordinating Unit and NIMC staff.
“This initiative focuses on practical and field-based exercises, ensuring that our teams are well-equipped to handle the complexities of enrolment processes with precision and efficiency.
“This initiative aligns with our overarching goal of achieving secured and great success for the Renewed Hope social initiatives. Through verified digital identification, we aim to improve the lives of Nigerians by providing them with access to essential services and opportunities that require a reliable and secure identity verification system”.
Coker-Odusote explained that the training program will be conducted in two batches, encompassing four states: Kwara, Nasarawa, Kano, and Rivers. A total of 388 attendees will participate in this initiative, including 225 NASSCO State Operations Coordinating Unit representatives, 35 NIMC facilitators, and 128 State support staff.
She added, “The sessions are meticulously designed to foster knowledge sharing and hands-on experience with NIMC’s enrolment device and software, ensuring that our personnel are adept at using these tools to their full potential.
“By empowering our teams with enhanced skills and practical experience, we are setting the stage for more efficient and accurate NIN enrolment processes across the nation”.
Coker-Odusote further said the training program “is a crucial step toward achieving the World Bank’s Identification for Development Initiative target of enrolling 180 million Nigerians with secure digital IDs.
“By bolstering our technical and operational capabilities, we are ensuring that NIMC is well-positioned to meet and exceed this target, thereby contributing to the global vision of inclusive and accessible digital identification for all”.
The NIMC boss8 called for collaboration between all stakeholders saying, “As we embark on this journey, I urge all participants to embrace this opportunity for growth and development.
“Together, we can build a robust and efficient National Identification System that will serve as the cornerstone for Nigeria’s social and economic progress.”
E-Business
Kaspersky Discovers New Scam Scheme Targeting Businesses on Social Media
Kaspersky experts have uncovered a new phishing scam targeting businesses that promote their pages on Facebook. Scammers send emails allegedly on behalf of Meta for Business – Facebook’s platform for businesses – claiming the recipient’s page contains prohibited content.
The email suggests users provide explanations in order for their account and page to be unblocked. The goal of the attackers is likely to get access to users’ business accounts.
Kaspersky’s anonymised data shows that such emails started reaching users on 14 December 2024, with complaints coming from organisations all over the world, including the Middle East, Turkiye and Africa.
By examining the “From” field in the email it can be seen that the domain does not belong to Facebook. According to Kaspersky data the emails that this campaign used were sent from different domains.
The link in the email redirects users to Facebook Messenger. On Messenger, the account posing as Facebook’s support team appears legitimate, creating a false sense of trust.
There is an indication that this is a fan page, but it is easy to miss in a situation of high stress after being accused of spreading illegitimate content.
This scheme stands out for its sophistication. Unlike earlier scams that accused users of copyright violations and directed them to respond via email, this approach simulates internal communication on the Facebook platform itself.
“In 2025, we anticipate a rise in attacks leveraging social engineering and user trust in major platforms. Scams like this are becoming more sophisticated as attackers strive to mimic official services closely.
“Users must remain vigilant, verify the authenticity of messages, and avoid clicking on suspicious links. We strongly advise users not to engage with suspicious accounts and to activate additional security measures, such as two-factor authentication.
“If you receive such an email, report the incident to Facebook’s support team and update your passwords immediately if any information has been compromised,” comments Andrey Kovtun, Email Threats Protection Group Manager at Kaspersky.
- Telecom2 days ago
Samsung Galaxy S25 Series: Redefining Smartphones with Advanced AI Integration
- Telecom2 days ago
NLC Announces Nationwide Boycott over Telecom Hike
- Telecom2 days ago
FG, WIOCC Sign $10M MoU to Connect 3 million Homes with Broadband Fibre Connectivity
- Telecom2 days ago
MainOne Boosts Connectivity for West African Businesses with Equiano Cable
- Telecom2 days ago
All the Android updates coming to the Samsung Galaxy S25 series and more
- News2 days ago
Social Impact Champions Call for Business Investment in African Women and Girls
- Telecom2 days ago
MTN’s New Year Campaign: Inspiring Change, One Move at a Time
- Broadcasting2 days ago
NCC, NBTE to formulate IP Policy for Polytechnics, Technical Institutions