Connect with us

E-Business

Firm Explores 2025 Potential IT Outage and Supply Chain Risk Scenarios

Published

on

Kindly share this post

As part of its annual Kaspersky Security Bulletin, the company’s experts have analysed significant supply chain attacks and IT outages from the past year and explored potential future risk scenarios, providing insights aimed at helping businesses of all sizes enhance cybersecurity, build resilience, and prepare for possible emerging threats in 2025.

In 2024, supply chain attacks and IT outages emerged as dominant cybersecurity concerns, demonstrating that virtually no infrastructure is immune to risk.

A faulty CrowdStrike update affected millions of systems, and sophisticated incidents, such as the XZ backdoor and the Polyfill.io supply chain attack exposed the risks inherent in widely used tools.

These and other high-profile cases highlight the need for rigorous security measures, robust patch and update management, and proactive defenses to safeguard global supply chains and infrastructure.

In its “Story of the Year”, the Kaspersky Security Bulletin reflects on 2024’s past incidents, while contemplating hypothetical future scenarios, and considering their potential consequences, as follows:

What if a major AI provider faced an outage or a data breach? Businesses are increasingly relying on various models such as those from OpenAI, Meta, Anthropic and others.

However, despite the excellent user experience these integrations offer, they introduce significant cyber risks. Reliance on a single or limited number of AI service providers creates concentrated points of failure.

If a major AI company experiences a critical disruption, it could significantly impact dozens or even thousands of services that depend on them.

Furthermore, an incident at any major AI provider could result in one of the most severe data leaks, as these systems may store vast amounts of sensitive information.

What if on-device AI tools were exploited? As AI becomes more integrated into everyday devices, the risk of it becoming an attack vector grows significantly.

For instance, the Operation Triangulation campaign, uncovered by Kaspersky in 2023, demonstrated how attackers could compromise device integrity by exploiting zero-day vulnerabilities in the system software and hardware to deploy advanced spyware.

Similar potential software or hardware-assisted vulnerabilities in the neural processing units powering AI – both broadly and in specific platforms like Apple Intelligence – could, if discovered, extend or present an even greater threat. Exploiting such weaknesses could harness AI capabilities to significantly amplify the scope and impact of such attacks.

Kaspersky’s research into Operation Triangulation also revealed the first of its kind case reported by the company: the misuse of on-device machine learning for data extraction, highlighting that the features designed to enhance user experience are already being weaponised by sophisticated threat actors.

What if threat actors disrupted satellite connectivity? While the space industry in general has been encountering various cyberattacks for a while, the new target for threat actors may be satellite Internet providers as important elements of the global connectivity chain.

Satellite Internet can provide temporary communication links when other systems are down; airlines, ships, and other platforms may rely on it to provide onboard connectivity; it may also be used to enable secure communication services.

This presents cyber risks: a targeted cyberattack or a faulty update from a leading or dominant satellite provider could cause Internet outages and potential communication breakdowns, impacting individuals and organisations.

What if major physical threats to the Internet occurred? Continuing the topic of connectivity, the Internet is also vulnerable to physical threats. 95% of global data is transmitted through subsea cables, and there are nearly 1,500 Internet Exchange Points (IXPs) – physical locations, sometimes within data centers, where different networks exchange traffic.

A disruption to just a few critical components of this chain – such as key cables or IXPs – could overload the remaining infrastructure, potentially causing widespread outages and significantly impacting global connectivity.

What if severe vulnerabilities in Windows and Linux kernel were exploited? These operating systems power many of the world’s critical assets, including servers, manufacturing equipment, logistics systems, IoT devices, and others.

A remotely exploitable kernel vulnerability in these systems could expose countless devices and networks worldwide to potential attacks, creating a high-risk situation in which global supply chains could face significant disruption.

“Supply chain risks may seem overwhelming, but awareness is the first step toward prevention,” said Igor Kuznetsov, Director of Global Research and Analysis Team (GReAT) at Kaspersky.

“By testing updates rigorously, leveraging AI-driven anomaly detection, and diversifying providers to reduce single points of failure, we can reduce weak elements and build resilience. A culture of responsibility among personnel is equally vital, as human vigilance remains the cornerstone of security. Together, these measures can safeguard supply chains and ensure a more secure future”.


Kindly share this post

Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

E-Business

NIMC Trains 388 Personnel to Boost NIN Enrolment

Published

on

Kindly share this post

National Identity Management Commission (NIMC) has kicked off a three-day training program for 388 personnel aimed at enhancing the National Identification Number (NIN) enrolment process across the country.

NIMC Trains 388 Personnel to Boost NIN Enrolment

The training, tagged “Refresher Training of Trainers on NIN Integration to the National Social Register: Technical and hands-on devices and field operations and procedures”, is in collaboration with the National Social Safety-Net Coordinating Office.

The training is also to equip personnel with the necessary skills to efficiently handle the complexities of enrolment processes

In her address at the event held in Port Harcourt on Monday, Abisoye Coker-Odusote, director-general and chief executive officer, NIMC, noted that the initiative aligns with the commission’s overarching goal of achieving secured and great success for the Renewed Hope social initiatives.

Represented by Adedapo Adedoyin, her technical advisor on ICT, the NIMC DG said the event is a pivotal initiative that marks a significant step forward in our mission to enhance and modernize the National Identification Number enrolment process across Nigeria.

She stated, “Today, I am pleased to announce the launch of a comprehensive training program aimed at refreshing the technical and operational skills of the National Social Safety-Net Coordinating Office State Operations Coordinating Unit and NIMC staff.

“This initiative focuses on practical and field-based exercises, ensuring that our teams are well-equipped to handle the complexities of enrolment processes with precision and efficiency.

“This initiative aligns with our overarching goal of achieving secured and great success for the Renewed Hope social initiatives. Through verified digital identification, we aim to improve the lives of Nigerians by providing them with access to essential services and opportunities that require a reliable and secure identity verification system”.

Coker-Odusote explained that the training program will be conducted in two batches, encompassing four states: Kwara, Nasarawa, Kano, and Rivers. A total of 388 attendees will participate in this initiative, including 225 NASSCO State Operations Coordinating Unit representatives, 35 NIMC facilitators, and 128 State support staff.

She added, “The sessions are meticulously designed to foster knowledge sharing and hands-on experience with NIMC’s enrolment device and software, ensuring that our personnel are adept at using these tools to their full potential.

“By empowering our teams with enhanced skills and practical experience, we are setting the stage for more efficient and accurate NIN enrolment processes across the nation”.

Coker-Odusote further said the training program “is a crucial step toward achieving the World Bank’s Identification for Development Initiative target of enrolling 180 million Nigerians with secure digital IDs.

“By bolstering our technical and operational capabilities, we are ensuring that NIMC is well-positioned to meet and exceed this target, thereby contributing to the global vision of inclusive and accessible digital identification for all”.

The NIMC boss8 called for collaboration between all stakeholders saying, “As we embark on this journey, I urge all participants to embrace this opportunity for growth and development.

“Together, we can build a robust and efficient National Identification System that will serve as the cornerstone for Nigeria’s social and economic progress.”

 


Kindly share this post
Continue Reading

E-Business

Kaspersky Discovers New Scam Scheme Targeting Businesses on Social Media

Published

on

Kindly share this post

Kaspersky experts have uncovered a new phishing scam targeting businesses that promote their pages on Facebook. Scammers send emails allegedly on behalf of Meta for Business – Facebook’s platform for businesses – claiming the recipient’s page contains prohibited content.

The email suggests users provide explanations in order for their account and page to be unblocked. The goal of the attackers is likely to get access to users’ business accounts.

Kaspersky’s anonymised data shows that such emails started reaching users on 14 December 2024, with complaints coming from organisations all over the world, including the Middle East, Turkiye and Africa.

By examining the “From” field in the email it can be seen that the domain does not belong to Facebook. According to Kaspersky data the emails that this campaign used were sent from different domains.

The link in the email redirects users to Facebook Messenger. On Messenger, the account posing as Facebook’s support team appears legitimate, creating a false sense of trust.

There is an indication that this is a fan page, but it is easy to miss in a situation of high stress after being accused of spreading illegitimate content.

This scheme stands out for its sophistication. Unlike earlier scams that accused users of copyright violations and directed them to respond via email, this approach simulates internal communication on the Facebook platform itself.

“In 2025, we anticipate a rise in attacks leveraging social engineering and user trust in major platforms. Scams like this are becoming more sophisticated as attackers strive to mimic official services closely.

“Users must remain vigilant, verify the authenticity of messages, and avoid clicking on suspicious links. We strongly advise users not to engage with suspicious accounts and to activate additional security measures, such as two-factor authentication.

“If you receive such an email, report the incident to Facebook’s support team and update your passwords immediately if any information has been compromised,” comments Andrey Kovtun, Email Threats Protection Group Manager at Kaspersky.

 

 


Kindly share this post
Continue Reading

E-Business

Lagos, NIPOST Partner to Transform e-Commerce Delivery

Published

on

Kindly share this post

Lagos State government and the Nigerian Postal Service (NIPOST) are joining forces to revolutionise e-commerce logistics in Nigeria’s economic capital.

Lagos, NIPOST Partner to Transform e-Commerce Delivery

The collaboration aims to enhance last-mile delivery and optimise connectivity within Lagos and beyond.

During a courtesy visit to governor Babajide Sanwo-Olu, Ms. Tola Odeyemi, postmaster-general and CEO of NIPOST, highlighted the strategic importance of Lagos in driving innovation in the e-commerce sector.

“As the e-commerce landscape continues to evolve, Lagos leads the charge in this growth. Through enhanced postal and logistics services, we seek to empower small businesses and individuals engaging in this expanding sector,” Odeyemi said.

She underscored her commitment to fostering partnerships that would align NIPOST with the demands of a modern economy, identifying Lagos as a pivotal partner.

Lagos is central to achieving our vision of efficient and future-ready postal services, she added.

Odeyemi applauded Lagos state for its vibrant programmes that drew global attention during the December festivities, stating that such initiatives could drive further economic growth and diaspora engagement.

She pledged enhanced postal and logistics support to drive e-commerce growth and empower small businesses in Nigeria., highlighting NIPOST’s readiness to collaborate with Lagos State to enhance last-mile delivery, foster innovation, and improve public service delivery.

Lagos, as Nigeria’s economic hub, is a critical partner in our vision to make NIPOST’s services more efficient and relevant in today’s world, Odeyemi stated.

She commended Lagos State for its strides in infrastructure and governance, underscoring the importance of strategic partnerships to optimize connectivity within Lagos and nationwide.

Governor Sanwo-Olu challenged NIPOST to rethink its approach and embrace technology as a transformative tool for business facilitation.

“For NIPOST to remain relevant, you must challenge the status quo, revamp your services, and adopt innovative strategies that address today’s needs and anticipate future demands,” the governor advised.

He also pledged Lagos state’s support in upgrading NIPOST’s infrastructure to improve service delivery and create an enabling environment for seamless e-commerce operations.


Kindly share this post
Continue Reading

Trending