E-Business
HP Wolf Security Survey Reveals IT Leader Concern Over Firmware Attacks
HP Inc. has released research from HP Wolf Security showing changing workforce dynamics are creating new challenges for IT teams around firmware security. As business workforces become increasingly distributed, IT leaders say it’s harder than ever to defend against firmware attacks.
The shift to hybrid work models has transformed how organizations manage endpoint security, while also highlighting new challenges for IT teams around securing device firmware. The HP Wolf Security global survey of 1,100 IT leaders reveals that:
- The threat of firmware attacks is a growing concern for IT leaders now that hybrid workers are connecting from home networks more frequently: With hybrid or remote work now the norm for many employees there is a greater risk of working on potentially unsecure home networks meaning that the level of threat posed by firmware attacks has risen.
More than eight-in-ten (83%) IT leaders say firmware attacks against laptops and PCs now pose a significant threat, while 76% of ITDMs said firmware attacks against printers pose a significant threat.
- Managing firmware security is becoming harder and taking longer in the era of hybrid work, leaving organizations exposed: More than two-thirds (67%) of IT leaders say protecting against, detecting, and recovering from firmware attacks has become more difficult and time-consuming due to the increase in home working, with 64% saying the same of analyzing the security of firmware configuration.
As a result, 80% of IT leaders are worried about their capacity to respond to endpoint firmware attacks.
Dr. Ian Pratt, Global Head of Security for Personal Systems at HP Inc. comments: “Firmware attacks are very disruptive and much harder to detect or remediate than your typical malware – often requiring expert and even manual intervention to fix.
“This increases the cost and complexity of remediation considerably, particularly in hybrid environments where devices are not on site for IT teams to access.
“Having more endpoints sitting outside of the protection of the corporate network also reduces visibility and increases exposure to attacks coming in via unsecured networks.”
“At the same time, we are seeing a rise in destructive attacks – such as wiper malware. Last year, our research team saw attackers conducting reconnaissance on firmware configurations, with the likely intent of exploiting unsecured configurations to weaponize for financial gain.
“Once an attacker has gained control over the firmware configuration, they can exploit their position to gain persistence and hide from anti-malware solutions that live in the Operating System (OS).
“This gives them an advantage, allowing them to stealthily maintain persistence on target devices, so they can gain access to infrastructure across the enterprise and maximize their impact.”
Despite the clear risks that firmware attacks pose to organizations, device security is not always a major consideration in the hardware procurement process, with many organizations continuing to use technologies that are not built with security in mind.
This issue is being exacerbated by the new shadow IT whereby employees are purchasing and connecting devices outside of IT purview while working remotely. HP Wolf Security’s Out of Mind and Out of Sight report found that 68% of office workers that purchased devices to support remote work said security wasn’t a major consideration in their purchasing decision. Furthermore, 43% didn’t have their new laptop or PC checked or installed by IT or security.
Boris Balacheff, Chief Technologist for Security Research and Innovation at HP Labs comments: “Security must become part of the procurement process when purchasing new IT devices. Organizations need to play the long game, because the devices you procure today will be the environment you have to manage and protect tomorrow.
“State-of-the-art device security delivers protection for firmware against malware as well as physical tampering, with detection both below and above the OS and autonomous self-healing recovery from the hardware up – but this will only help address the issue for organizations that know to ask the right questions when they procure new devices.”
HP warns that one of the key issues that businesses face is that many organizations are still reliant on legacy devices that were built to older industry standards, where design for manageable security and resilience at scale was not a focus for hardware and firmware design. This is leaving a gap in enterprise security that could take years to close.
Balacheff concludes: “As attackers continue to invest in the capability to attack and disrupt PCs and other OT and IoT devices at the firmware level, organizations also need to learn how to monitor the state of the art in device security to keep updating procurement security requirements accordingly.
“This is what will enable leading organizations to stay ahead of emerging threats and protect, detect and remediate firmware attacks at scale in the era of hybrid work.”
World Bank has raised Nigeria’s target for National Identification Numbers (NIN) issuance under the Digital Identity for Development (ID4D) project from 148 million to 180 million, reflecting confidence in the country’s progress despite earlier setbacks.
The ID4D project, launched in February 2020 with a $430 million budget, aims to establish an inclusive digital identity system to facilitate access to services, financial inclusion, and participation in the digital economy.
Nigeria has gotten $228.59 million from the $430 million earmarked for the Digital Identity for Development (ID4D) project, which was meant to facilitate the enrolment of 148 million National Identification Numbers by June 2024.
Nigeria failed to meet the enrollment target of 148 million by June 2024, and the World Bank agreed to extend the $430 million facility for the project until 2026.
In a new document detailing the terms of the restructuring, the World Bank noted that the project disbursement rate stood at 53.16 per cent as of November 2024.
The project’s total financing amounts to $430 million equivalent, $115 million of which are from the World Bank’s IDA, $100 million equivalent from the French Development Agency (AFD), and $215 million equivalent from the European Investment Bank (EIB).
The bank disclosed that, so far, 53.16 per cent of the fund has been disbursed but added that Nigeria has made significant progress toward fulfilling the final disbursement condition, which is the amendment of the NIMC Act to promote an inclusive and non-discriminatory legal and regulatory framework.
According to the latest restructuring document, the new target is part of a two-phase extension plan to support Nigeria in completing critical project milestones and expanding its reach to underserved populations.
The National Identity Management Commission (NIMC) has issued 115 million NINs as of October 2024, a significant achievement but still shy of the original June 2024 target.
The World Bank emphasised the importance of closing the existing gap, particularly for vulnerable groups such as women, persons with disabilities, and disadvantaged communities.
To accelerate progress, Nigeria secured a six-month extension earlier this year to design and launch a new national identity management system built on open-source, scalable, and interoperable architecture. Having met this condition, a second-stage extension for an additional 24 months is now proposed, pushing the project’s closing date to December 2026.
The restructuring also prioritises legal reforms, including amendments to the NIMC Act and the introduction of critical bills to bolster Nigeria’s digital economy.
The NIMC Act amendment, which has already passed two readings in the National Assembly, aims to create a non-discriminatory regulatory framework, with final approval expected by February 2025.
Ozi (www.ozionline.com), a pioneer community-driven delivery app, launches, offering users a new way to send packages and earn extra cash.
L-r: Co-Founders of Ozionline.com: Ikenna Ani (CEO), Azubike Augustine (COO) and Engr. Christian Chime (CTO)
By connecting people traveling with those needing package delivery, Ozi turns everyday trips into profitable opportunities, aiming to disrupt the global parcel delivery industry, also known as the Courier, Express, and Parcel (CEP) market, currently valued at around $460 billion.
Imagine this scenario – You’re traveling to Abuja from Lagos and have empty space in your car. With Ozi, that unused capacity can earn you extra cash by delivering a package along the way. Or maybe you’re a small business owner who needs to send a package to another state but balk at the high cost of courier services.
With Ozi, you can find a verified traveler heading in the right direction to handle your delivery, Engr. Christian Chime, Ozi’s co-founder and CEO, said during the startup launch held at Four Point by Sheraton, Victoria Island, Lagos.
“Why travel empty when you can earn?” asks Engr. Chime said. “Ozi allows travelers to make the most of their journeys while helping others get their packages delivered with ease.”
“This simple yet powerful idea leverages the daily movements of millions of Nigerians to create a logistics network that is fast, affordable, and efficient.
“Ozi’s unique approach leverages the everyday movement of travelers to bridge this gap, creating a system where everyone benefits”.
He said that the choice of Nigeria as the first launch-location for Ozi was due the potential the country holds in the parcel delivery sub-sector.
“Actually, we had the opportunity to launch OZI in another country outside Nigeria but for our thrust in the Nigerian dream and its potentials made us choose the country as the first to witness Ozi’s innovation”, Engr. Chime said.
“Travelers can now monetize their journeys by delivering packages along their routes, while senders gain access to an affordable and convenient alternative to traditional courier services”.
Ozi combines convenience, innovation, and community to deliver a win-win solution for Nigerians. From quick intra-city deliveries to long-distance trips, Ozi offers an affordable, efficient solution for all.
Whether you’re a traveler looking to earn on your trips or a sender seeking a reliable delivery option, Ozi offers a solution that works for everyone.
In the words of Azubuike Augustine, the co-founder and Chief Technology Officer of Ozi, “Ozi’s mission goes beyond simplifying package delivery. The app represents a broader effort to create shared value for all stakeholders in the logistics process.
“By connecting senders and travelers, Ozi creates a win-win scenario where costs are reduced, trust is built, and income opportunities are created”.
“Ozi prioritizes safety and transparency. Every user, whether sender or traveler, undergoes a comprehensive verification process that includes ID checks and phone number authentication. This ensures that all participants in the system are trustworthy and accountable”.
To enhance security further, the CTO said that Ozi offers real-time tracking for all transactions. Senders can monitor their packages throughout the delivery process, ensuring peace of mind. For high-value items, optional insurance coverage provides an added layer of protection, reinforcing Ozi’s commitment to reliability.
“At Ozi, we understand that trust is critical in logistics,” the Azubuike added. “That’s why we’ve built a platform where every step is designed to safeguard both the traveler and the sender.”
“Ozi is more than an app; it’s a community where everyone wins,” said Ikenna Ani, co-founder/COO of Ozi.
“From today, travelers across the globe can sign up through www.ozionline.com and start making every trip count”, he said. “We have put measures in place to ensure only genuine and verified travelers or senders use the platform. Security is primary for us”.
Ikenna added that the app will be released on Google Play Store and Apple (iOS) on January 1, 2025. Ozi Live on Instagram | Facebook.
Temu is set to enchant the holiday season with its unique blend of green magic, bringing a touch of festive wonder to Christmas celebrations. The initiative, themed “Ride the ‘Wicked’ Wave,” promises to deliver an unforgettable experience, combining technology, entertainment, and commerce to create a magical holiday atmosphere.
Temu’s green magic initiative aims to captivate audiences with a variety of festive offerings, from fashion to home decor, handmade crafts, beauty items, chic clothes, shoes, and more.
The platform’s innovative approach ensures that customers can enjoy a seamless shopping experience, with free shipping on all orders1.
As part of the celebration, Temu has also introduced a magical winter Christmas backdrop, perfect for creating a festive ambiance at home.
This backdrop, made from high-quality polyester, is designed to bring the spirit of the season to life, making it an ideal addition to any holiday decor.
With its commitment to providing exceptional products and services, Temu continues to set new standards in the e-commerce industry, ensuring that customers can enjoy the magic of Christmas in style
NCDC Activates Emergency Response as Lassa Fever Kills 190
CBN Disqualifies 41.65m Shares in Access Holdings Rights Issue
2025 Budget: FG Earmarks N1.5Bn for Airports’ Internet, Others
World Bank Raises Nigeria’s NIN Target to 180m
MTN Nigeria Renews Spectrum Lease Agreement with NTEL
UBA Group Sets Foot in France with Full Banking Services
FG Begins N50 Electronic Levy Deductions from Moniepoint, Other Digital Banks
Report Reveals Most Organisations Fear AI-driven Cyberattacks but Lack Key Defences
Nigeria Risks Missing out on $1.2 Trillion AI Opportunity- NigComSat
Firm Sues NIMC, Others On Digital Rights Breach Allegations
Telecom2 days agoAirtel Africa to Return $100m to Shareholders via Share Buyback
Broadcasting1 day agoSpotify’s ‘Detty December’ Hub and Spotify’s ‘Songs of December’ now live
Broadcasting1 day agoQNET Collaborates with Lagos Food Bank to Aid Vulnerable Children
News2 days agoEgueke, Former Bank Manager Jailed for $46,900 Fraud
Telecom2 days agoFG Gives Banks, Telcos Six-Month Deadline to Resolve N250Bn USSD Debt
Telecom2 days agoNCC Launches Initiative to Combat Fraud, Spam Messaging
Broadcasting2 days agoAfrica Magic Announces Call for Entries for 11th AMVCA
Broadcasting1 day agoNERC Discloses $5.7 Million Debt Owed by International Customers for Q3 2024 Electricity Supply