E-Business
IT Managers are Inundated with Cyberattacks, Struggling to Keep Up, Says Sophos Global Survey
Sophos, a global leader in network and endpoint security, has announced the findings of its global survey, The Impossible Puzzle of Cybersecurity, which reveals that IT managers are inundated with cyberattacks coming from all directions and are struggling to keep up due to a lack of security expertise, budget and up to date technology.
The survey polled 3,100 IT decision makers from mid-sized businesses in the US, Canada, Mexico, Colombia, Brazil, UK, France, Germany, Australia, Japan, India, and South Africa.
Cybercriminals Use Multiple Attack Methods and Payloads for Maximum Impact
The Sophos survey shows how attack techniques are varied and often multi-staged, increasing the difficulty to defend networks.
One in five IT managers surveyed didn’t know how they were breached, and the diversity of attack methods means no one defensive strategy is a silver bullet.
“Cybercriminals are evolving their attack methods and often use multiple payloads to maximize profits. Software exploits were the initial point of entry in 23 percent of incidents, but they were also used in some fashion in 35 percent of all attacks, demonstrating how exploits are used at multiple stages of the attack chain,” said Chester Wisniewski, principal research scientist, Sophos.
“Organizations that are only patching externally facing high-risk servers are left vulnerable internally and cybercriminals are taking advantage of this and other security lapses.”
The wide range, multiple stages and scale of today’s attacks are proving effective. For example, 53 percent of those who fell victim to a cyberattack were hit by a phishing email, and 30 percent by ransomware. Forty-one percent said they suffered a data breach.
Weak Links in Security Increasingly Lead to Supply Chain Compromises
Based on the responses, it’s not surprising that 75 percent of IT managers consider software exploits, unpatched vulnerabilities and/or zero-day threats as a top security risk.
Fifty percent consider phishing a top security risk.
Alarmingly, only 16 percent of IT managers consider supply chain a top security risk, exposing an additional weak spot that cybercriminals will likely add to their repertoire of attack vectors.
“Cybercriminals are always looking for a way into an organization, and supply chain attacks are ranking higher now on their list of methods. IT managers should prioritize supply chain as a security risk, but don’t because they consider these attacks perpetrated by nation states on high profile targets. While it is true that nation states may have created the blueprints for these attacks, once these techniques are publicized, other cybercriminals often adopt them for their ingenuity and high success rate,” said Wisniewski.
“Supply chain attacks are also an effective way for cybercriminals to carry out automated, active attacks, where they select a victim from a larger pool of prospects and then actively hack into that specific organization using hand-to-keyboard techniques and lateral movements to evade detection and reach their destination.”
Lack of Security Expertise, Budget and Up to Date Technology
According to the Sophos survey, IT managers reported that 26 percent of their team’s time is spent managing security, on average.
Yet, 86 percent agree security expertise could be improved and 80 percent want a stronger team in place to detect, investigate and respond to security incidents.
Recruiting talent is also an issue, with 79 percent saying that recruiting people with the cybersecurity skills they need is challenge.
Regarding budget, 66 percent said their organization’s cybersecurity budget (including people and technology) is below what it needs to be.
Having current technology in place is another problem, with 75 percent agreeing that staying up to date with cybersecurity technology is a challenge for their organization.
This lack of security expertise, budget and up to date technology indicates IT managers are struggling to respond to cyberattacks instead of proactively planning and handling what’s coming next.
“Staying on top of where threats are coming from takes dedicated expertise, but IT managers often have a hard time finding the right talent or don’t have a proper security system in place that allows them to respond quickly and efficiently to attacks,” said Wisniewski.
“If organizations can adopt a security system with products that work together to share intelligence and automatically react to threats, then IT security teams can avoid the trap of perpetually catching up after yesterday’s attack and better defend against what’s going to happen tomorrow.
“Having a security ‘system’ in place helps alleviate the security skills gap IT managers are facing. It’s much more time and cost effective for businesses to grow their security maturity with simple to use tools that coordinate with each other across an entire estate.”
Synchronized Security Solves the Impossible Puzzle of Cybersecurity
With cyberthreats coming from supply chain attacks, phishing emails, software exploits, vulnerabilities, insecure wireless networks, and much more, businesses need a security solution that helps them eliminate gaps and better identify previously unseen threats.
Sophos Synchronized Security, a single integrated system, provides this much needed visibility to threats by integrating Sophos endpoint, network, mobile, Wi-Fi, and encryption products to share information in real-time and automatically respond to incidents. More information about Synchronized Security is available at Sophos.com.
The Impossible Puzzle of Cybersecurity survey was conducted by Vanson Bourne, an independent specialist in market research, in December 2018 and January 2019.
This survey interviewed 3,100 IT decision makers in 12 countries and across six continents in the US, Canada, Mexico, Colombia, Brazil, UK, France, Germany, Australia, Japan, India, and South Africa. All respondents were from organizations with between 100 and 5,000 employees.
National Identity Management Commission (NIMC) has kicked off a three-day training program for 388 personnel aimed at enhancing the National Identification Number (NIN) enrolment process across the country.
The training, tagged “Refresher Training of Trainers on NIN Integration to the National Social Register: Technical and hands-on devices and field operations and procedures”, is in collaboration with the National Social Safety-Net Coordinating Office.
The training is also to equip personnel with the necessary skills to efficiently handle the complexities of enrolment processes
In her address at the event held in Port Harcourt on Monday, Abisoye Coker-Odusote, director-general and chief executive officer, NIMC, noted that the initiative aligns with the commission’s overarching goal of achieving secured and great success for the Renewed Hope social initiatives.
Represented by Adedapo Adedoyin, her technical advisor on ICT, the NIMC DG said the event is a pivotal initiative that marks a significant step forward in our mission to enhance and modernize the National Identification Number enrolment process across Nigeria.
She stated, “Today, I am pleased to announce the launch of a comprehensive training program aimed at refreshing the technical and operational skills of the National Social Safety-Net Coordinating Office State Operations Coordinating Unit and NIMC staff.
“This initiative focuses on practical and field-based exercises, ensuring that our teams are well-equipped to handle the complexities of enrolment processes with precision and efficiency.
“This initiative aligns with our overarching goal of achieving secured and great success for the Renewed Hope social initiatives. Through verified digital identification, we aim to improve the lives of Nigerians by providing them with access to essential services and opportunities that require a reliable and secure identity verification system”.
Coker-Odusote explained that the training program will be conducted in two batches, encompassing four states: Kwara, Nasarawa, Kano, and Rivers. A total of 388 attendees will participate in this initiative, including 225 NASSCO State Operations Coordinating Unit representatives, 35 NIMC facilitators, and 128 State support staff.
She added, “The sessions are meticulously designed to foster knowledge sharing and hands-on experience with NIMC’s enrolment device and software, ensuring that our personnel are adept at using these tools to their full potential.
“By empowering our teams with enhanced skills and practical experience, we are setting the stage for more efficient and accurate NIN enrolment processes across the nation”.
Coker-Odusote further said the training program “is a crucial step toward achieving the World Bank’s Identification for Development Initiative target of enrolling 180 million Nigerians with secure digital IDs.
“By bolstering our technical and operational capabilities, we are ensuring that NIMC is well-positioned to meet and exceed this target, thereby contributing to the global vision of inclusive and accessible digital identification for all”.
The NIMC boss8 called for collaboration between all stakeholders saying, “As we embark on this journey, I urge all participants to embrace this opportunity for growth and development.
“Together, we can build a robust and efficient National Identification System that will serve as the cornerstone for Nigeria’s social and economic progress.”
Kaspersky experts have uncovered a new phishing scam targeting businesses that promote their pages on Facebook. Scammers send emails allegedly on behalf of Meta for Business – Facebook’s platform for businesses – claiming the recipient’s page contains prohibited content.
The email suggests users provide explanations in order for their account and page to be unblocked. The goal of the attackers is likely to get access to users’ business accounts.
Kaspersky’s anonymised data shows that such emails started reaching users on 14 December 2024, with complaints coming from organisations all over the world, including the Middle East, Turkiye and Africa.
By examining the “From” field in the email it can be seen that the domain does not belong to Facebook. According to Kaspersky data the emails that this campaign used were sent from different domains.
The link in the email redirects users to Facebook Messenger. On Messenger, the account posing as Facebook’s support team appears legitimate, creating a false sense of trust.
There is an indication that this is a fan page, but it is easy to miss in a situation of high stress after being accused of spreading illegitimate content.
This scheme stands out for its sophistication. Unlike earlier scams that accused users of copyright violations and directed them to respond via email, this approach simulates internal communication on the Facebook platform itself.
“In 2025, we anticipate a rise in attacks leveraging social engineering and user trust in major platforms. Scams like this are becoming more sophisticated as attackers strive to mimic official services closely.
“Users must remain vigilant, verify the authenticity of messages, and avoid clicking on suspicious links. We strongly advise users not to engage with suspicious accounts and to activate additional security measures, such as two-factor authentication.
“If you receive such an email, report the incident to Facebook’s support team and update your passwords immediately if any information has been compromised,” comments Andrey Kovtun, Email Threats Protection Group Manager at Kaspersky.
Lagos State government and the Nigerian Postal Service (NIPOST) are joining forces to revolutionise e-commerce logistics in Nigeria’s economic capital.
The collaboration aims to enhance last-mile delivery and optimise connectivity within Lagos and beyond.
During a courtesy visit to governor Babajide Sanwo-Olu, Ms. Tola Odeyemi, postmaster-general and CEO of NIPOST, highlighted the strategic importance of Lagos in driving innovation in the e-commerce sector.
“As the e-commerce landscape continues to evolve, Lagos leads the charge in this growth. Through enhanced postal and logistics services, we seek to empower small businesses and individuals engaging in this expanding sector,” Odeyemi said.
She underscored her commitment to fostering partnerships that would align NIPOST with the demands of a modern economy, identifying Lagos as a pivotal partner.
Lagos is central to achieving our vision of efficient and future-ready postal services, she added.
Odeyemi applauded Lagos state for its vibrant programmes that drew global attention during the December festivities, stating that such initiatives could drive further economic growth and diaspora engagement.
She pledged enhanced postal and logistics support to drive e-commerce growth and empower small businesses in Nigeria., highlighting NIPOST’s readiness to collaborate with Lagos State to enhance last-mile delivery, foster innovation, and improve public service delivery.
Lagos, as Nigeria’s economic hub, is a critical partner in our vision to make NIPOST’s services more efficient and relevant in today’s world, Odeyemi stated.
She commended Lagos State for its strides in infrastructure and governance, underscoring the importance of strategic partnerships to optimize connectivity within Lagos and nationwide.
Governor Sanwo-Olu challenged NIPOST to rethink its approach and embrace technology as a transformative tool for business facilitation.
“For NIPOST to remain relevant, you must challenge the status quo, revamp your services, and adopt innovative strategies that address today’s needs and anticipate future demands,” the governor advised.
He also pledged Lagos state’s support in upgrading NIPOST’s infrastructure to improve service delivery and create an enabling environment for seamless e-commerce operations.
USSD Dispute: FG May Blacklist 18 Banks Allegedly Owing Telcos N250Bn
NIMC Trains 388 Personnel to Boost NIN Enrolment
NLC Shuts Lagos TV, Radio Stations over non-Implementation of N85,000 Minimum Wage
NGX Warns Public of Fraudulent Impersonation by ‘Value Gain’
AfDB to Partner LAMATA to Expand Existing Rail System
MTN Nigeria Renews Spectrum Lease Agreement with NTEL
NERC Discloses $5.7 Million Debt Owed by International Customers for Q3 2024 Electricity Supply
CBN, SEC Approve FCMB Group’s N147bn Rights Offer
A beginner’s guide to Temu: Your ultimate shopping companion
Corporate Blackmail, My Story as a Case Study, by Leo Stan Ekeh, Chairman Zinox Group
Telecom2 days agoSuspected Lakurawa Terrorists Kill 3 Telcoms Workers in Kebbi
General News2 days agoLagos State Sets Strict Deadline for 2024 Tax Returns Filing
E-Financial2 days agoBudgIT Queries Irregularities in FG’s Proposed 2025 Budget
News2 days agoSERAP Drags FG, Govs to ECOWAS Court over ‘Misuse of Cybercrimes Act’
E-Financial2 days agoNAICOM Seeks Police’s Support to Enforce Third-party Motor Insurance
E-Business2 days agoLagos, NIPOST Partner to Transform e-Commerce Delivery
E-Financial2 days agoGAIM 6: Fidelity Bank Rewards 10 Customers with N10m
News2 days agoGOCOP Applauds Edo Gov for Appointing Edomaruse, SA, Int’l Development