Connect with us

E-Business

Privilege Abuse, Human Error, Greatest Risks to Enterprise Data- Oracle Study

Published

on

Adebayo Sanni, Country Manager, Oracle, Nigeria
Kindly share this post

Data breaches cost organizations millions, damage their reputation, and result in lost customers and business opportunities.

A new survey of 353 Independent Oracle Users Group (IOUG) database and IT professionals examines the state of enterprise database security, where the biggest risks lie, and how organizations can improve upon their security strategies.

To better understand the state of enterprise database security, the Independent Oracle Users Group (IOUG) released a global survey titled “DBA – Security Superhero: 2014 IOUG Enterprise Data Security Survey.”

The survey, conducted by Unisphere Research and sponsored by Oracle, polled 353 IOUG database security managers, database administrators, and directors or managers of IT in companies spanning various industries including IT services, government, education, utilities, transportation, and financial services.

Although the survey results show that organizations have a high commitment to enterprise security, it spotlights how ill-prepared most organizations are to both internal and external threats.

Overall, the survey results indicate that organizations have weak preventive, detective, and administrative security controls, including limited internal controls on privileged users, lack of knowledge of where sensitive data resides, and inadequate monitoring of privileged-user activities.

While 58 percent of respondents noted that databases were the most vulnerable part of their IT environment, the majority invested in securing areas of less risk such as the network, servers, and desktops.

Key Findings Include:

More than three-fourths (81 percent) of respondents see human error as the greatest risk to enterprise data, followed by a fear of inside attacks (65 percent).

Other concerns included access privilege abuse from IT staff (54 percent) and malicious code and viruses in their systems (53 percent).

Despite these human risks, many respondents indicated they have relatively few safeguards in place against accidental or intentional staff abuse.

Alarmingly, almost 40 percent of those surveyed admitted to not knowing which databases had sensitive or regulated information and 71 percent lacked safeguards or were unsure if any were in place to combat accidental harm to databases and applications. Today’s complex data environments may be affecting respondents’ abilities to implement comprehensive data protection efforts.

Only 18 percent of respondents encrypt data at rest on all their databases. Further, only 46 percent of the respondents were redacting sensitive application data, leaving the rest open to casual users of those applications.

Despite the well understood risks with proliferation of production data to non production environment, 45 percent of respondents use copies of production data for test and development and 41 percent of them have three or more copies of production data.

“We are in the age of mega-breaches—where breaches in the millions are becoming commonplace. For most organizations, it’s no longer a matter of ‘if’ an attack will occur, but ‘when,’” said Vipin Samar, vice president of database security, Oracle. “This survey highlights that many enterprises lack proper database security controls, and under the current heightened threat environment, they simply cannot afford to wait. It’s more important than ever for organizations to have actionable data security strategies in place to properly manage sensitive customer and organizational data.”

“This survey is a powerful tool for both learning and educating, putting a fine point on the key security issues that keep superhero DBAs and their management awake at night. Exercising extreme data security diligence and data breach readiness is no longer an optional concern but rather a cost of doing business,” said John Matelski, President of the IOUG. “The survey highlights the insight and breadth the IOUG community of professionals contributes to the marketplace across sectors, professions, and geography.”


Kindly share this post

Nigeria CommunicationsWeek believes that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. So since 2007, we have devoted our energy to independent reportage of technology and how they affect lives.

E-Business

Gmail to Replace SMS Codes with QR Authentication

Published

on

Kindly share this post

Gmail is set to replace SMS-based authentication codes with QR code systems to verify user identity as part of Google’s effort to transition to a more secure model of two-factor authentication.

Gmail to Replace SMS Codes with QR Authentication

According to Forbes, a Gmail insider revealed ongoing plans to shift from text message verification to an alternative approach aimed at enhancing security and reducing risks such as phishing and fraud.

Gmail has long utilised SMS-based authentication for abuse prevention and security verification, helping confirm returning users and preventing fraudulent activities like mass account creation for spam and malware distribution.

However, concerns have arisen over the vulnerability of this method, with cybercriminals increasingly exploiting text-based security codes for unauthorised access.

The shift away from SMS verification is driven by its susceptibility to phishing and reliance on mobile carrier security protocols.

Additionally, the emergence of traffic pumping scams, where cybercriminals generate revenue by triggering mass authentication messages, has highlighted the need for stronger authentication methods.

 

 


Kindly share this post
Continue Reading

E-Business

Kaspersky Reports Nearly 900m Phishing Attempts in 2024 as Cyber threats Increase

Published

on

Kindly share this post

Kaspersky’s security solutions blocked over 893 million phishing attempts in 2024 – a 26% increase from 2023, when the total stood at nearly 710 million.

The surge in attempts (shown in the graph below) between May-July is traditionally tied to the international holiday season when fraudsters frequently try to lure travelers with scams involving fake airline and hotel bookings, deceptive tour packages and too-good-to-be-true offers.

Experts observed a range of phishing and scam schemes aimed at stealing data, money and installing malicious software. In 2024, cybercriminals often mimicked the websites of well-known brands like Booking.com, Airbnb, TikTok, Telegram, and others. One ongoing campaign, for example, has been targeting TikTok Shop users.

Cybercriminals created fake login pages designed to steal sellers’ credentials. Additionally, scammers capitalised on trending news, orchestrating fraud schemes involving the hype topics, for example cryptocurrency game Hamster Kombat and TON wallets.

Fraudulent schemes also tended to capitalise on fake celebrity images in 2024, falsely promoting giveaways of valuable prizes to fans that were never delivered. The trend persists in 2025.

“While the core mechanics of phishing and scams remain unchanged, attackers constantly refine their disguises. They capitalise on trending news, hype-driven topics, and even combine branding from multiple companies on a single phishing page to enhance efficiencies of their campaigns.

“AI-driven tools help them to create highly convincing fake websites, making fraud harder to detect. These evolving tactics pose a growing risk – not just to financial security but also to personal identity protection. As a result, vigilance and the use of robust cybersecurity solutions have never been more crucial,” says Olga Svistunova, a security expert at Kaspersky.

Spam and malicious email campaigns

According to Kaspersky data, both individuals and corporate users encountered malicious email attachments more than 125 million times in 2024.

Cybercriminals used various tactics in email campaigns targeting businesses, as observed by experts. These included sending emails with password-protected archives containing malicious content and SVG images disguised as harmless graphics, and many other schemes. Attackers lured victims into clicking on malicious content through fake court appeals, fake deals, counterfeit official notifications and more.

Nearly every second email in a corporate mailbox – 47% of global traffic, marking a 1.27 percentage point increase from the previous year – was spam. South African users encountered 20% more malicious emails in comparison to the previous year.

While spam includes different email threats, including those mentioned above, it is not always malicious and consists mostly of unsolicited advertisements.

Experts note that corporate spam trends of the last year prominently feature advertisements for AI solutions, related webinars, online promotion services, follower-boosting schemes and more.

 


Kindly share this post
Continue Reading

E-Business

Group Applauds Nigeria’s AI Push, Urges Seizure of $15Bn Digital Economy Opportunity

Published

on

Kindly share this post

Nigeria’s growing investment in Artificial Intelligence (AI) and digital transformation is positioning the country as one of Africa’s most ambitious tech-driven economies, with AI projected to contribute $15 billion to Nigeria’s economy by 2030.

As global technology companies deepen their focus on Africa, Young Professionals for Tinubu (YP4T) has acknowledged the deliberate policy moves by President Bola Ahmed Tinubu’s administration to ensure AI becomes a real driver of economic growth, job creation, and youth empowerment.

Following the President’s high-level discussions with global technology leaders, including his recent meeting with Google CEO Sundar Pichai, there is increasing recognition that Nigeria is taking active steps to secure its place in the global AI economy. But beyond diplomatic engagements, the administration has backed its vision with tangible programs that are already making an impact.

The 3 Million Technical Talent (3MTT) initiative has already begun producing a pipeline of AI-trained professionals, while the National AI Strategy Framework has laid the groundwork for AI integration across finance, agriculture, healthcare, and education.

The administration’s efforts to attract investment into Nigeria’s AI and technology ecosystem have also led to direct support for startups and digital enterprises, ensuring young Nigerians have access to the resources and capital necessary to innovate and compete internationally.

Global partnerships with companies such as Microsoft, Meta, and Nvidia have further reinforced Nigeria’s commitment to AI as a pillar for economic transformation.

“AI is no longer a theoretical concept—it is a defining force in global economies, and Nigeria is now actively securing its place in that future,” said Victor Benjamin, West/South South Director of YP4T.

“For years, young Nigerians have sought opportunities in technology and digital innovation. What we are seeing now is a deliberate effort by the administration to turn that aspiration into reality through strategic policies, funding, and industry collaboration.

“This is a critical time for Nigerian professionals and businesses to position themselves in the AI-driven economy.”

While many African economies continue to grapple with integrating AI and digital transformation into their long-term growth plans, Nigeria’s current trajectory signals a shift toward becoming a leader in AI adoption and development.

The impact of AI is already being felt in precision agriculture, AI-driven financial inclusion, digital healthcare, and education technology, demonstrating how these investments are directly improving productivity, economic diversification, and access to essential services.

However, experts warn that Nigeria must sustain these efforts to fully unlock the potential of AI-driven growth. With a youth population expected to exceed 100 million by 2050, ensuring that young professionals have the skills, tools, and infrastructure to build AI-powered solutions is key to job creation and economic stability.

“As a network of young professionals actively engaged in shaping Nigeria’s future, we see these investments as fundamental to building a globally competitive workforce,” continued Benjamin.

“This is not just about innovation; this is about securing economic opportunities for millions of young Nigerians. AI and digital transformation must be central to Nigeria’s long-term growth strategy, and every young Nigerian should be paying attention to these opportunities.”

With AI projected to add billions to Nigeria’s GDP in the coming years, industry stakeholders, government institutions, and the private sector must work together to ensure these initiatives translate into real economic gains.

As Nigeria continues to attract international AI investment, YP4T remains committed to mobilizing young Nigerians to engage, innovate, and lead in this digital revolution.


Kindly share this post
Continue Reading

Trending