E-Business
Ransomware: Microsoft Gives Details of Attack, Decries Govts’ Inaction
Microsoft has stressed the need for urgent collective action to keep people safe online, following the world’s biggest cyberattack at the weekend, sending countries into ‘disaster recovery mode.
In a blog post, ‘Lessons from last week’s cyberattack’, Brad Smith, president and chief legal officer at Microsoft, said the global tech giant takes every single cyberattack on a Windows system seriously.
Starting first in the United Kingdom and Spain, the malicious “WannaCrypt” software quickly spread globally, blocking customers from their data unless they paid a ransom using Bitcoin.
The WannaCrypt exploits used in the attack were drawn from the exploits stolen from the National Security Agency, or NSA, in the United States, Smith said. “That theft was publicly reported earlier this year. A month prior, on March 14, Microsoft had released a security update to patch this vulnerability and protect our customers. While this protected newer Windows systems and computers that had enabled Windows Update to apply this latest update, many computers remained unpatched globally. As a result, hospitals, businesses, governments, and computers at homes were affected.
“All of this provides the broadest example yet of so-called “ransomware,” which is only one type of cyberattack”.
He lamented that, unfortunately, consumers and business leaders have become familiar with terms like “zero day” and “phishing” that are part of the broad array of tools used to attack individuals and infrastructure.
“We take every single cyberattack on a Windows system seriously, and we’ve been working around the clock since Friday to help all our customers who have been affected by this incident. This included a decision to take additional steps to assist users with older systems that are no longer supported. Clearly, responding to this attack and helping those affected needs to be our most immediate priority.
“At the same time, it’s already apparent that there will be broader and important lessons from the ‘WannaCrypt’ attack we’ll need to consider to avoid these types of attacks in the future. I see three areas where this event provides an opportunity for Microsoft and the industry to improve.
“As a technology company, we at Microsoft have the first responsibility to address these issues. We increasingly are among the first responders to attacks on the internet. We have more than 3,500 security engineers at the company, and we’re working comprehensively to address cybersecurity threats.
“This includes new security functionality across our entire software platform, including constant updates to our Advanced Threat Protection service to detect and disrupt new cyberattacks. In this instance, this included the development and release of the patch in March, a prompt update on Friday to Windows Defender to detect the WannaCrypt attack, and work by our customer support personnel to help customers afflicted by the attack.
“But as this attack demonstrates, there is no cause for celebration. We’ll assess this attack, ask what lessons we can learn, and apply these to strengthen our capabilities. Working through our Microsoft Threat Intelligence Center (MSTIC) and Digital Crimes Unit, we’ll also share what we learn with law enforcement agencies, governments, and other customers around the world.
“Second, this attack demonstrates the degree to which cybersecurity has become a shared responsibility between tech companies and customers. The fact that so many computers remained vulnerable two months after the release of a patch illustrates this aspect.
“As cybercriminals become more sophisticated, there is simply no way for customers to protect themselves against threats unless they update their systems. Otherwise they’re literally fighting the problems of the present with tools from the past. This attack is a powerful reminder that information technology basics like keeping computers current and patched are a high responsibility for everyone, and it’s something every top executive should support.
“At the same time, we have a clear understanding of the complexity and diversity of today’s IT infrastructure, and how updates can be a formidable practical challenge for many customers. Today, we use robust testing and analytics to enable rapid updates into IT infrastructure, and we are dedicated to developing further steps to help ensure security updates are applied immediately to all IT environments.
“Finally, this attack provides yet another example of why the stockpiling of vulnerabilities by governments is such a problem. This is an emerging pattern in 2017. We have seen vulnerabilities stored by the CIA show up on WikiLeaks, and now this vulnerability stolen from the NSA has affected customers around the world.
“Repeatedly, exploits in the hands of governments have leaked into the public domain and caused widespread damage. An equivalent scenario with conventional weapons would be the U.S. military having some of its Tomahawk missiles stolen. And this most recent attack represents a completely unintended but disconcerting link between the two most serious forms of cybersecurity threats in the world today – nation-state action and organized criminal action”.
Smith noted that the governments of the world should treat the attack as a wake-up call. “They need to take a different approach and adhere in cyberspace to the same rules applied to weapons in the physical world. We need governments to consider the damage to civilians that comes from hoarding these vulnerabilities and the use of these exploits.
“This is one reason we called in February for a new ‘Digital Geneva Convention’ to govern these issues, including a new requirement for governments to report vulnerabilities to vendors, rather than stockpile, sell, or exploit them. And it’s why we’ve pledged our support for defending every customer everywhere in the face of cyberattacks, regardless of their nationality. This weekend, whether it’s in London, New York, Moscow, Delhi, Sao Paulo, or Beijing, we’re putting this principle into action and working with customers around the world.
“We should take from this recent attack a renewed determination for more urgent collective action. We need the tech sector, customers, and governments to work together to protect against cybersecurity attacks. More action is needed, and it’s needed now. In this sense, the WannaCrypt attack is a wake-up call for all of us. We recognize our responsibility to help answer this call, and Microsoft is committed to doing its part”.
Brad Smith is Microsoft’s president and chief legal officer. Smith plays a key role in representing the company externally and in leading the company’s work on a number of critical issues including privacy, security, accessibility, environmental sustainability and digital inclusion, among others.
Nigerian Senate, on Tuesday, passed for first reading a bill aimed at amending the Nigerian Data Protection Act of 2023.
The amendment seeks to compel major social media platforms—including Facebook, X (formerly Twitter), Instagram, WhatsApp, YouTube, TikTok, and other independent bloggers—to establish physical offices in Nigeria.
The bill is titled “A Bill for an Act to Amend the Nigerian Data Protection Act, 2023, Mandating the Establishment of Physical Offices within the Federal Republic of Nigeria by Social Media Platforms, and for Related Matters, 2025.”
It was introduced by Senator Ned Nwoko, a lawmaker from Delta State.
The bill not only mandates that the social media platforms set up physical offices in Nigeria, but also seeks to regulate bloggers operating in the country.
It proposes that bloggers must establish verifiable offices in any Nigerian capital city, maintain proper employee records, and join a recognised association based in Abuja.
During the Senate debate, Nwoko highlighted Nigeria’s significant digital presence, referencing a report from Global Web Index shared by Business Insider Africa.
With a population of over 200 million, Nigeria ranks second globally in social media engagement.
Nwoko argued that having local offices is long overdue, noting that the absence of such offices creates challenges, including limited local representation and difficulties for users and businesses to engage directly with these platforms.
The Senate President, Godswill Akpabio, acknowledged the potential benefits of having these social media platforms establish local offices, particularly in terms of improving regulatory oversight and ensuring compliance.
However, Akpabio urged caution regarding the regulation of bloggers, stressing the importance of protecting online expression.
“It’s beneficial to have an address, but bloggers are a bit different. The best approach is for the bill to go for a second reading, followed by a public hearing to provide more clarity,” Akpabio said.
He emphasised that the intent of the bill was not to suppress social media, but rather to improve taxation and record-keeping for digital platforms in Nigeria.
The Senate has also tasked the Committee on ICT and Cyber Security to conduct a thorough review of the bill and report its findings in two months.
Google said Tuesday it will acquire cloud security platform Wiz for $32 billion, citing the need for greater cybersecurity capacity as artificial intelligence embeds itself in technology infrastructure.
The all-cash deal brings Wiz into the Google Cloud operation, boosting the capacity of consumers to use “multiple clouds” and providing “an end-to-end security platform for customers, of all types and sizes, in the AI era,” the companies said in a joint press release.
The deepening influence of AI makes “cybersecurity increasingly important in defending against emergent risks and protecting national security,” the companies said.
The transaction, the largest ever sought by Google or parent Alphabet, will test President Donald Trump’s openness to large takeovers after resistance to such deals by the administration of Joe Biden.
Alphabet had been close to a Wiz takeover last summer, but the deal fell apart due in part to regulatory concerns, according to the Wall Street Journal.
Started in 2020 by Assaf Rappaport, co-founder and CEO, and a team who sold a previous venture to Microsoft, Wiz will continue to work and provide services to platform led by other tech giants including Amazon Web Services and Microsoft Azure.
Wiz is based in New York, with offices in Tel Aviv and three other US cities.
In a webcast after the deal was announced, Rappaport said the service “continuously scans an organization’s code and cloud environments, monitoring them in real time” to “prioritize the most critical risk based on real impact and blocks active threats.”
Dare Olufunmilayo, founder and CEO of Darey.io, has said that the reason for the establishment of a physical tech hub in Lagos is to expand on the digital talents they have started building especially pushing its artificial intelligent initiatives further.
Speaking at the launch of the hub, he described the moment as more than just the opening of a new office but the beginning of a transformative movement.
“Today is not just about celebrating a new office space; it is about launching a movement, a revolution in how we learn, build careers, and create opportunities in the tech ecosystem,” he stated.
The event’s theme, “Tech & Tea: Brewing Nigeria’s Technology Innovation Future,” reflects the belief that building a thriving digital economy requires the right mix of talent, innovation, and collaboration.
Olufunmilayo likened the process to brewing the perfect cup of tea, requiring the right mix of talent, innovation, and partnerships.
“Just like brewing the perfect tea, building a thriving digital economy requires the right ingredients: talent, innovation, and collaboration,” he noted.
He also acknowledged the critical role of various stakeholders, including the Nigerian government, tech leaders, and industry partners.
“None of this would be possible without the ecosystem we are a part of. The government’s 3MTT initiative is playing a crucial role in creating a future-ready workforce,” he said, recognizing the contributions of government efforts, partners, and the dedicated Darey.io team.
Reflecting on the journey that led to this milestone, Olufunmilayo highlighted the company’s mission to empower Africans with world-class digital skills and bridge the gap between talent and opportunity.
“A few years ago, we started with a bold vision: to empower Africans with world-class digital skills and bridge the gap between talent and opportunity.
“We believed that, with the right platform, the right training, and the right mindset, anyone—no matter their background—could go from learning to earning in the global digital economy.”
That vision, he emphasized, has now become a reality. “Thousands of Nigerians have started their careers through Darey.io, working for top global companies, launching startups, and creating ground-breaking solutions.”
With the launch of Xterns.ai, the initiative is taking an even greater leap forward. “Xterns.ai is our next big leap—where we don’t just train talents; we integrate them directly into the workforce through our Proof-of-Skills Hiring model,” Olufunmilayo explained.
Speaking at the launch, Francis Sani, Technical Adviser for Innovation, Entrepreneurship, and Capital to the Minister of Communications, Innovation, and Digital Economy, highlighted Nigeria’s demographic advantage.
He noted that Nigeria has the largest youth population in Africa, with a median age of 16 years, compared to 38 in the U.S. and 46 in Japan. This, he said, positions the country as a key player in the global tech competitiveness race.
However, Sani emphasized that access to quality training and employment pathways remains a significant challenge. “We have the talent, we have the ambition, but we must scale up digital skills to compete globally,” he stated.
Senate Votes to Compel Facebook, Others to Open Offices in Nigeria
Google to Buy Cybersecurity Company Wiz for $32Bn
MTN Group to Invest $10Bn in African Expansion by 2030
ATCON Calls for Telecom Policy Improvements in Nigeria
9mobile Reinforces Innovation Leadership with Echoes, Its Trailblazing AI Storytelling Platform
General News3 days agoJumia Nigeria Kicks Off Tech Week 2025
Telecom3 days agoBridging Nigeria’s Digital Divide: ITU and UK-FCDO Fuel Rural Connectivity Revolution
E-Financial3 days agoSEC Voids Mainland Trust’s Registration, Suspends Centurion Registrars
E-Business3 days agoNITDA Expands iHATCH Initiative to Drive Job Creation, Economic Diversification
Telecom2 days agoFG to Launch $2Bn Fibre Network Project in Q4 2025
Telecom2 days agoMTN’s Earnings Hammered by Free Falling Naira in Nigeria
Telecom3 days agoTransforming Lives Through Advocacy: Princess Omoyemwen Inspires Change at MTN’s Go MAD Activation in Benin
E-Business2 days agoFG Partners Cyberpedia to Fight Misinformation with AI