Customize Consent Preferences

We use cookies to help you navigate efficiently and perform certain functions. You will find detailed information about all cookies under each consent category below.

The cookies that are categorized as "Necessary" are stored on your browser as they are essential for enabling the basic functionalities of the site. ... 

Always Active

Necessary cookies are required to enable the basic features of this site, such as providing secure log-in or adjusting your consent preferences. These cookies do not store any personally identifiable data.

No cookies to display.

Functional cookies help perform certain functionalities like sharing the content of the website on social media platforms, collecting feedback, and other third-party features.

No cookies to display.

Analytical cookies are used to understand how visitors interact with the website. These cookies help provide information on metrics such as the number of visitors, bounce rate, traffic source, etc.

No cookies to display.

Performance cookies are used to understand and analyze the key performance indexes of the website which helps in delivering a better user experience for the visitors.

No cookies to display.

Advertisement cookies are used to provide visitors with customized advertisements based on the pages you visited previously and to analyze the effectiveness of the ad campaigns.

No cookies to display.

Connect with us

Telecom

Sophos’ Incident Response Report Shows How Cybercriminals Abuse Remote Desktop Protocol in 90% of Attacks

Published

on

Kindly share this post

Sophos, a global leader of innovative security solutions that defeat cyberattacks, today released the Active Adversary analysis, “It’s Oh So Quiet (?): The Sophos Active Adversary Report for 1H 2024.”

John Shier, senior security advisor at Sophos

The report, which analyzes more than 150 incident response (IR) cases handled by the Sophos X-Ops IR team in 2023, found that cybercriminals abused remote desktop protocol (RDP)—a common method for establishing remote access on Windows systems—in 90% of attacks.

This was the highest incidence of RDP abuse since Sophos began releasing its Active Adversary reports in 2021, covering data from 2020.

In addition, external remote services such as RDP were the most common vector by which attackers initially breached networks; they were the method of initial access in 65% of IR cases in 2023.

External remote services have consistently been the most frequent source of initial access for cybercriminals since the Active Adversary reports were launched in 2020, and defenders should consider this a clear sign to prioritize the management of these services when assessing risk to the enterprise.

“External remote services are a necessary, but risky, requirement for many businesses. Attackers understand the risks these services pose and actively seek to subvert them due to the bounty that lies beyond. Exposing services without careful consideration and mitigation of their risks inevitably leads to compromise. It doesn’t take long for an attacker to find and breach an exposed RDP server, and without additional controls, neither does finding the Active Directory server that awaits on the other side,” said John Shier, field CTO, Sophos.

In one Sophos X-Ops customer case, attackers successfully compromised the victim four times within six months, each time gaining initial access through the customer’s exposed RDP ports.

Once inside, the attackers continued to move laterally throughout the customer’s networks, downloading malicious binaries, disabling endpoint protection, and establishing remote access.

Compromised credentials and exploiting vulnerabilities are still the two most common root causes of attacks. However, the 2023 Active Adversary Report for Tech Leaders, released last August, found that in the first half of that year, for the first time, compromised credentials surpassed vulnerabilities as the most frequent root cause of attacks. This trend continued through the rest of 2023, with compromised credentials representing the root cause of over 50% of IR cases for the entire year. When looking at Active Adversary data cumulatively over the years from 2020 through 2023, compromised credentials were also the number one “all-time” root cause of attacks, involved in nearly a third of all IR cases. Yet despite the historical prevalence of compromised credentials in cyberattacks, in 43% of IR cases in 2023, organizations did not have multi-factor-authentication configured.

Exploiting vulnerabilities was the second most common root cause of attacks, both in 2023 and when analyzing data cumulatively from 2020 through 2023, accounting for the root cause in 16% and 30% of IR cases, respectively.

“Managing risk is an active process. Organizations that do this well experience better security situations than those that don’t in the face of continuous threats from determined attackers. An important aspect of managing security risks, beyond identifying and prioritizing them, is acting on the information. Yet, for far too long, certain risks such as open RDP continue to plague organizations, to the delight of attackers who can walk right through the front door of an organization. Securing the network by reducing exposed and vulnerable services and hardening authentication will make organizations more secure overall and better able to defeat cyberattacks,” said Shier.

The Sophos Active Adversary Report for 1H 2024 is based on more than 150 incident response (IR) investigations spanning the globe across 26 sectors.

Targeted organizations are located in 23 different countries, including the United States, Canada, Mexico, Colombia, the United Kingdom, Sweden, Switzerland, Spain, Germany, Poland, Italy, Austria, Belgium, the Philippines, Singapore, Malaysia, India, Australia, Kuwait, the United Arab Emirates, Saudi Arabia, South Africa, and Botswana.

To learn more about the current adversary landscape, read It’s Oh So Quiet (?): The Sophos Active Adversary Report for 1H 2024 on Sophos.com.


Kindly share this post

Ugo Onwuaso is an ICT enthusiast. He believes technology should be used for general good. He holds a Master of Public Administration (MPA) degree from the Lagos state University. Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

Telecom

Mart Networks Rolls Out Tailored Cybersecurity Solution for Fintechs

Published

on

Kindly share this post

Mart Networks, a leading cybersecurity distributor across Africa and the Middle East, has unveiled a specialized cybersecurity package tailored for fintech firms.

The solution, powered by Invinsense, Infopercept’s unified cybersecurity platform, aims to address the growing security needs of fintechs operating in highly regulated environments.

According to Moiz Maloo, Managing Director at Mart Networks, fintech companies face unique security challenges due to stringent regulatory requirements and increasing threats. “Most fintechs don’t have the luxury of multiple internal security teams or system integrators. With this focused offering, we’re providing an all-in-one platform with managed services built specifically for the fintech environment,” he said.

The offering integrates four key components: Invinsense XDR and Managed Detection & Response for real-time monitoring, Exposure Management for vulnerability detection, Security Compliance Management to support fintechs in meeting regulatory standards, and Cybersecurity Awareness Programs to empower teams against cyber threats.

Furthermore, the package includes deep application visibility, ensuring fintech-specific applications remain secure through Invinsense SIEM’s custom log ingestion capabilities. To reinforce protection, Infopercept’s engineering team will provide code-level fixes, patches, and infrastructure security enhancements.

With the rise of cloud-based fintech operations, the solution also incorporates full-stack cloud security, including API security, Cloud Infrastructure Entitlement Management (CIEM), and Application Security Posture Management (ASPM).

Mart Networks’ move underscores the growing importance of cybersecurity in Africa’s fintech sector, as financial services become increasingly digital and susceptible to evolving cyber threats.


Kindly share this post
Continue Reading

Telecom

Equinix Expands Digital Footprint in Nigeria with Launch of LG2.3 Data Center

Published

on

Kindly share this post

Equinix, Inc. the world’s digital infrastructure company™, has officially opened its latest data center expansion in Lagos. Called LG2.3, the facility will support Nigeria’s growing digital transformation efforts, providing state-of-the-art colocation and secure interconnection solutions which will empower businesses across the region.

It also signifies Equinix’s unwavering dedication to advancing Nigeria’s position in the global digital economy, reinforcing the company’s commitment to the region.

As part of the inauguration, Bruce Owen, President of EMEA at Equinix, along with other Equinix executives, led the ribbon-cutting ceremony at the newly expanded site. In addition to an official visit to the Governor of Lagos State, Equinix hosted an exclusive customer engagement event, bringing together key customers and partners from Nigeria’s business and technology sectors.

Attendees discussed shared successes and Equinix’s role in facilitating digital transformation, while also connecting directly with Bruce Owen for insights into how Equinix’s solutions drive innovation and business agility in the region.

Equinix executives also took part in a tree-planting ceremony, symbolising Equinix’s continued investment in sustainable initiatives across the globe and highlighting the company’s broader goal of reducing its carbon footprint while supporting greener practices across its operations worldwide.

Speaking about the expansion, Bruce Owen, President of EMEA at Equinix said “Nigeria is a crucial market for Equinix. Today’s opening is a clear demonstration of our continued commitments to invest and grow digital infrastructure that will benefit the many thousands of businesses in Nigeria and on the continent as a whole.

“I am deeply encouraged by the enthusiastic partnerships and innovations emerging from this dynamic region, which continue to inspire our commitment to Nigeria’s digital and sustainable future.”

Adding to this, Wole Abu, Managing Director of Equinix West Africa, highlighted the critical role of data centers in driving economic growth stating “Data centers continue to play a pivotal role in driving economic development in Nigeria, serving as critical infrastructure that supports digital transformation and economic growth.

“As governments and enterprises increasingly acknowledge their significance, global demand for data center capacity is poised to rise. While Africa’s demand for data solutions is still evolving compared to more mature markets, the continent is demonstrating strong potential for digital adoption and innovation.

“To meet this growing need, Equinix is actively advancing three major data center projects in Nigeria, with future expansion plans for Ghana, Côte d’Ivoire, and South Africa.”

Equinix remains steadfast in its mission to enable secure, scalable, and sustainable digital growth for economies across the world.


Kindly share this post
Continue Reading

Telecom

African Women Hit Hardest as Mobile Internet Gender Gap Persists

Published

on

Kindly share this post

African women remain among the most digitally excluded globally, with smartphone affordability and digital literacy among the key barriers. New data from the 2025 GSMA Mobile Gender Gap Report, launched recently, reveals a persistent global gender gap in mobile internet use across low- and middle-income countries (LMICs).

It further notes that literacy, digital skills, safety, and affordability of data also remain critical barriers. The report highlights that 885 million women across these regions still do not use mobile internet, with nearly 60% of them living in Sub-Saharan Africa and South Asia.

While mobile internet is the primary way women in LMICs access the internet, offering critical lifelines to health, education, and financial services, the pace of female adoption has stalled, leaving 235 million fewer women than men connected.

Claire Sibthorpe, head of digital inclusion at GSMA, highlighted that the gender gap had narrowed significantly between 2017 and 2020, but progress flatlined in recent years.

Although 2023 brought a slight improvement, restoring the gap to 15%, 2024 saw minimal change, with the gap settling at 14%.

The disparity is most severe in Sub-Saharan Africa, where women are 29% less likely than men to use mobile internet.

“It’s disheartening that progress in reducing the mobile internet gender gap has stalled. The digital divide is driven by deep-rooted socio-economic and cultural factors that disproportionately impact women,” said Sibthorpe.

GSMA projects that closing the gender gap by 2030 could add $1.3 trillion to GDP across LMICs and deliver $230 billion in revenue to the mobile industry.

The report, funded by the UK FCDO, Sida, and the Gates Foundation, stresses the urgent need for targeted investment and policy action to bridge the digital divide and ensure that no woman is left offline.

“The mobile internet gender gap is not going to close on its own. It is driven by deep-rooted social, economic, and cultural factors that disproportionately impact women,” said Sibthorpe.

 


Kindly share this post
Continue Reading

Trending