Many online games operate on a ‘free-to-play’ model, promising an engaging experience with no upfront cost. However, as children progress in these games, they are often tempted to make in-app purchases to unlock extra benefits and progress faster. These transactions often involve virtual currencies like gems or stars, which must be purchased with real money. This can lead young players to lose track of the financial implications of their gaming.

“In-app purchases are designed to be seamless, making it difficult for children, and sometimes even adults, to resist spending. The excitement of the game, coupled with enticing offers and virtual rewards, can make it easy to overlook the financial consequences,” said van Vlaanderen. “More importantly, these purchases also provide a potential entry point for cybercriminals to exploit personal information.”

Consumer spending on app stores is expected to reach USD$200 billion (approx. UGX735.5 trillion) by 2025 with in-app purchases forming a significant portion of that revenue.

With more young people gaming during school holidays, parents should be aware that cybercriminals may also use online gaming as a platform to access data, which can compromise both the child’s and parents’ personal information. “Whatever screen limits you decide on, kids should not be left unsupervised online, especially during the long year-end holiday period when scammers and criminals are well aware that youngsters are online and prone to boredom,” advises van Vlaanderen.

How cybercriminals use in-app purchases for identity theft

• Phishing and social engineering

Cybercriminals often create fake in-app offers that appear enticing to users. When clicked, these offers can redirect users to fraudulent websites where personal details, including payment information, are collected. This data is then used for identity theft.

• Malicious apps and updates

Fraudulent apps masquerading as legitimate games may collect personal information through hidden malware. “These malicious apps often come with fake reviews and ratings to make them appear credible,” notes van Vlaanderen. “Parents should exercise caution when downloading new games, ensuring that apps are from reputable developers.”

• Exploiting in-app payment systems

During in-app purchases, users are often prompted to enter payment information. If these payment systems are not adequately secured, cybercriminals can intercept the details which are later used for fraudulent purchases elsewhere.

Also read:

• • Your digital hygiene: Are you as clean as you think?
  • OP-ED: Building a robust cybersecurity readiness for Africa’s digital future
  • Strategic cybersecurity paradigms: Technological insights for Finnish online gaming participants

Key strategies to creating a safer digital experience

• Control purchase options

Parents can control in-app purchases by disabling them through device settings. For example:

• • On iOS devices, navigate to Settings > Screen Time > Content & Privacy Restrictions to block in-app purchases.
  • On Android devices, use the “Purchase Approvals” feature in Google Play to manage and approve transactions.
• Monitor subscriptions regularly

Keeping track of subscriptions helps parents spot any unexpected or unauthorized charges.

• Utilise comprehensive security solutions

Security tools like the ESET Parental Control App allow parents to manage in-app purchases, block inappropriate content, and protect children from threats on their devices. The ESET Home Security Ultimate solution also helps secure digital activities by removing metadata from shared images, reducing the risk of personal data being exposed.

Parents should first contact Apple or Google to request a refund if a child makes an unauthorized purchase. Both platforms offer dedicated support for reversing such transactions. Sometimes, the app developer may also need to be contacted to assist with the process. “Explaining that the purchase was made by a child without permission can improve the chances of a refund,” van Vlaanderen adds.

While there are risks associated with in-app purchases, many apps offer great benefits for kids. When used responsibly, digital devices and games can be educational, inspiring, fun, and safer for young people.

The post In-App Purchases Are Compromising Children’s Online Safety and Privacy appeared first on PC Tech Magazine.

Cyber hygiene involves cultivating habits that keep your digital life healthy and secure. In our highly connected world, you want peace of mind so that you can prevent or quickly detect and fix problems with your devices. Cyber hygiene is crucial for individuals and organizations as it serves as the first line of defense against a wide range of cyber threats, including data breaches, malware, and phishing attacks.

Just like personal hygiene helps prevent illness, good cyber hygiene practices prevent security vulnerabilities from being exploited. For organizations, these habits reduce the risk of operational disruptions, reputational damage, and financial losses because of cyberattacks.

Evolving threats need better defenses

Unfortunately, what worked before is no longer sufficient because of the increasing complexity and sophistication of cyber threats. In the early days of the internet, simple antivirus software and password protection were often enough to prevent cyberattacks. However, the digital landscape is now filled with advanced threats such as ransomware, deepfakes, AI-enhanced phishing, and zero-day exploits – the latter leaving vendors no time to prepare patches as the vulnerabilities are exploited immediately upon discovery.

As more devices connect and remote work spreads, cybercriminals gain more entry points to exploit. This makes it essential for individuals and businesses to adopt more comprehensive, layered security measures, including multi-factor authentication, regular software updates, and monitoring.

What makes strong cyber hygiene

Good cyber hygiene starts with antimalware software and regularly updating your software. Next, you need to use strong, unique passwords. Be deliberate about creating long, unique passwords for each account and use a password manager to store them securely. (Most password managers will generate strong passwords for you.)

Also read:

• • Password-less authentication: the future of secure access
  • The importance of password security in the digital age

Next, enable multi-factor authentication (MFA). Traditional MFA typically requires a password plus a second factor, such as a code sent to your phone via text or generated by an app. However, this method is vulnerable to phishing attacks, where someone tricks you into revealing your code. Phishing-resistant MFA provides stronger protection by employing methods that are difficult to intercept or replicate, such as physical security keys or biometric authentication (fingerprints or facial recognition). With these methods, only you can log in, even if someone gets your password.

See also: From today start using two-factor authentication

Lastly, be cautious about sharing personal information over the phone or online, especially on social media or unfamiliar websites. Combine this with regularly backing up your important files to a secure location, such as an external hard drive or a reputable cloud service, and your digital hygiene will be significantly improved.

What does poor digital hygiene look like? One of the laziest habits I’ve encountered is using the same password across all accounts—often something predictable like a pet’s name plus a birth year. While this might not be critical for news websites, it’s a major risk for important accounts. Your email, social media, work, and financial accounts require unique, strong passwords coupled with multi-factor authentication.

I once heard someone say they didn’t mind if cybercriminals hacked their email account because they “had nothing to hide”. This misses the point entirely. Not only can your email be used to reset passwords for your other accounts, but attackers can also exploit it to spread malware and launch attacks against people in your network who trust you.

What can organizations do?

Organizations can foster good cyber hygiene by building a culture of security awareness through regular training and communication. Key strategies include ongoing security awareness training to help employees recognize threats like phishing and social engineering, establishing clear policies on online behavior and data handling, and leading by example through managers’ adherence to security practices. Regular drills, such as simulated phishing, incentives for compliance, and personalizing the benefits of cybersecurity, will further encourage strong, consistent participation.

Editor’s Note: The writer of this article Anna Collard is a SVP Content Strategy and Evangelist at KnowBe4 AFRICA

The post Your Digital Hygiene: Are You Really as Clean as You Think You Are? appeared first on PC Tech Magazine.

We’ll explore the most critical security solutions within Microsoft 365 that can help shield your organization from evolving threats.

Core security challenges in Microsoft 365

Before diving into the solutions, it’s important to understand the common threats businesses face when using Microsoft 365. These threats include:

• Phishing attacks: Cybercriminals often target Microsoft 365 users with phishing emails to steal login credentials.
• Ransomware: Attackers can exploit vulnerabilities to inject ransomware into your environment, leading to data loss or downtime.
• Insider threats: Employees, whether intentionally or accidentally, can expose sensitive data by sharing it with unauthorized individuals.

Without a well-structured security framework, organizations may leave critical gaps in their defenses, making them vulnerable to these types of attacks. Fortunately, Microsoft 365 offers a range of built-in solutions designed to address these security challenges.

Essential Microsoft 365 Security solutions

1. Multi-Factor Authentication (MFA)

One of the easiest ways to enhance security in Microsoft 365 is to enable Multi-Factor Authentication (MFA). With MFA, users must provide at least two forms of authentication—such as a password and a one-time code from an authenticator app—before they can access their account. This greatly reduces the risk of unauthorized access from stolen or compromised credentials.

How to implement MFA:

• Ensure MFA is mandatory for all admin and privileged accounts.
• Encourage users to use an authenticator app instead of SMS for greater security.

See also: Password-less Authentication: The Future of Secure Access

2. Identity and Access Management with Azure AD

Azure Active Directory (Azure AD) is Microsoft’s cloud-based identity and access management service. It helps organizations manage identities, enforce security policies, and control who can access certain resources. By leveraging Azure AD, you can ensure that users have the right level of access and that malicious actors are kept out.

Key Azure AD features for security:

• Conditional Access: Define security rules based on factors like user location, device compliance, or the risk level of sign-ins.
• Identity Protection: Automatically detect and remediate compromised identities through machine learning.

3. Advanced Threat Protection (ATP)

Microsoft 365’s Advanced Threat Protection (ATP) is designed to protect against sophisticated threats like phishing, malware, and zero-day vulnerabilities. ATP uses real-time threat intelligence and advanced analytics to detect and block malicious activity before it can harm your organization.

Key ATP features:

• Safe Links: Protects users from malicious URLs in emails by scanning links in real time.
• Safe Attachments: Prevents malicious files from entering your organization by analyzing and quarantining suspicious attachments.

4. Data Loss Prevention (DLP)

Data Loss Prevention (DLP) is a key feature for organizations that handle sensitive information such as financial records, personally identifiable information (PII), and intellectual property. DLP policies monitor data flows and prevent accidental or intentional sharing of sensitive information with unauthorized recipients.

Best practices for DLP:

• Set up DLP policies for email, SharePoint, OneDrive, and Teams to detect and block the sharing of confidential data.
• Customize policies to alert administrators or automatically block content that violates security rules.

4. Information Protection with Azure Information Protection (AIP)

Azure Information Protection (AIP) helps you classify, label, and protect data based on its sensitivity level. By tagging documents and emails with specific labels (such as “Confidential” or “Internal Use Only”), you can ensure that sensitive data is encrypted and handled appropriately.

Tips for using AIP:

• Define classification labels that align with your organization’s security policies.
• Automate data encryption for documents labeled as highly confidential.
• Combine AIP with DLP to ensure comprehensive data protection.

5. Microsoft Defender for Office 365

Microsoft Defender for Office 365 offers an additional layer of protection against threats like malware, ransomware, and phishing. With built-in AI and automation capabilities, it can detect and respond to suspicious activities before they escalate into major incidents.

Key features of Defender for Office 365:

• Automated investigations: Quickly identify and mitigate potential threats using AI-powered analysis.
• Threat intelligence: Stay informed about the latest attack vectors and trends with real-time threat data.

6. Conditional Access Policies

Conditional access policies allow you to control access to Microsoft 365 resources based on specific conditions, such as device type, user location, or risk level. This dynamic approach ensures that users accessing your environment are doing so from trusted devices and locations.

Best practices for conditional access:

• Block access from risky or unfamiliar locations.
• Enforce MFA for high-risk sign-ins.
• Restrict access to corporate data on non-compliant or jailbroken devices.

7. Mobile Device Management (MDM) and Application Management

With the growing trend of remote work and Bring Your Own Device (BYOD) policies, securing mobile access to Microsoft 365 is essential. Microsoft’s Mobile Device Management (MDM) solutions enable organizations to control access to corporate data on personal devices.

How to implement MDM:

• Enforce encryption on all devices that access company data.
• Set policies to remotely wipe data from lost or stolen devices.
• Monitor device compliance and block access to devices that don’t meet security standards.

8. Microsoft 365 Security and Compliance Center

The Microsoft 365 Security and Compliance Center is a centralized hub for managing security policies, monitoring threats, and ensuring compliance with data protection regulations. It provides tools to help administrators detect and respond to security incidents in real time.

Key features of the Security and Compliance Center:

• Threat monitoring: Use built-in dashboards to monitor security incidents and respond to alerts.
• Compliance tools: Ensure regulatory compliance with features like audit logs, retention policies, and data governance settings.

See also: OP-ED: Microsoft Azure Stack, a Game Changer for Ugandan Businesses and Enterprises

Best practices for maximizing Microsoft 365 Security

• Regular Security Audits and Monitoring

Conducting regular security audits is critical for identifying potential vulnerabilities in your Microsoft 365 environment. Audit logs allow administrators to track user activity, changes to security configurations, and other key events that may signal a security breach.

Best practices:

• • Set up automated alerts for suspicious activities, such as unusual login locations or changes to admin accounts.
  • Regularly review audit logs to stay ahead of potential threats.
• Employee Security Awareness Training

Even with advanced security solutions in place, employees can still be the weakest link if they aren’t educated about cybersecurity best practices. Regular training helps ensure that employees know how to recognize phishing attempts, avoid sharing sensitive information, and follow security policies.

Key training topics:

• • How to identify phishing emails.
  • The importance of using strong passwords and enabling MFA.
  • Avoiding the use of public Wi-Fi for accessing corporate accounts.

Securing your Microsoft 365 environment requires a multi-layered approach that incorporates the latest security solutions and best practices. By implementing solutions, you can effectively shield your organization from a wide range of cyber threats. Regularly auditing your security configurations and training employees on security awareness will further bolster your defenses.

With the right strategies in place, your organization can enjoy the benefits of Microsoft 365 while ensuring that sensitive data and systems are fully protected.

See also: OP-ED: Building a Robust Cybersecurity Readiness For Africa’s Digital Future

The post Microsoft 365 Security Solutions: How to Shield Your Organization appeared first on PC Tech Magazine.

Thus, safeguarding sensitive information—including identity details and banking data—has become indispensable in the construction of a secure and satisfying gaming undertaking. In this context, practical cybersecurity practices heighten the confidence of participants while simultaneously elevating the overall integrity and reliability of the online gaming backdrop. Therefore, a thorough acquaintance with strategic cybersecurity paradigms is critical for anyone engaged in online gaming, in Finland and internationally.

Use a reliable antivirus program

A rudimentary aspect of any cybersecurity approach involves employing a steadfast antivirus program; players digitally entering Finnish nettikasinot (online casinos) should prioritize installing current antivirus software to guard against malware and phishing attacks prevalent on casino platforms. Cybercriminals commonly target online gaming platforms, exploiting susceptibilities to acquire unauthorized access to personal information. Most contemporary antivirus solutions are built on advanced technologies—including real-time scanning and behavior-based detection—to determine and neutralize potential threats before they can inflict damage. These programs are designed to identify and block known threats while scanning for unusual conduct indicating an emerging risk.

Regular updates also perform a critical function as they affirm antivirus programs maintain effectiveness against the latest security challenges. With the expedited pace at which new malware is assembled, a powerful antivirus solution must continuously adapt to fight these threats efficaciously. Thus, maintaining a secure system permits players to engross themselves in gaming ventures without the persistent apprehension of cyber hazards. Furthermore, sweeping antivirus software packages frequently include additional features, such as firewalls and VPN services, which additionally improve online security. Ultimately, investing in a holistic security solution greatly contributes to fortifying the overall gaming domain against potential cyber perils.

See also: Top things that you need to know before buying antivirus

Enable two-factor authentication (2FA)

Implementing two-factor authentication (2FA) is a critical security augmentation for online accounts, particularly those linked to Finnish online casinos. This strategy demands users supply a second form of verification in addition to their traditional password, a feature that enormously enhances account security. Here, the additional aspect of security mitigates the risks associated with password theft and unauthorized access. With many participants typically using similar passwords across numerous platforms, the implementation of 2FA is critical for supplementing security.

Installing 2FA is a straightforward process, usually linking a mobile device to the online casino account. Upon logging in, a verification code is transmitted to the registered device, guaranteeing access remains restricted to authorized users. Myriad methods exist for receiving these codes, including SMS, email, or dedicated authentication apps. Each of these options furnishes distinct classes of convenience and security aligning with their subjective preferences. This precise and effective measure radically diminishes the probability of account compromise, thus instilling trust in partakers as they engage in online gaming activities.

Alongside conventional 2FA methods, biometric authentication technology is accumulating favor in efforts to augment security in online accounts; instruments such as fingerprint recognition or facial recognition add another aspect of protection, making unauthorized access even more formidable. The integration of biometric security measures epitomizes a stronger commitment to utilizing innovative technology to assemble safer online settings, further firming the role of 2FA in improving cybersecurity.

See also: Editor’s pick: from today start using two-factor authentication

Use a VPN for secure browsing

1.6 billion people use Virtual Private Networks (VPNs) in 2024. They have become indispensable tools for those desiring secure browsing settings, particularly in the context of online gaming. VPNs deliver vital protection for user identity and encrypt data, confirming sensitive information remains private. In an era where personal data can be easily intercepted, VPNs are crucial for safeguarding online privacy.

The capability to mask the IP address of users provides an auxiliary layer of anonymity, rendering it more challenging for cybercriminals to track online activities. This characteristic of VPNs is particularly marked for participants utilizing multiple online gaming platforms. Furthermore, widely respected VPN services usually incorporate elevated grades of encryption, defending data against possible eavesdropping. Popular VPN services in Finland—such as NordVPN and ExpressVPN—represent steadfast choices for users bolstering their online security. Many of these services offer user-friendly interfaces and rapid setup processes, rendering them obtainable to a broader spectrum of users, including those less technologically oriented.

Overall, utilizing a VPN augments protection and permits partakers to bypass geographical restrictions, thus gifting access to a more comprehensive scope of online gaming alternatives. Additionally, certain online casinos often deliver unique bonuses or promotions to those connecting via VPN, supplying additional motivation to prioritize online security. Ultimately, the inclusion of VPN technology in the online gaming domain contributes immensely to safer conditions, facilitating players to concentrate on gaming activities without compromising security.

See also: 6 considerations to help you select the right VPN

Therefore, the importance of implementing strategic cybersecurity efforts for participants in Finnish online gaming cannot be overstated; in this context, adopting reliable antivirus programs, enabling two-factor authentication, and utilizing VPNs for secure browsing are rudimentary practices to greatly enhance online security. These basic steps construct a rugged defense against the myriad of cyber threats permeating the online gaming arena, where the rise in digital threats necessitates a proactive approach emphasizing the requirement for continuous education on cybersecurity best practices.

As the digital domain continues to extend, encouraging a culture of security cognition among players becomes increasingly necessary; motivating participants to remain alert and well-advised about conceivable threats will assist in the mitigation of risks and improve the overarching online gaming venture. The enactment of these strategies assembles a safer online casino experience, allowing participants to focus on entertainment while minimizing the inherent risks. Ultimately, prioritizing cybersecurity safeguards individual users and the integrity and sustainability of the online gaming industry overall during our challenging times.

The post Strategic Cybersecurity Paradigms: Technological Insights for Finnish Online Gaming Participants appeared first on PC Tech Magazine.

Not only is Africa suffering from thousands of cyberattacks, but it is also the region with the highest weekly average on earth. The global average is 1,636 attacks per week.

Cyberattacks are now part and parcel of the business landscape —and Africa is a major target. Given the sheer scale of the problem, cybersecurity is a fundamental requirement for any business, NGO, or government entity trying to operate on the continent.

Cyber vulnerabilities

What makes Africa particularly vulnerable is the continent’s lack of infrastructure and resources due to budget limitations; a lack of awareness of the truly critical nature of the problem; legislative and policy lethargy; and a continuing shortage of trained cybersecurity professionals.

Another vulnerability is the continent’s youthful population. While an enormous asset, having a young population also comes with risks.  According to the United Nations, 70% of Africa’s population is under 30, and that youth component is growing. The youth often lack financial resources and become accustomed to compromising their cybersecurity to access connectivity through sharing devices, connecting to wi-fi in public places, or using unencrypted connections.

Another risk is that the youth-focused education sector has become the industry suffering the most cyberattacks. This is partly due to the rise in online education since the Covid-19 pandemic. Education and research institutions are also often prime targets for cybercriminals, due to the sensitive information they hold and the fact that remote education involves multiple groups of online users.

Also read:

• • Liquid Intelligent Technologies is strengthening cybersecurity for East African businesses
  • OP-ED: Getting a hold of cybersecurity
  • The top 10 digital vulnerabilities and cybersecurity solutions

Content piracy

Young people are also enthusiastic users of entertainment content. This may make them more willing to seek out pirated content, which comes with significant risks —malware, ransomware, fraud, and identity theft, to name just a few. These risks have seen the rise of the Partners Against Piracy initiative, with entertainment group MultiChoice Africa and cybersecurity firm Irdeto —a pan-African coalition to fight content piracy.

This anti-piracy initiative has made significant strides, with Irdeto and other key stakeholders conducting around 155 raids across Africa this year; and 4,351 pirate-content networks having been closed down.

Africa’s Police and court systems are also combating content piracy. Cybercrime legislation has been updated in Nigeria, Kenya, and Tanzania, and 107 arrests have been made across Africa this year.

Despite the risk of piracy in youth-culture channels, Africa’s youth dividend is a significant advantage as the world embraces connected, digital economies. The GSMA predicts that by 2030, Africa will have 438 million mobile internet users —a cohort of savvy, digital natives, ready to work and do business online.

This rapid digital transformation increases the need for robust cybersecurity in African economies. The threat is real. In 2023, Checkpoint found only seven African countries ranked among the top 50 for cybersecurity readiness.

See also: ITU Secretary-General, Doreen Bogdan-Martin applauds Uganda’s digital transformation roadmap

Boosting resilience

Increasing Africa’s resilience against cyber threats will require initiatives on several fronts.

• Awareness and education: It’s critical to build cybersecurity education into school curriculums corporate training programs and public awareness campaigns.
• Investment: Cybersecurity is a sophisticated, specialized area, best managed by experts with relevant, up-to-the-minute skills. Organizations must budget to enlist these experts to build robust cybersecurity frameworks.
• Legislation: Cybersecurity considerations must be integrated into policies to ensure that cyber-resilience is legislated, and cyber criminals are prosecuted and jailed. This requires international, cross-sectoral cooperation.
• Infrastructure protection: Cybersecurity requires information security infrastructure, a massive weakness in Africa. Reports show that 90% of African businesses operate without comprehensive cybersecurity protocols. Inadequate or outdated infrastructure limits their ability to detect, prevent, and respond effectively to cyberattacks.
• Public-private partnerships: The private sector has cybersecurity expertise and agile industry knowledge. Governments have budgets and policy strengths to get things done. A co-ordinated, partnership approach is the ideal way to unlock these respective competencies for everyone’s benefit.

National functions like health, education, social services, and justice depend on digital platforms. Neglecting cybersecurity places the delivery of all these services at risk. On the upside, future careers will increasingly rely on digital skills and platforms. These platforms must be secured if Africa’s people are going to be able to build businesses, campaigns, and other initiatives in the digital space.

See also: OP-ED: Time to empower Gen Z for the burgeoning tech and digital careers

As a continent, we cannot afford to ignore the importance of building cyber-resilience to secure the future of Africa’s people.

Editor’s Note: Frikkie Jonker, a Broadcasting Cybersecurity Anti-Piracy Director at Irdeto, writes the article

The post OP-ED: Building a Robust Cybersecurity Readiness For Africa’s Digital Future appeared first on PC Tech Magazine.

Cyber fraud also known as electronic fraud, is an unfortunate concept born out of using computing power and other technologies to steal money and other resources of pecuniary value from unsuspecting navigators of online spaces. This has become an issue in Uganda and is prevalent amongst persons who use mobile-enabled and online financial services such as banking, transfers, and online purchases.

Indeed, according to a Financial Sector Deepening (FSD) Report on banking and the status of financial inclusion in Uganda: Insights from FinScope 2018 Survey, 12% of persons with back accounts prefer mobile banking as the channel of choice, and 2% preferred internet banking as the mode or channel used to access banking/financial services.

But again, the online domain has transformed retail and commerce. Digital marketplaces have made goods more accessible. Specialized websites and dedicated apps have quickly multiplied and have simplified access to all types of commodities and services. The transformation of legal commerce has also been reflected in the criminal domain.

We have also recently observed a couple of trends viz; synthetic identity fraud, the use of AI-based attack vectors, the rise in fraud-as-a-service, contactless fraud from contactless mobile payments, pig butchering where fraudsters search dating and social media sites for victims and create fake accounts to interact with them inter alia.

Effects:

The impacts of a single, successful cyber fraud attack can have far-reaching implications including financial losses and loss of consumer confidence and trust. The overall monetary impact of cyber fraud on society and government is estimated to be billions of dollars a year. It is no wonder statistics estimate that cyber fraud has grown to become a hundred billion industry globally and it is expected to triple by 2025. The most outstanding effect remains the jeopardisation of financial transaction integrity.

Response of the law:

Uganda has laws that govern online conduct, transactions etcetera. The most famous is the Computer Misuse Act Cap. 96. It defines electronic fraud under Section 19 to mean deception, deliberately performed intending to secure an unfair or unlawful gain where part of a communication is sent through a computer network or any other communication and another part through the action of the victim of the offense or the action is performed through a computer network or both.

I have previously expressed reservations over the depth of this definition’s coverage vis-à-vis modern cyber fraud. Also given that this is from over 13 years ago, its spirit didn’t foresee and is out of touch with the rate of sophistication in computing power, emerging technologies, and other variables that have made the modern threat landscape murky waters for the authorities and victims.

See also: President Museveni signs the Computer Misuse (Amendment) Act, 2022 into law

On to sophistication; the modes of cyber fraud have changed over the years to also include ransomware which has become rampant these days. In my unpublished undergraduate thesis from May 2021, I argue at the time that the internet, in particular, was a great tool for scammers and other miscreants, since it allowed them to ply their trade while hiding behind a shield of digital anonymity. This posed significant challenges to law enforcement agencies, regarding their ability to investigate complex crimes, occur in a virtual environment, incorporate multiple (often international) jurisdictions, and have a very low reporting rate.

… the internet, in particular, was a great tool for scammers and other miscreants, since it allowed them to ply their trade while hiding behind a shield of digital anonymity

I have since harbored a fresh perspective that differs from that position which is that emerging technologies such as general purpose and generative artificial intelligence have made it easier for rogue cyber actors to execute their attacks in ways that are so deceptive the victims will usually never see it coming.

What needs to be done:

We need to wake up to the reality that the Internet dominates commerce, communication, and access to information. The digital transformation of our economies, societies, and private lives is progressing fast and will continue to impact all aspects of life.

From the regulators’ perspective, the Bank of Uganda (BoU) needs to continuously issue risk management guidelines to the Supervised Financial Institutions (SFIs). They also should increase oversight surveillance capacity through new methodologies of risk-based supervision as well as financial innovations in development, deployment, and use.

Increased research into the modes, and the threat vulnerabilities that allow rogue cyber actors to prey in the unsuspecting victims. This will inform efforts for continuous policy development so that laws maintain their relevance in a contemporary setting. Incidentally, an amendment of Section 19 of the Computer Misuse Act Cap. 96 will ensure that we maintain the relevance of that very provision.

Relatedly, policymakers and regulators should guide policy discussions to focus on the regulation of financial innovations. Financial innovations are on the rise and ever-evolving, this means that the lacuna will always equally be evolving and this calls for the maintenance of a robust regulatory and supervisory framework. Such a framework should possess the capability to identify threats posed by the transition and provision of prompt alleviation actions.

Training and awareness campaigns are important for all in society. There is a need for a structured training and certification program/framework for cybersecurity-related careers in Uganda. Campaigns like Beera Steady targeting users will continue to play a great role in creating awareness and vigilance around cyber fraud-related issues. As the saying goes; educated consumers are empowered consumers.

Also read:

• • OP-ED: Getting a hold of cybersecurity
  • OP-ED: Architecting cybersecurity for Uganda’s fintech sector
  • Navigating the digital maze: A guide to online safety and cybersecurity
  • Hackers predict: The biggest cybersecurity worries in 2024

Awareness at critical levels enables and promotes the identification and reporting of cyber fraud attacks. Conducting cyber awareness amongst the employees of these financial institutions and the law enforcement agencies such as the cybercrimes division of police on electronic fraud, investigation and as I previously opined, inculcation of threat intelligence know-how to detect these threats as and when they are posed and to devise measures to counter these threats.

The government also has an important role to play in raising funding awareness among the public and other financial and ICT service providers. This means enhancing the capacity of staff to evaluate ICT risks and conduct ICT audits. Education/awareness will go a long way in enabling us to create and curate a database of all reported cases for predictive analysis and education of the authorities to have a meaningful implementation in the investigation as well as assessing the scale of damage and threat posed by the cyber fraud scourge.

As I take leave of the matter …

Digital financial services (DFS) promise to enable financial inclusion and thus help improve people’s lives. Due to the impact of technology in the banking sector, customers are moving away from using cash and checks and relying more on electronic banking to complete transactions.

We need a proactive approach to policing online fraud in the banking sector of Uganda. This will take a concerted effort from all parties along the value chain, those that develop these technologies, the financial institutions that roll out or deploy them, the regulator, and the users of these technologies.

The post OP-ED: Is Cyber Fraud Breaking Frontiers? appeared first on PC Tech Magazine.

“Cyber-criminals are becoming increasingly sophisticated, and we are constantly investing in innovative solutions aimed at keeping pace with these ever-evolving threats and assuring customers that their systems are secure,” said Adil El Youssefi, Chief Executive Officer of Liquid Intelligent Technologies, Rest of Africa in a press statement. “Our Cyber Security Fusion Centres provide the perfect platform from which to manage these risks for our customers.”

Compliance support is also an essential element of any cyber security strategy, and the new offering enables Liquid to assist businesses in meeting local and international regulatory requirements, with the ability to customize solutions to fit any compliance landscape, and regional data protection laws.

Liquid is uniquely positioned to deliver these solutions across the East African region by leveraging its local infrastructure and cloud expertise. The company’s Azure stacks in Uganda, Kenya, Tanzania, and Rwanda businesses can remain compliant with local regulations while accessing world-class cloud and security services. Supporting this, its Cyber Security Fusion Centres provide enterprise and SME customers with tailored support across cyber security, cloud, and networks for end-to-end security.

See also: OP-ED: Microsoft Azure Stack, a game changer for Ugandan businesses and enterprises

With these new solutions to the existing portfolio, including DDoS Mitigation, Virtual CISO, and Managed Security Services, Liquid Intelligent Technologies can help its customers manage and safeguard their cyber assets more effectively, while offering proactive threat detection and preventing cyberattacks.

With the rate at which digital transformation is advancing, companies need to upgrade their cybersecurity strategies regularly.

The post Liquid Intelligent Technologies is Strengthening Cybersecurity For East African Businesses appeared first on PC Tech Magazine.

I’ve just received an email from a S. African woman who was caught by this.
The fraudulent email came amid a stream of genuine https://t.co/DWEn2V5aWz emails about her UK booking.
She lost >R18K.@bookingcom sent her a warning email but it landed AFTER the scammers’ ones. https://t.co/co0c7Xc4Nl

— Wendy Knowler (@wendyknowler) August 26, 2024

You can’t let your guard down for a moment. The truth is that most cybersecurity breaches these days take the form of phishing-based social engineering. Why break through thick firewalls or try to hack complex passwords when you can simply get someone to hand you the keys to their data and money? Scammers only need to find one cybersecurity gap for your trip to become far more expensive than you’d anticipated.

There are several parties involved from banks to booking agents to online platforms to airlines. Booking flights or accommodations online often requires entering personal information on multiple platforms, each with its own level of security. Each interaction creates a potential entry point for cybercriminals, who can exploit these vulnerabilities to access or steal crucial data. If even one of these platforms is compromised, your travel itinerary, including payment details, could be exposed to significant risk.

It doesn’t get much safer once you’re traveling. Accessing the Internet while on the move —whether to check emails, manage bookings, or handle banking transactions —poses additional threats, especially if you’re using unsecured public Wi-Fi networks. Cybercriminals can easily intercept data or deploy phishing schemes to steal your credentials.

See also: Techniques hackers employ to exploit public Wi-Fi and compromise your sensitive data

To help travelers protect their personal information, ESET has published a guide on recognizing and avoiding phishing scams outlining essential strategies to prevent phishing attacks.

How to recognize phishing

Phishing messages often mimic legitimate correspondence but can be identified through several telltale signs:

1. Requests for personal information: Reputable organizations rarely ask for sensitive details via email.
2. Poor grammar: Spelling mistakes and awkward phrasing are common in phishing emails.
3. Unexpected contact: Unsolicited emails from banks or service providers should be treated with suspicion.
4. Urgency or irresistible offers: Messages that push for immediate action or offer deals that seem too good to be true are often scams.
5. Suspicious domain names: Be wary of emails from domains that don’t match the organization’s official website.

How to prevent phishing

1. Think before you click: Avoid clicking on links or downloading attachments from suspicious messages. These could lead you to malicious websites or infect your device with malware.
2. Stay informed: Keep up with reports on new phishing techniques to avoid falling into the latest traps.
3. Guard your personal details: Always verify the message with the sender or the organization it claims to represent, using contact details you know to be genuine.
4. Monitor your accounts: Regularly check your online accounts for any unusual activity, even if you don’t suspect any foul play.
5. Use reliable security solutions: Implementing a trusted anti-phishing solution can add an extra layer of protection.

Also read:

• • Why Microsoft is a hacker’s dream target
  • The top 10 digital vulnerabilities and cybersecurity solutions

In the end, you are your own best multi-factor authenticator. If you have any doubts or even if you don’t but are about to make a sizeable transfer —call or email a known, genuine contact at the organization you’re trading with. Confirm that the details you’re using are legitimate and, whatever you do, do not click on links from unknown contacts.

As travel plans become increasingly digital, the need for cybersecurity grows more urgent. By staying vigilant and adopting safe online practices, travelers can significantly reduce the risk of falling victim to cybercrime and enjoy a safer, stress-free trip.

The post Stay Cybersafe When Planning a Travel — says Cybersecurity Consultant, Lucas Molefe appeared first on PC Tech Magazine.

Technology roles are increasingly in demand, yet the cybersecurity field faces significant human capital challenges, particularly in terms of gender diversity. “Despite this, organizations can take positive, proactive measures to nurture career growth for more women in the field,” says Carey van Vlaanderen.

So, what can be done to bridge the gender gap in the cybersecurity sector? Carey van Vlaanderen says fostering an inclusive cybersecurity workforce can have massive benefits for businesses and society alike.

Build more pathways to a career in cybersecurity

The first step is to build more accessible onramps for a career in cybersecurity. “Not everyone interested in cybersecurity wants or needs to spend years in a traditional academic setting. Alternative routes like internships and apprenticeships can provide practical, on-the-job training and create a pipeline of job-ready professionals,” she explains.

Mentorship

Companies need to invest resources in the development of mentorship programs within the organization, as a lack of visible role models is frequently cited as a significant barrier for women in cybersecurity. “Structured mentorship programs are essential because they help women entering the field feel supported with opportunities to grow within the cybersecurity space. However, mentorship can also take place in a less formal environment and can take place through team projects, cross-departmental initiatives, or regular ‘coffee chats’ with leaders,” says van Vlaanderen.

Improve career development

Van Vlaanderen says women need to know that a career in cybersecurity will enable them to progress to senior levels. So, alongside greater representation of women as managers and executives, organizations need to offer support for career development. “This includes ensuring women have access to training and skills development programs to help them advance their cybersecurity careers. Creating an environment that prioritizes continuous professional growth and development means the industry can retain skilled professionals by aligning individual career aspirations with organizational goals,” she says.

See also: Seek careers in technology, Roke Telkom urges students

Spark an early interest in cybersecurity

Engaging girls in cybersecurity from an early age is crucial for nurturing a long-term interest in the field. Van Vlaanderen says initiatives like hackathons, boot camps, and skills programs are excellent ways to engage girls and young women and introduce them to the world of digital security. “Additional support from government and educational institutions through scholarships and financial aid is vital for those who show potential in the field. STEM (Science, Technology, Engineering, and Mathematics) initiatives should spark curiosity and ambition as well as technical skills.”

Creating a forum or group within organizations where women can raise concerns, delve into a variety of topics, and discuss shared issues is another important step. These forums provide a space for women to feel supported by each other, fostering a sense of community and belonging.

“Such groups can play a pivotal role in addressing common challenges, sharing experiences, and building a network of allies,” says van Vlaanderen. Adds “They also serve as platforms for professional development and empowerment, ensuring that women in cybersecurity are heard and supported in their career journeys.”

Van Vlaanderen says that the progress women are making in the field is worth celebrating and that an organization needs to create a culture that retains top tech talent and establishes a supportive culture.

“Consistently implementing good policies can ensure women are attracted to and retained in cybersecurity roles —this includes advocating for equal pay and creating an inclusive work environment where all employees feel valued,” she says. “Creating diversity within the IT and cybersecurity industry shouldn’t be seen as a tick-box exercise but an opportunity to create a robust, dynamic workforce that can think creatively and respond decisively to threats.”

See also: OP-ED: Getting a hold of cybersecurity

The post OP-ED: Creating Pathways For Women to Succeed in Cybersecurity appeared first on PC Tech Magazine.

Recognize what constitutes sensitive records

Step one in safeguarding touchy data is knowing what data needs protection. sensitive information commonly consists of personally identifiable statistics (PII), monetary information, highbrow assets, and some other statistics that, if uncovered, ought to harm people or the organization. engaging in a radical audit to discover and classify these records is vital. This could help in prioritizing security efforts and allocating assets efficiently.

Put in force sturdy get right of entry to controls

Restricting access to sensitive records is an essential safety degree. the best-authorized employees ought to have access to vital facts, and this access needs to be granted based totally on the principle of least privilege. This indicates giving personnel the minimum level of entry essential for his or her activity features. position-based access management (RBAC) structures may be exceedingly effective in dealing with permissions and ensuring that sensitive facts aren’t handy to unauthorized people.

Employ strong encryption methods

Encryption is one of the most powerful tools to be had for protecting touchy statistics. Encrypting facts both at relaxation and in transit ensures that despite the fact that their miles are intercepted or accessed without authorization, they cannot be studied or misused. groups need to use superior encryption standards (AES) and ensure that encryption keys are stored securely. frequently updating encryption protocols to keep tempo with technological advancements and emerging threats is likewise critical.

Foster a lifestyle of security awareness

Human blunders are usually a great aspect of information breaches. Therefore, fostering a lifestyle of protection recognition within the corporation is crucial. Regular schooling periods have to be conducted to teach personnel about brand-new cyber threats, safe online practices, and the importance of safeguarding touchy records. developing a protection-conscious group of workers can extensively lessen the chance of unintentional information exposure.

Expand and implement statistics protection policies

Having clean and enforceable records protection regulations is critical for preserving facts’ safety. Those guidelines need to define how sensitive statistics are handled, stored, and shared with the employer. rules need to additionally address using private devices, far-off painting protocols, and incident response processes. often reviewing and updating those policies ensures they stay powerful in the face of evolving threats.

Enforce multi-issue authentication (MFA)

Multi-aspect authentication (MFA) provides an additional layer of safety by requiring a couple of forms of verification earlier than granting entry to sensitive statistics. This could consist of something the person is aware of (password), something the user has (protection token), and something the person has (biometric verification). MFA notably reduces the probability of unauthorized entry, although login credentials are compromised.

Regularly replace and patch structures

Keeping software and structures up to date is essential for defensive sensitive information. Cybercriminals regularly take advantage of vulnerabilities in previous software programs to gain unauthorized rights of entry. enforcing a sturdy patch control manner ensures that protection updates are carried out promptly, minimizing the danger of exploitation. Moreover, using computerized gear to control and deploy patches can help streamline this process and reduce the burden on IT teams.

Display and audit get the right of entry to sensitive information

Non-stop monitoring and auditing of access to touchy statistics are essential for detecting and responding to capability security incidents. enforcing real-time tracking equipment can help pick out suspicious sports, inclusive of an unauthorized right of entry to attempts or unusual statistics transfers. Ordinary audits of access logs and consumer sports also can provide insights into potential vulnerabilities and assist in compliance with statistics safety guidelines.

Also read:

• • How to safeguard your LinkedIn account
  • OP-ED: Getting a hold of cybersecurity
  • Navigating the digital maze: A guide to online safety and cybersecurity
  • A comprehensive guide to safeguarding your online privacy and security

Undertake a considered technique

In a generation in which cyber threats are greater sophisticated and pervasive than ever, adopting a zero-trust approach to safety can provide an additional layer of safety. It’s a protection framework that assumes that threats can come from both outside and inside the community. Consequently, it advocates for verifying the identity of every person and device attempting to get entry to resources, regardless of their vicinity. This method helps minimize the risk of unauthorized admission to and information breaches.

Establish a complete incident reaction Plan

Despite the fine preventive measures, it’s far critical to be prepared for capability protection incidents. A complete incident reaction plan outlines the stairs to be taken within the event of a records breach or cyber assault. This includes figuring out the breach, containing the harm, removing the hazard, convalescing affected structures, and communicating with stakeholders. regularly testing and updating the incident reaction plan ensures that the company is properly organized to handle any safety incident efficiently.

Behavior regular safety tests

Everyday security assessments, consisting of vulnerability checks and penetration checking, are vital for figuring out and addressing capacity weaknesses in the business enterprise’s protection posture. Those assessments help in knowing the effectiveness of current safety features and uncovering areas that require development. engaging 1/3-birthday celebration safety specialists to behaviour these assessments can provide a goal evaluation and precious insights.

Embody continuous improvement

Information safety is an ongoing procedure that calls for continuous improvement. Staying informed about modern cybersecurity tendencies, rising threats, and exceptional practices is essential for maintaining a strong safety posture. regularly reviewing and improving security measures guarantees that the employer stays resilient against new and evolving threats.

Therefore, safeguarding sensitive information is a multifaceted enterprise that requires a combination of technological answers, coverage enforcement, and a security-aware subculture. By enforcing those critical steps and adopting a considered method, organizations can appreciably beautify their ability to guard sensitive records and mitigate the dangers related to cyber threats.

ALSO READ: THE IMPORTANCE OF PASSWORD SECURITY IN THE DIGITAL AGE

The post Critical Steps to Safeguard Sensitive Information in Your Organization appeared first on PC Tech Magazine.