Home Tech Cyber security
Category:

Cyber security

Cyber securityTech

Data Privacy Concerns Mount as Smartphone Adoption Accelerates Across East Africa

by Jacky Muraba
written by Jacky Muraba

Smartphones have evolved beyond communication tools into comprehensive digital platforms housing personal, professional, and financial data. This transformation presents significant privacy challenges as tech companies face increasing scrutiny over data handling practices.

Recent years have seen major technology firms confronting privacy-related allegations. In 2020, Xiaomi faced claims that its browser tracked user activity in private mode, which the company disputed. Similar scrutiny affected other global players: Facebook dealt with Cambridge Analytica revelations, Apple faced questions over location tracking, and Google encountered criticism regarding targeted advertising practices.

These incidents demonstrate that privacy concerns span all market segments and brand categories, affecting even companies with established reputations when new information emerges.

Economic Implications of Data Collection

Data has become a primary asset in the digital economy. User interactions generate valuable information that companies analyze to create detailed behavioral profiles. This data drives targeted advertising, market forecasting, and sometimes political influence campaigns.

The risks extend beyond privacy invasion to potential financial harm. Data breaches can facilitate identity theft, financial fraud, and surveillance activities that impact both individuals and businesses.

In Kenya’s mobile-first economy, these risks are particularly acute. Central Bank data shows mobile money transactions reached Sh8.7 trillion in 2024, exceeding half of national GDP. Data exposure could reveal income patterns, spending behaviors, and financial obligations, creating vulnerabilities for targeted fraud schemes.

Regulatory Developments and Enforcement

International markets are implementing stricter data governance frameworks. The European Union’s GDPR and California’s CCPA provide consumers greater control over personal information. However, enforcement mechanisms vary significantly, and many developing economies lack comparable protections.

Kenya enacted its Data Protection Act in 2019, establishing the Office of the Data Protection Commissioner (ODPC). Implementation has shown mixed results but notable progress. OPPO Kenya became the first company fined under the legislation in 2022, paying Sh5 million for unauthorized customer photo usage. By 2023, enforcement expanded to include digital lenders, hospitality businesses, and educational institutions for various data handling violations.

Business Risk Mitigation Strategies

Organizations and consumers require proactive privacy protection approaches rather than relying solely on regulatory compliance.

  • Application management – Review app permissions carefully, questioning whether functionality justifies data access requests.
  • Platform selection – Prioritize services with established privacy credentials over default options with unclear practices.
  • Security maintenance – Implement regular software updates containing security patches and vulnerability fixes.
  • Access controls – Deploy multi-factor authentication, encrypted communications, and robust password policies.
  • Information monitoring – Track privacy-related developments through credible industry sources.
  • Financial platform security – Apply heightened security measures to mobile money applications, treating them with bank-level precautions.

Market Dynamics and Consumer Choice

Competitive pricing often masks data collection costs in consumer technology. Businesses and individual users must evaluate trade-offs between cost efficiency and privacy protection, convenience and security requirements.

Across device categories – from premium iPhone and Samsung products to budget-conscious Xiaomi and Android alternatives – privacy protection principles remain consistent. Informed decision-making requires understanding data collection practices and implementing appropriate safeguards.

The data privacy landscape demands active participation from all stakeholders. As smartphone penetration continues expanding across East Africa’s growing digital economy, privacy protection becomes increasingly critical for sustainable technology adoption and economic development

0 comment
0 FacebookTwitterPinterestEmail
Cyber securityTech

Check Point Unveils 2025 Cloud Security Report Highlighting Critical Gaps in Cyber Defence

by Brian Yatich
written by Brian Yatich

Check Point® Software Technologies Ltd. (NASDAQ: CHKP), a global leader in cybersecurity solutions, today released its 2025 Cloud Security Report, revealing significant vulnerabilities in enterprise cloud security practices worldwide.

Based on a survey of over 900 CISOs and IT leaders, the report exposes systemic weaknesses such as alert fatigue, fragmented security tools, slow threat detection, and widespread inability to detect lateral movement or defend against AI-driven attacks, leaving organizations dangerously exposed.

As enterprises increasingly adopt hybrid, multi-cloud, and edge computing environments, many are still relying on outdated security models that cannot keep pace with evolving threats.

The report found that 65% of organizations experienced a cloud-related security incident in the past year—up from 61% the previous year. Alarmingly, just 9% detected the breach within the first hour, and only 6% managed to remediate it in that timeframe, allowing attackers prolonged undetected access.

“Security teams are chasing an ever-moving target,” said Paul Barbosa, VP of Cloud Security at Check Point Software Technologies. “Cloud environments are growing more complex, and AI-driven threats are evolving fast. Organizations must move away from fragmented, legacy tools toward unified, intelligent, and automated defenses built for today’s decentralized IT landscape.”

Key Insights from the 2025 Cloud Security Report:

  • Cloud Adoption Outpaces Security Readiness:
    62% of organizations have embraced cloud edge technologies, 57% use hybrid cloud, and 51% operate within multi-cloud frameworks. Traditional perimeter-based defenses struggle to secure these distributed infrastructures.
  • Detection and Remediation Are Lagging:
    A mere 9% detect incidents within the first hour. Meanwhile, 62% take over 24 hours to remediate breaches, providing attackers ample opportunity to escalate privileges.
  • Tool Sprawl Fuels Alert Fatigue:
    71% of respondents use more than 10 different cloud security tools; 16% use over 50. Many face nearly 500 security alerts daily, overwhelming analysts and slowing response.
  • Application Security Is Falling Behind:
    61% still rely on legacy, signature-based Web Application Firewalls (WAFs), which are increasingly ineffective against sophisticated AI-augmented attacks.
  • AI Preparedness Gap:
    While 68% prioritize AI for cyber defense, only 25% feel ready to confront AI-driven threats, marking a significant risk area.
  • Blind Spot in Lateral Movement:
    Only 17% have full visibility into east-west cloud traffic, allowing attackers to move undetected once inside.
  • Detection Often Reliant on Humans:
    Security tools detected only 35% of incidents, with most discovered by employees, audits, or external alerts—highlighting critical monitoring gaps.
  • Internal Challenges Stall Progress:
    Rapid technology changes (cited by 54%) and skills shortages (49%) hamper security efforts, compounded by tool fragmentation (40%) that delays responses and widens exposure.

To address these challenges, Check Point advocates adopting decentralized, prevention-first cloud security approaches. The report recommends consolidating toolsets, deploying AI-powered threat detection, and leveraging real-time telemetry for comprehensive visibility across hybrid and multi-cloud ecosystems.

Solutions like Check Point CloudGuard and the Check Point Infinity Platform enable unified cloud defenses, automated incident response, and streamlined policy enforcement.

Deryck Mitchelson, Global CISO at Check Point Software Technologies, stresses, “Cloud transformation is accelerating faster than our defenses. With attackers moving in minutes and defenders responding in days, the detection-to-remediation gap is a danger zone. CISOs must unify fragmented tools, secure lateral movement visibility, and prepare for AI-driven threats or risk losing control of their cloud environments to sophisticated adversaries.”

For the full 2025 Cloud Security Report and expert CISO guidance, visit Check Point’s website and blog.

0 comment
0 FacebookTwitterPinterestEmail
South Korea Bans New Downloads of DeepSeek AI Chatbot Over Privacy Concerns
Cyber securityTech

South Korea Bans New Downloads of DeepSeek AI Chatbot Over Privacy Concerns

by Brian Yatich
written by Brian Yatich

South Korea has prohibited new downloads of DeepSeek, a popular Chinese artificial intelligence (AI) chatbot, according to the country’s Personal Information Protection Commission.

The ban, which took effect on Saturday evening, removes the app from Apple’s App Store and Google Play. However, users who have already downloaded the app will still be able to use it, and access will remain available through DeepSeek’s website.

The decision follows a rapid rise in popularity for DeepSeek in South Korea, where it topped app store charts with over a million weekly users within a week of gaining global attention.

Despite its success, the app has faced increasing scrutiny worldwide over privacy and national security issues, prompting similar restrictions in other countries.

South Korea’s government has also taken internal measures, with several agencies banning their employees from installing the chatbot on work devices.

Acting President Choi Sang-mok has warned that DeepSeek could have far-reaching implications for the country’s industries, extending beyond the AI sector.

The Personal Information Protection Commission stated that the ban will remain in place until DeepSeek implements “improvements and remedies” to comply with South Korea’s strict personal data protection laws.

0 comment
0 FacebookTwitterPinterestEmail
Cyber securityTech

Check Point Announces New CEO and Transition of Founder to Executive Chairman

by Brian Yatich
written by Brian Yatich

Check Point Software Technologies Ltd. (NASDAQ: CHKP), a pioneer and global leader in cybersecurity solutions, has announced leadership transition.

Founder Gil Shwed is moving into the role of Executive Chairman of the Board of Directors, and Nadav Zafrir has been appointed as the company’s new Chief Executive Officer, effective December 16th.

“Check Point embarks on a new chapter, with my transition into my new role as Executive Chairman and the appointment of Nadav as the company’s new CEO. I’ve known Nadav for many years and he is the perfect fit to lead Check Point to new heights,” said Mr. Shwed.

I have full confidence in the company’s strategy, strength, leadership and employees, and we will work together to ensure this new journey brings even more success than we’ve achieved so far.

Nadav Zafrir, the new CEO, expressed his enthusiasm for the role, stating, “I am honored to join Check Point as its new CEO. To lead an iconic cybersecurity company at such a pivotal time for our industry is both a privilege and a profound responsibility.

Our world relies on trust, and Check Point’s mission to establish and protect that trust has never been more critical. We are uniquely positioned to live up to this mission, and shape the future of the cybersecurity industry. I thank Gil for his confidence and visionary leadership, and I am grateful to have him as a partner and mentor as our Chairman.”

Zafrir brings a wealth of industry experience to the role. Most recently, he was the co-founder and managing partner at Team8, a company-building venture group focused on cybersecurity, data & AI, fintech, and digital health. Prior to that, he established the IDF’s Cyber Command and served as Commander of the elite Unit 8200, retiring as a Brigadier General.

He has also served on the boards of 14 private cybersecurity companies and is a board member of SolarEdge Technologies.

This leadership transition marks a significant milestone for Check Point as it navigates the evolving cybersecurity landscape and positions itself for continued growth and innovation.

0 comment
0 FacebookTwitterPinterestEmail
Cyber securityOpinionTech

Strengthening Cybersecurity in African Universities

by Phyllis Migwi
written by Phyllis Migwi

When thinking about industries that cybercriminals might target, tertiary education probably isn’t the first to come to mind. But according to the latest edition of Microsoft’s Cyber Signals report, education was the third most targeted industry in the second quarter of this year. The mix of valuable data and inherent vulnerabilities in education systems has caught the eye of various attackers—from those using new malware techniques to nation-state actors involved in traditional espionage.

This is a particular concern for tertiary institutions in Africa, which is one of the most targeted regions in the world when it comes to cyberattacks. In fact, a recent study of 60 Kenyan universities showed that most of these institutions were experiencing hacks, while also battling a lack of adequate cybersecurity policies and controls, including organisational, human, physical and technological resources.

Just last year a prominent Moroccan institution of higher learning was hit by a security breach of its master’s degree nomination platform, while a private university in Nigeria had its website completely overtaken by hackers.

It’s clear that the education industry’s vulnerabilities haven’t gone unnoticed by cybercriminals. According to the Cyber Signals report, in the past year alone, more than 15,000 emails with malicious QR codes were sent daily to the sector using Microsoft Office 365 email. This highlights just how targeted and persistent these threats have become.

There are several reasons why hackers often target the education sector. Unlike typical enterprises, universities have a diverse group of users—students, faculty, administration staff, and others. The open and dynamic nature of university environments, with frequent activities and international students, makes them particularly vulnerable to cyberattacks.

Email systems in schools offer wide spaces for compromise

This naturally open environment means universities are often more relaxed about email security. With a lot of emails creating noise in the system, institutions are limited in how they can place controls because they need to stay accessible for alumni, donors, and external collaborations. This mix of openness and lack of controls makes them prime targets for attacks.

Virtual and remote learning have also extended educational applications into homes and offices. Personal and shared devices, which are often unmanaged, are everywhere. Students, not always savvy about cybersecurity, might unknowingly expose their devices to risks.

Legacy infrastructure leaves school systems vulnerable

The tertiary education sector often faces well-known funding and operational challenges. This means that cutting-edge digital classrooms have to operate alongside older applications and other IT assets. Managing and safeguarding these varied systems is tough, especially when it’s hard to keep cybersecurity experts on staff. This combination leaves school systems more vulnerable to attacks.

Nation-state actors are after valuable IP and high-level connections

Cybercriminals know that schools handle sensitive, regulated information and must stay open and accessible, making them targets for ransomware and extortion.

Universities are hubs for valuable intellectual property and cutting-edge research, often in collaboration with government agencies. This makes them attractive to attackers looking to steal or leverage sensitive data.

For example, it can be easier for hackers to initially target someone in the education sector with ties to the defense sector and then use that access to launch more convincing phishing attacks on higher-value targets.

Introducing a strong security curriculum  

Strengthening security measures can be a daunting and expensive task for schools, but there are steps they can take to protect themselves.

Having a clear understanding of the threat environment is an essential place to start. Reports like Cyber Signals are invaluable resources for chief information security officers and their teams as they refine technologies, policies, and processes. This quarterly cyberthreat intelligence brief, informed by the latest Microsoft threat data and research, provides expert insights into the current threat landscape and the tactics and techniques used by threat actors. It underscores Microsoft’s commitment to securing the digital ecosystem, in which we play such a central role. At Microsoft, security is our top priority, ensuring we earn and maintain the trust placed in us.

Beyond current insights, maintaining strong cyber hygiene is crucial. Raising awareness of security risks and promoting good practices among students, faculty, staff, and administrators can help create a safer environment.

For IT and security pros in education, starting with the basics and beefing up security is a good move. Centralising the tech setup can assist in monitoring activities more effectively and spotting vulnerabilities more easily. Specifically, the Cyber Signals report recommends that IT teams think about using “protective domain name service,” a handy free tool that can help stop ransomware and other cyberattacks by blocking access to harmful websites. To prevent password spray attacks, they should make sure to enforce strong passwords and set up multifactor authentication.

For under-resourced IT teams, tools such as Microsoft Copilot for Security can significantly enhance the efficiency and capabilities of security defenders, allowing them to improve their security outcomes at machine speed and scale. This AI-powered security solution provides an assistive copilot experience, supporting professionals in end-to-end scenarios like incident response, threat hunting, intelligence gathering, and posture management.

It’s also important for universities to teach students and staff about good security habits and encourage them to use multifactor authentication or passwordless options. According to the report, accounts are more than 99.9% less likely to get hacked with multifactor authentication.

By putting stronger defenses and proactive measures in place, universities can better equip themselves to fend off the increasing threats to their sensitive data and groundbreaking research. Building a solid security posture isn’t just about technology; it’s also about fostering a watchful culture ready to manage potential attacks. Investing in these measures now will safeguard their valuable assets and ensure their critical work continues without disruption.

 Phyllis Migwi,  Country General Manager, Microsoft Kenya.

0 comment
0 FacebookTwitterPinterestEmail
Cyber securityTech

Scammers now hiding phishing links behind images, Kaspersky warns

by Brian Yatich
written by Brian Yatich

Kaspersky experts discovered a phishing campaign with an unusual attack vector – through an image. This scam targeted organisations in the fields of online retail, distribution, transportation, and logistics. The cyber attackers aimed to steal corporate email credentials from potential victims.

Within the phishing scheme, the cyber attackers send emails in English, allegedly on behalf of a South Korean company. Pretending to be employees of this organisation, the cybercriminals email about sending instructions to their bank for transferring a payment.

They ask potential victims to check the details in the scanned document, which is added to the body of the letter. According to the legend, this must be done quickly in order to receive payment as soon as possible.

“The image in these phishing emails is poorly visible – this is what the attackers are counting on. Even if a person does not expect an email, he may be interested in looking at the details. However, in reality, the image hides a phishing link. ” says Roman Dedenok, a cybersecurity expert at Kaspersky.

‘If the users click on the scan, they will be redirected to a fake resource that mimics a file sharing service from Adobe. There, they will be asked to enter the credentials for a corporate email account to gain access to the document. However, this should never be done, otherwise this information will go to the cybercriminals,”

To avoid becoming a victim of such phishing attacks, Kaspersky recommends that users do not trust emails from unknown mailboxes, especially when it comes to confidential data, financial transactions and suspicious attachments, even if it visually looks like the email came from an organisation with a good reputation.

Kaspersky also recommends that companies install a reliable security solution that will automatically send such emails to spam, and also regularly conduct cybersecurity training for employees, teaching them how to recognise social engineering techniques.

In 2023, Kaspersky participated in 100 independent tests and reviews, with its products being awarded 93 first places, achieving the highest result of all years.

0 comment
0 FacebookTwitterPinterestEmail
cybersecurity
Cyber securityOpinionTech

Top 5 Cybersecurity Threats to look out for in 2024

by Kwabe Ben
written by Kwabe Ben

By Hariprasad Viswanathan, Head- Sub Saharan Africa, VFS Global

The information security industry is on high alert due to a variety of new and growing cybersecurity threats. The data and assets of businesses, governments, and people are always at risk due to sophisticated cyber-attacks involving malware, phishing, identity theft, and more.

Even though conversation about cyber security has gradually moved from the IT department to the boardroom in recent years, the bad news is that cyber-criminal activities frequently outpace business security efforts, necessitating the constant adaptation of security teams to a threat environment that is constantly changing.

In a recent survey conducted by IEEE, which included 350 chief technology officers, chief information officers, and IT directors, 51% of participants cited cloud vulnerability as their top concern, whereas 43% cited data center vulnerability as their top concern, highlighting the need for organizations to focus on securing their cloud and data center infrastructure, as these areas are becoming increasingly targeted by cybercriminals.

As the digital landscape continues to evolve, so do the threats that aim to exploit it.  Cybercriminals are expected to continue to use increasingly sophisticated methods to gain unauthorized access to sensitive information and disrupt critical systems. Hence, industry experts must keep an open eye on cybersecurity threats, to lead their organization best, and to avoid being a part of any data privacy mishaps.

Here are the top 5 cybersecurity threats to watch out for:

  • Ransomware: According to a recent Statista report published in October 2023, more than 72% of organizations globally were impacted by ransomware attacks in 2023. This number was by far the largest reported and shows growth over the preceding five years., Although this does not imply that every attempt was successful, it does show how common this cyber threat is. Threat actors can now very easily gain access to powerful ransomware tools and with just a little technical know-how, fraudsters may launch attacks that cost businesses millions of dollars. These attacks have become more targeted, and attackers are now demanding larger ransoms. If these attacks continue, businesses, governments, people, and organizations across almost every industry will be plagued by ransomware.

 

  • Data Poisoning: Artificial intelligence and machine learning (AI/ML) are sometimes a double-edged sword as businesses use them to boost defenses and avoid cybercrimes. AI and machine learning (AI/ML) surely open up new possibilities for businesses in every industry, according to an IBM 2022 survey that revealed that 35% of organizations were utilizing AI in their business and 42% were exploring it. But as hackers become more sophisticated, they are also using this technology to carry out their attacks. AI and data poisoning are two methods used by attackers to do this, which presents a serious challenge for those in the field of cyber security.

  • Cloud-based attacks: The number of attacks on cloud infrastructure has risen sharply in recent years, with the COVID-19 pandemic playing a significant role in this trend. As businesses of all sizes had to quickly adapt to new ways of operating, many turned to cloud-based solutions. According to Gartner, it is anticipated that global end-user spending on public cloud services will reach $591.8 billion in 2023 and by 2025 over 95% of new digital workloads will be deployed on cloud-native platforms. As a result, businesses must now consider new and robust security strategies to manage the growing risks associated with cloud services. The following statistics reflect the growing popularity of cloud computing and the corresponding increase in attacks on these systems in recent years.

  • AI-based attacks: In cybersecurity, artificial intelligence is becoming more and more significant, both for good and harm. The most recent AI-based techniques can help organizations better identify risks and safeguard their systems and data resources. However, cybercriminals can use this technology to drive complex attacks.  AI can be used to detect patterns in computer systems that reveal vulnerabilities in software or security programs and hackers can exploit these weaknesses. AI can also be used in combination with stolen personal information or publicly available data, such as social media posts, to create large numbers of phishing emails to spread malware or gather valuable information.

  • 5G attacks G technology, although promising with its benefits, also poses some security risks that are worth taking into account. These may include an increased risk of supply chain attacks on 5G infrastructure, which could result in malicious software and hardware from untrusted vendors being used, or the shift towards edge computing with 5G, where computing resources are located at the edge of the network rather than a central hub, may increase the likelihood of untrusted and potentially unsecured devices connecting to the 5G network.

As technology continues to evolve and play a central role in our lives, individuals and organizations need to stay vigilant and adapt to the new threats that may arise. It is important to implement security measures such as using multi-factor authentication, keeping software updated, and regularly backing up important data. Regularly training employees to detect and avoid potential cyber threats, will be critical in protecting the organization from a cyber attack.

0 comment
0 FacebookTwitterPinterestEmail
Cyber securityTech

Check Point’s Global Threat Index: Surge in Cyber Threats, Top Mobile Malware

by Brian Yatich
written by Brian Yatich

Check Point® Software Technologies Ltd., a renowned cybersecurity solutions provider, has unveiled its Global Threat Index for October 2023, shedding light on a disturbing surge in cyber threats.

The report highlights the rise of the Remote Access Trojan (RAT) NJRat, which has climbed from sixth to second place, with a significant focus on targeting government agencies and organizations in the Middle East and Africa.

This escalation in cyber threats has been particularly severe in Africa, with Mauritius ranking 6th, Nigeria 11th, Morocco 15th, and Kenya 25th in terms of being targeted and attacked. South Africa follows, ranking 55th globally.

The report also emphasizes the expanding reach of the sophisticated RAT AgentTesla, propelled by a new and intricate mal-spam campaign using corrupted email attachments. The education sector remains a prime target, underscoring the ongoing vulnerability of this industry to cyber attacks.

According to Check Point Sales Engineer Rudi van Rooyen, “We cannot overlook the sophisticated tactics used by hackers to distribute malware, such as impersonating trusted brands or using malicious email attachments. As we enter the busy shopping season in November, it’s crucial to stay alert. Cybercriminals are taking advantage of the increased online shopping activity, and no region, including Africa, is immune to these threats.”

Check Point’s research also revealed that the “Zyxel ZyWALL Command Injection (CVE-2023-28771)” was the most exploited vulnerability, impacting 42% of organizations globally, followed by “Command Injection Over HTTP” and “Web Servers Malicious URL Directory Traversal.”

The report further outlines the top mobile malware, with Anubis remaining in first place, followed by AhMyth and Hiddad. Anubis is a banking Trojan malware designed for Android mobile phones, while AhMyth is a Remote Access Trojan (RAT) and Hiddad is an Android malware that repackages legitimate apps to display ads and gain access to key security details.

The ThreatCloud Map is powered by Check Point’s ThreatCloud intelligence, which provides real-time threat intelligence derived from hundreds of millions of sensors worldwide, over networks, endpoints, and mobiles.

The intelligence is enriched with AI-based engines and exclusive research data from Check Point Research, the intelligence and research arm of Check Point Software Technologies.

This comprehensive threat index provides valuable insights into the evolving cyber threat landscape and helps organizations and individuals stay informed and protected against emerging cybersecurity risks.

0 comment
0 FacebookTwitterPinterestEmail
Embrace Code of Conduct to Build Trust, Keep Kenyans Online Safe
Cyber securityOpinion

Time to Shape Up: Embrace Code of Conduct to Build Trust, Keep Kenyans Online Safe

by Jacob Otieno
written by Jacob Otieno

The Media Council of Kenya (MCK) recently published a Code of Conduct for Digital Media Practitioners. It was long overdue.

We live in an era when a seconds-long video clip can ignite a national debate and shape public opinion overnight. To put things into perspective, let me take us back to the TikTok saga. 

A few days ago, a petition was tabled in parliament seeking to ban use of TikTok in Kenya. The petitioner, identified as Bob Ndolo, an executive officer at the Briget Connect Consultancy, posited the ByteDance-owned app was a threat to our cultural and religious values.

Ndolo argued TikTok was exposing our children to explicit content, promoting violence, hate speech, vulgarity, and offensive behavior. For these reasons, it should be banned. 

TikTok Ban Not a Solution

Not everyone was persuaded, though. A section of Kenyans, including members of parliament, opposed the proposed ban. They argued the short-form video-sharing app with Chinese roots was a source of livelihood for many Kenyans. 

And as expected, online content creators were all up in arms. TikTok influencer Rose Atieno, best known as Nyako, took to her favourite platform to protest:

“One selfish person can make a motion that he wants TikTok banned. We have to sit at the table with the government and regulate how TikTok can work for us peacefully. They have to consult us first,” she fumed.

“Let them put rules to govern Tiktok. That’s the way to go. This app helps a lot of people earn a living,” Jackline Mwende added as the debate on the TikTok ban petition raged on.

There were divergent views on how TikTok was impacting Kenyans’ livelihoods and reshaping societal norms. But notably, both sides appeared to agree there was a need for rules to govern the use of TikTok.

The calls for TikTok regulation mirror the huge responsibility that digital media practitioners are confronted with as they seek to reach more audiences and tap into new markets. TikTok and other social media platforms such as Facebook, Twitter (now known as X), and YouTube have become instrumental in shaping public discourse, and opinions and reaching diverse audiences. 

However, with this influence comes the responsibility to uphold the integrity of the information shared, combat misinformation and disinformation, push back on hate speech, cyberbullying, and harassment, and maintain high ethical standards that are essential for the practice of journalism.

Bridging Trust Gap Online

The level of public trust in news content published on social media platforms has been disturbingly low as a result of the proliferation of fake news and all sorts of unsafe content being circulated on these platforms.

According to Digital News Report 2023 by Reuters Institute, trust in online news fell to 40%, down 2% from 2022, erasing the progress that had been made during the Covid-19 pandemic globally. 

The report showed 64% of social media users were worried about misinformation, compared to 50% among non-users. 

A staggering 56% of the people surveyed agreed with the statement, “Thinking about online news, I am concerned about what is real and what is fake on the internet.”

In light of these emerging concerns, the media’s role as a counter to the proliferation of misinformation and disinformation in the online space coupled with low and dwindling public trust is more pressing than ever.

Media Council of Kenya’s Intervention Timely

The Code of Conduct for Digital Media Practitioners published by the Media Council of Kenya arrived at a critical juncture. 

As digital media continues to evolve to keep pace with disruptive innovations, its practitioners must also adhere to professional guidelines that can safeguard the public interest and help rebuild lost trust and confidence. 

This Code should not be seen as a hindrance to creative expression or suppression of the freedom of speech that is protected in Article 33, Chapter Four of the Kenyan constitution. Instead, it is a framework that empowers media professionals to contribute positively to society by disseminating accurate, balanced, and responsible content.

The heated debate around TikTok underscores the urgency of such guidelines and responsible digital media practices, not just for TikTok but for all digital media platforms. 

By putting together a Code – with contributions from key players, the Council took a necessary and timely step toward instilling this sense of responsibility in the fast-changing digital media landscape.

The Code of Conduct aims to promote self-regulation, professionalism, and ethics in the online space. It also provides a way to protect the rights and interests of digital media consumers, who deserve to access reliable and credible information online.

Code of Conduct Not a Magic Bullet

However, the code of conduct is not a substitute for the legal framework that governs the digital media sector, nor is it a shield against the consequences of violating the law or infringing on the rights of others. 

The Code, in this case, is a voluntary and self-imposed guideline that requires the commitment and cooperation of all stakeholders to make it effective and meaningful.

Therefore, it is imperative that all players adhere to the Code. This will not only enhance their credibility and reputation but also foster a culture of trust and respect among themselves and with their audiences. It will equally contribute to the development of a vibrant digital media ecosystem that serves the public interest and promotes democracy.

The MCK has done its part. Now it is up to the digital media practitioners to also do their part. 

Jacob Onyango is the managing editor of TUKO.co.ke. He is passionate about shaping ethical online behavior and believes digital media practitioners have the potential to drive positive change in Kenya.

0 comment
0 FacebookTwitterPinterestEmail
LockBit
Cyber securityTechnology

LockBit Ransomware Group Expands Operations, Targets macOS Systems

by Brian Yatich
written by Brian Yatich

LockBit, one of the world’s most notorious ransomware groups, has recently expanded its attacks to target macOS systems, according to cybersecurity experts at Kaspersky.

Known for its relentless attacks on businesses worldwide, LockBit has upgraded its capabilities to maximize the impact of its malicious activities.

Previously, LockBit operated without leak portals, double extortion tactics, or data exfiltration, but it has continuously improved its infrastructure and security measures to fend off various threats.

Analysts have observed that LockBit is now incorporating code from other well-known ransomware groups like BlackMatter and DarkSide. This strategic move not only streamlines its operations but also expands the range of attack vectors employed by LockBit.

Kaspersky’s Threat Attribution Engine (KTAE) has discovered that LockBit has integrated around 25% of the code previously utilized by the now-defunct Conti ransomware gang, resulting in a new variant called LockBit Green.

In a significant finding, Kaspersky researchers have discovered a ZIP file containing LockBit samples specifically designed for multiple architectures, including Apple M1, ARM v6, ARM v7, FreeBSD, and more.

Through analysis and investigation, they have confirmed that these samples originate from the LockBit Linux/ESXi version seen in the past.

Although some samples, like the macOS variant, require additional configuration and lack proper signing, it is evident that LockBit is actively testing its ransomware on various platforms, indicating an imminent expansion of their attacks.

This development highlights the urgent need for robust cybersecurity measures across all platforms and increased awareness within the business community.

LockBit’s continual infrastructure enhancements, combined with the adoption of code from other ransomware groups, present a significant and evolving threat to organizations in various industries.

To mitigate these risks, businesses must reinforce their defenses, regularly update security systems, educate employees on cybersecurity best practices, and establish incident response protocols. This advice comes from Marc Rivero, a senior security researcher at Kaspersky’s Global Research and Analysis Team.

To protect yourself and your business from ransomware attacks, Kaspersky suggests following these rules:

1. Keep all software updated on your devices to prevent vulnerabilities from being exploited.

2. Focus on detecting lateral movements and data leaks to the Internet. Monitor outgoing traffic to identify cybercriminals’ connections to your network. Set up offline backups that cannot be compromised.

3. Activate ransomware protection on all endpoints. Consider using Kaspersky Anti-Ransomware Tool for Business, which shields computers and servers from ransomware and other malware, prevents exploits, and works alongside existing security solutions.

4. Install anti-APT and EDR solutions to enable advanced threat discovery, detection, investigation, and timely incident remediation. Provide your Security Operations Center (SOC) team with access to the latest threat intelligence and regular professional training. Kaspersky Expert Security offers all of these capabilities.

5. Grant your SOC team access to the latest threat intelligence through the Kaspersky Threat Intelligence Portal. This portal provides you with cyberattack data and insights collected by Kaspersky over the past 20 years. To help businesses bolster their defenses, Kaspersky is offering free access to continuously updated, globally sourced information on current cyberattacks and threats. To request access to this offer, go here.

0 comment
0 FacebookTwitterPinterestEmail
Newer Posts
Older Posts