The Lagos State Government has published a comprehensive set of cybersecurity guidelines designed to protect businesses, public institutions, and residents. As Lagos continues to grow as Africa’s fastest-growing technology ecosystem, it faces increasing exposure to cyber risks.

The guidelines offer practical recommendations tailored for small and medium-sized enterprises, large organizations, and various Ministries, Departments, and Agencies. They are intended as a resource rather than a regulatory instrument. This approach allows stakeholders to adopt best practices without facing penalties for non-compliance.

According to the National Information Technology Development Agency, Nigeria loses more than $500 million annually to cybercrime. These staggering losses highlight the need for robust cybersecurity measures. The guidelines align with existing legislation such as the Cybercrime Act 2024 and the Nigeria Data Protection Act 2023.

The framework was developed with technical leadership from the Lagos State Cybersecurity Advisory Council. Their expertise ensured that the guidelines address both current threats and future challenges. The council plans to review and update these guidelines regularly to keep pace with evolving technologies.

Yet, while these measures are significant, they represent just one step in a broader fight against cybercrime. Businesses and individuals must also take proactive steps to secure their digital assets.

As Lagos continues its digital transformation, these guidelines will play a crucial role in shaping a safer online environment. Stakeholders eagerly await further developments regarding implementation strategies.

In summary, the introduction of these cybersecurity guidelines marks a pivotal moment for Lagos as it strives to enhance its digital economy while safeguarding its citizens from cyber threats.

The post Lagos Cybersecurity Guidelines appeared first on Toprecruitment.

The CAC activated its response protocols immediately after detecting unauthorized access to parts of its information systems. The agency confirmed that millions of data points in Nigeria were affected by this cyberattack.

CAC is collaborating with the National Information Technology Development Agency (NITDA) and other relevant government agencies to assess the scope and impact of the breach. About 25 million documents were allegedly exfiltrated from CAC’s infrastructure, according to Dark Web Informer.

The agency processes up to 10,000 business registration requests daily and handles an average of 5,000 customer inquiries through emails and call centers. However, due to this incident, CAC announced a temporary suspension of its companies’ registration portal from April 17 to April 20, 2026.

To serve users better during this period, CAC stated, “To serve you better, we will be carrying out scheduled maintenance on our portal this weekend, from 12:00 midnight today, 17th April 2026, to 6:00 a.m. on Monday, 20th April 2026.” This maintenance aims to enhance security measures following the attack.

CAC reiterated its commitment to the security and integrity of Nigeria’s corporate registry. It confirmed that appropriate containment measures have been implemented, and additional safeguards are now in place.

Yet, uncertainties remain. The exact nature and extent of the data breach are unclear. Additionally, the identity of the threat actor behind the attack has not been confirmed.

The post Corporate Affairs Commission appeared first on Toprecruitment.

The Joint Account feature is designed to simplify the investment process for families, business partners, and co-investors, allowing them to manage and monitor their investments collaboratively. This initiative comes as part of CSCS’s broader strategy to bolster the resilience of the Nigerian market through innovative services.

Shantali further elaborated, “The introduction of Joint Accounts makes it easier for families, business partners, and co-investors to manage and monitor their investments together.” This move is expected to enhance the investment landscape in Nigeria, providing a more inclusive approach to financial management.

In a different context, the issue of account security has come to the forefront as over one million online banking accounts were compromised by infostealers last year. According to cybersecurity expert Polina Tretyak, “The dark web has become a central hub for financial cybercrime,” highlighting the growing threat that these malicious actors pose to individuals and organizations alike.

Infostealers have emerged as a primary source of initial access for ransomware and identity theft, with a staggering 74% of payment cards compromised by infostealer malware remaining valid as of March 2026. The alarming rise in cybercrime has prompted calls for increased vigilance and proactive measures from both organizations and individual users.

In 2025, infostealer detections surged by 59% globally, while mobile banker attacks grew by 1.5 times compared to the previous year. Tretyak emphasized the need for a coordinated response, stating, “Breaking this cycle requires proactive threat intelligence on the part of organizations, and increased awareness and scrutiny from individual users.” This underscores the importance of safeguarding financial accounts in an increasingly digital world.

As the CSCS rolls out its Joint Account feature, it remains to be seen how this will impact the investment habits of Nigerians amidst the backdrop of rising cyber threats. The initiative aims to foster a more collaborative investment environment while addressing the pressing need for enhanced security measures in financial transactions.

The post Account: New Joint Feature Enhances Collaborative Investing appeared first on Toprecruitment.

The breach has raised serious concerns about the security of Mercor’s systems, particularly as it has been reported that the company’s tools contained credential harvesting malware. This malware reportedly took only 40 minutes to steal login credentials, allowing hackers to access and exfiltrate approximately 4 terabytes of sensitive data. Such a large volume of data raises alarms about the extent of the breach and the potential implications for affected individuals.

Mercor’s contractors include gig workers who have provided services for major clients like Meta. The impact of this breach on these workers and their clients remains to be seen, especially as the lawsuits filed against Mercor could lead to significant financial and reputational damage. One plaintiff, NaTivia Esson, expressed concerns about the time and resources she will need to spend to mitigate the injuries caused by the breach.

Adding to the complexity of the situation, Mercor had recently closed a $350 million Series C funding round less than six months prior to the breach. The timing of this funding, coupled with the breach, raises questions about the company’s operational stability and future prospects. Furthermore, an apparent lead-generation website, MercorClaims.com, went live just days before the breach, suggesting that the company may have been aware of potential vulnerabilities.

Delve Technologies, a company associated with Mercor, has been accused of facilitating fake compliance and sham security audits, further complicating the narrative surrounding the breach. These allegations could exacerbate the legal challenges facing Mercor, as they suggest a systemic issue with the company’s approach to data security and compliance.

In response to the breach, a representative from Mercor stated, “Mercor will continue to communicate with our customers and contractors directly as appropriate and devote the resources necessary to resolving the matter as soon as possible.” However, the exact nature of the stolen data has not been fully described by Mercor, leaving many questions unanswered.

As the situation develops, the impact of the lawsuits on Mercor’s operations and reputation remains unclear. The company is likely to face scrutiny from both the public and regulatory bodies as it navigates the aftermath of this breach. Details remain unconfirmed regarding the full extent of the data exposure and the potential long-term consequences for those affected.

The post Mercor Faces Legal Challenges Following Data Breach appeared first on Toprecruitment.

The security of personal data is more crucial than ever, especially with the recent Gmail passwords data breach making headlines worldwide. Understanding the implications of this breach and the importance of safeguarding our online accounts is essential for everyone, as it not only affects individual users but can also have a broader impact on online security across various platforms.

Details of the Breach

On September 15, 2023, cybersecurity experts reported a significant breach involving Gmail account passwords. It was estimated that sensitive information from millions of Gmail users was exposed, leading to potential unauthorized access to email accounts. Initial investigations suggest that the breach may have occurred due to vulnerabilities in third-party applications linked to Gmail, rather than a direct failure of Google’s own security systems.

The affected passwords were reportedly made available on dark web forums, highlighting the urgent need for users to change their passwords and enhance their security protocols. This incident has raised alarms among many users who rely on Gmail for private and professional communications.

Response from Google

Google has released a statement acknowledging the breach and urged users to activate two-factor authentication (2FA) on their accounts to increase security. They also recommended the use of password managers to create strong and unique passwords for each of their email logins. In response to this breach, Google is working on implementing new security features to further protect user accounts and prevent future incidents.

What Users Can Do

In the wake of this breach, users are encouraged to take immediate action:

• Change Your Password: Update your Gmail password to something strong and unique that you haven’t used before.
• Enable 2FA: Turn on two-factor authentication for an additional layer of security.
• Monitor Account Activity: Regularly check for any suspicious activities in your account.
• Use Password Managers: Utilize tools to help create and store complex passwords.

Conclusion

The Gmail passwords data breach serves as a stark reminder of the vulnerabilities present in today’s digital environment. As cyber threats continue to evolve, it is essential for users to stay informed and proactive about their online safety. By changing passwords, enabling two-factor authentication, and adopting good password management practices, users can significantly reduce their risk of falling victim to cybercrime. Maintaining vigilance in online security is not just an individual responsibility but a collective one that ensures a safer internet for all.

The post Recent Gmail Passwords Data Breach: What You Need to Know appeared first on Toprecruitment.