What happens when government websites get hacked, the largest DDoS attack ever hits a cloud platform, and a university suffers a data breach? These global incidents show the urgency. And in the local scene, Nigeria takes a step forward in data governance.

Learn more below.

Microsoft Azure Hit by Huge DDoS Attack

In late October, Microsoft revealed that its cloud service, Azure, faced a huge cyberattack.

The attack came from a network of hacked home routers and internet-connected devices known as the Aisuru botnet. Most of the activity tied to Aisuru involved residential internet service providers in the U.S., though other countries were affected as well, according to Microsoft.

At its peak, the botnet sent attacks at more than 15.72 trillion bits per second (tbps) and around 3.62 billion packets per second at a single Azure server in Australia.

Despite the scale of the attack, Azure’s security systems managed it effectively. Microsoft rerouted the traffic, and customers didn’t experience any downtime.

Cybersecurity experts warn that as more devices connect to the internet and home networks get faster, attacks like this could grow even larger. It shows that companies need to continually strengthen their security to stay ahead of hackers.

Kenyan Government Websites Hacked

Earlier this month, several Kenyan government websites were compromised. Pages belonging to the Interior, Health, Education, Energy, Labour, and Water ministries went offline and were defaced with strange messages instead of their usual content.

Some users trying to log in saw phrases like “Access denied by PCP,” “We will rise again,” and “White power worldwide.”

The government responded and got the websites back online, but the attack showed that even government websites can be vulnerable if their security is not up to date. Small issues like weak passwords or outdated software can make it easy for hackers to get in.

This is not the only government-owned system that was hacked in Africa. Somalia’s e-visa platform was also breached earlier this month, showing that public institutions must maintain strong cybersecurity to protect both their services and public trust.

Princeton University Database Breach

Princeton University revealed that a database containing personal information about donors, alumni, students, faculty, and parents was accessed by an intruder. 

Princeton has joined the list of Ivy League schools to be breached; earlier, the University of Pennsylvania and Columbia University were breached. The hacker was in the system for less than a day, but they could see names, emails, phone numbers, and home and work addresses.

The university said no Social Security numbers, bank info, or student records were affected. Still, the incident demonstrates how universities hold a lot of personal data, making them targets for cybercriminals. Princeton’s situation shows the importance of keeping systems up to date and monitoring them closely.

Nigeria Moves to Help Small Businesses with Data Rules

On a brighter note, Nigeria is taking steps to help small businesses handle data properly. Seequre, a cybersecurity company, signed an agreement with the Nigeria Data Protection Commission (NDPC) to create an easy-to-follow framework for data compliance.

The plan includes a simple checklist for businesses, templates and tools to make following the rules easier, and advice from experts to help businesses protect their customers’ data. This is especially important because small and medium-sized businesses make up most of Nigeria’s economy.

Dr. Vincent Olatunji, the NDPC’s National Commissioner, said the partnership is “an important step to make data protection easier for all businesses, big and small.” The goal is to help businesses stay safe online and build trust with their customers.

Lessons We Learned this Week

1. Cyberattacks Are Growing in Scale

The Azure attack is a warning of how attackers are now doing things once thought impossible. And as IoT devices increase so will the tools available to cybercriminals. Future attacks will be even more aggressive.

2. Government Systems Need Constant, Real-Time Protection

What happened to Kenya should make us remember that government websites are attractive targets so without regular maintenance and strong authentication, they can quickly become entry points for propaganda, disruption, or misinformation.

3. Data Breaches Don’t Have To Include Bank Details To Be Dangerous

Personal information, like an email address, can be exploited for phishing, impersonation, or social engineering. The Princeton breach highlights this well.

4. Reputational Damage Can Be Worse Than Technical Damage

When universities or government agencies get breached, trust is reduced. Public confidence is often harder to restore than a server.

5. Smart Regulation Strengthens Security

The NDPC–Seequre partnership shows how proactive measures can help reduce risks before they get out of hand. When regulators and tech platforms collaborate, the entire digital space benefits.

Here are Things You Can Do to Stay Safe

Even though these incidents involve large institutions, the risks can apply to users and small organisations as well.

Here are things to do to ensure you don't become a statistic:

• Always update all devices: Phones, laptops, routers, cameras; anything connected to the internet should be patched frequently.

• Strengthen authentication: Use strong passwords and multi-factor authentication everywhere.

• Secure your website: If you run a business site, use a firewall, schedule routine scans, and always keep backups.

• Monitor login activity: Keep an eye on unusual access patterns or unfamiliar devices. 

• Train your team on cyberawareness: Most attacks begin with human error.

• Stop using outdated systems and software: Delete unused accounts, decommission old servers, and remove abandoned cloud environments.

What does a 15.72 Tbps attack on a cloud giant and a simple password failure on a government website have in common? They both show us that digital security is getting tougher for everyone, regardless of size.

There will always be threats, but protecting yourself, your business, and your community starts with your reliable and timely information.

Don't wait to be the next headline, join our newsletter for practical security tips delivered straight to your inbox.