Experts Uncover Critical Security Flaws On Nigeria Police Website, Say Site At Risk Of Cyber Attacks, Sensitive Data Loss

Experts Uncover Critical Security Flaws On Nigeria Police Website, Say Site At Risk Of Cyber Attacks, Sensitive Data Loss

The vulnerabilities pose a significant risk to sensitive data and could lead to cyber-attacks, compromising the security of the website and the information it handles.

Experts have discovered critical security flaws on the Nigeria Police website, which is used for reporting cybercrime and other official purposes.

The vulnerabilities pose a significant risk to sensitive data and could lead to cyber-attacks, compromising the security of the website and the information it handles.

SaharaReporters’ investigation revealed a concerning security lapse on the Nigeria Police Force website.

The website’s registration is listed under an individual’s name, Timothy A. Adedoyin, with personal contact information publicly available. This raises serious concerns about the lack of institutional control and exposes the website to potential cyber threats and exploitation by malicious actors, highlighting a critical oversight in the website’s security setup.

An Information technology (IT) expert who works for the International Criminal Police Organization – INTERPOL told SaharaReporters that “the unauthorized assumption of control over the Nigeria Police Force website undermines the established chain of command within the organization and creates a potential conflict of interest”.

“It is imperative that the website of the Nigeria Police Force be managed by personnel who are duly authorized and trained to handle the responsibilities associated with hosting and managing such a critical platform,” the expert who spoke to SaharaReporters on condition of anonymity to avoid backlash from Nigerian police authorities said.

The expert further noted that “the actions of Timothy A. Adedoyin in question,” whom SaharaReporters’ investigation revealed to be a serving police officer “may also constitute a breach of the Nigeria Police Force Code of Conduct, which requires all officers to conduct themselves in a manner befitting the reputation and integrity of the organization

Experts Uncover Critical Security Flaws On Nigeria Police Website, Say Site At Risk Of Cyber Attacks, Sensitive Data Loss
July 9, 2024
7:17 pm
News

ADVERTISEMENT

Experts Uncover Critical Security Flaws On Nigeria Police Website, Say Site At Risk Of Cyber Attacks, Sensitive Data Loss

Related posts
Just In : Lawmakers Push For Disciplinary Action Against Nyesom Wike and 6 Area Council Chairmen
Just In : Lawmakers Push For Disciplinary Action Against Nyesom Wike and 6 Area Council Chairmen
52 MINS AGO
Herders’ Union MACBAN Reacts To Tinubu’s Creation Of Livestock Ministry, Foresees Multi-Trillion Naira Economic Opportunities
Herders’ Union MACBAN Reacts To Tinubu’s Creation Of Livestock Ministry, Foresees Multi-Trillion Naira Economic Opportunities
56 MINS AGO

ADVERTISEMENT
The vulnerabilities pose a significant risk to sensitive data and could lead to cyber-attacks, compromising the security of the website and the information it handles.

Experts have discovered critical security flaws on the Nigeria Police website, which is used for reporting cybercrime and other official purposes.

The vulnerabilities pose a significant risk to sensitive data and could lead to cyber-attacks, compromising the security of the website and the information it handles.

SaharaReporters’ investigation revealed a concerning security lapse on the Nigeria Police Force website.

The website’s registration is listed under an individual’s name, Timothy A. Adedoyin, with personal contact information publicly available. This raises serious concerns about the lack of institutional control and exposes the website to potential cyber threats and exploitation by malicious actors, highlighting a critical oversight in the website’s security setup.

An Information technology (IT) expert who works for the International Criminal Police Organization – INTERPOL told SaharaReporters that “the unauthorized assumption of control over the Nigeria Police Force website undermines the established chain of command within the organization and creates a potential conflict of interest”.

“It is imperative that the website of the Nigeria Police Force be managed by personnel who are duly authorized and trained to handle the responsibilities associated with hosting and managing such a critical platform,” the expert who spoke to SaharaReporters on condition of anonymity to avoid backlash from Nigerian police authorities said.

The expert further noted that “the actions of Timothy A. Adedoyin in question,” whom SaharaReporters’ investigation revealed to be a serving police officer “may also constitute a breach of the Nigeria Police Force Code of Conduct, which requires all officers to conduct themselves in a manner befitting the reputation and integrity of the organization.”

“By taking on the role, he risks damaging the reputation of the Nigeria Police Force and potentially compromising the security and confidentiality of information housed on the website,” he added.

Web development expert, Ayour Davies Judy, also weighed in on the matter, revealing that a closer examination of the domain registration history uncovered disturbing details about the website’s security vulnerabilities, further highlighting the alarming lapses in its security architecture.

He said, “The fact that the domain was initially acquired in 2008 for a single year and subsequently renewed in 2009, with the most recent renewal in 2022, indicates a lack of consistent and proactive security measures.

“A detailed analysis of the website uncovered fundamental deficiencies in cybersecurity defenses. Of particular concern is the absence of a Secure Socket Layer (SSL) certificate, a basic security standard that encrypts communication between users and the site.

“Anyone trying to gain access to the portal will get a prompt from their website browser warning them of potential cyber-attacks if they have safety features enabled.

“The cloudflare, which provides security services to some percentage of internet users, recommends that a website enables the SSL to prevent just anyone from reading server requests and the corresponding responses on a webpage.”

However, SaharaReporters also observed that Section 7.2 of the National Information Technology Development Agency (NITDA) Standard and Guidelines for Government Websites mandates all government websites to use technologies like the SSL to encrypt information wherever necessary.

In its guideline documents, NITDA specifically recommends the use of the SSL to ensure that government websites are protected from cybercriminals at all times.

“Government Institutions shall: i. ii. iii. Commit to a continuous process of maintaining the security of Web Servers to ensure continued security,” the guidelines say. “Use authentication and cryptographic technologies as appropriate to protect certain types of sensitive data with differing access privileges. It is recommended that SSL be used for any cryptographic implementation.”

The website domain is also unlocked against unwarranted transfer. Website locks ensure the safety of the website from outsiders.

SaharaReporters learnt that these critical oversight exposes visitors to interception of sensitive data and compromises the integrity of information exchanged on the platform, putting both the public and the police force at risk.

Given the significant role of the Nigeria Police Force website in public engagement and information dissemination, the current state of its security infrastructure is wholly inadequate, SaharaReporters was told.

According to experts, the lack of robust security measures not only jeopardizes the integrity of the website but also raises serious doubts about the organization’s commitment to safeguarding critical data and maintaining public trust.

Experts say an immediate action is imperative to rectify the security lapses and bolster the website’s cybersecurity defenses.

They also noted that proactive measures must be implemented to fortify the platform, including the deployment of essential security protocols such as SSL certificates, regular security audits, and migration to a dedicated server under the direct control of the Nigeria Police Force.

The precarious security posture of the Nigeria Police Force website underscores the urgent need for comprehensive cybersecurity enhancements to mitigate risks and protect against potential cyber threats.

Failure to address these vulnerabilities promptly could have far-reaching consequences for both the organization and the wider Nigerian populace, necessitating swift and decisive action to ensure the website’s security integrity and resilience in the face of evolving cyber risks, experts added.

They also added that actions must be taken to ensure that the Nigeria Police Force website is managed in accordance with established regulations and protocols.

Attempts to contact Nigeria Police Force spokesperson, ACP Olumuyiwa Adejobi, for comment were unsuccessful, as he failed to answer or return calls and messages.

Credit/ sahara reporter