Tech
Countries strengthening cybersecurity efforts, but increased action still required
UN cybersecurity report assesses global progress in providing a safe and secure digital future for all.
Countries around the globe are improving cybersecurity efforts, but stronger actions are needed to meet evolving cyberthreats, according to the Global Cybersecurity Index 2024, released today by the International Telecommunication Union (ITU).
On average, countries have taken more cybersecurity-related actions and improved their cybersecurity commitments since the last index was released in 2021.
Worrisome threats highlighted in the report include ransomware attacks targeting government services and other sectors, cyber breaches affecting core industries, costly system outages, and breaches of privacy for individuals and organizations.
“Building trust in the digital world is paramount,” said Doreen Bogdan-Martin, ITU Secretary-General. “The progress seen in the Global Cybersecurity Index is a sign that we must continue to focus efforts to ensure that everyone, everywhere can safely and securely manage cyberthreats in today’s increasingly complex digital landscape.”
A new assessment with sharper focus
ITU’s Global Cybersecurity Index 2024 (GCI 2024) assesses national efforts across five pillars, representing country-level cybersecurity commitments: legal, technical, organizational, capacity development, and cooperation.
GCI 2024 also uses a new five-tier analysis, a shift that allows a greater focus on each country’s advances with cybersecurity commitments and resulting impacts.
The report places 46 countries in Tier 1, the highest of the five tiers, reserved for “role modelling” countries that demonstrate a strong commitment in all five cybersecurity pillars.
Most countries are either “establishing” (Tier 3) or “evolving” (Tier 4) in terms of cybersecurity. The 105 countries in these tiers have largely expanded digital services and connectivity but still need to integrate cybersecurity measures.
A “cybercapacity gap” – characterized by limitations in skills, staffing, equipment and funding – was evident in many countries and across all regional groups.
“The Global Cybersecurity Index 2024 shows significant improvements by countries that are implementing essential legal measures, plans, capacity building initiatives, and cooperation frameworks especially in strengthening incident response capabilities,” said Cosmas Luckyson Zavazava, Director of ITU’s Telecommunication Development Bureau. “ITU’s cybersecurity projects and programmes are supporting those national efforts to more effectively manage cyberthreats, and I hope that the progress demonstrated by this latest index encourages countries to do more in developing secure and trustworthy digital systems and networks.”
Regional and national assessments
According to GCI 2024, the Africa region has advanced the most on cybersecurity since 2021. All world regions show improvement since the last report.
The world’s least developed countries (LDCs) have also started making gains, though they still need support to advance further and faster. GCI 2024 data shows that the average LDC has now reached the same level of cybersecurity status that many of the non-LDC developing countries had in 2021.
Land-locked developing countries (LLDCs) and small island developing states (SIDS) continue to face resource and capacity constraints on cybersecurity efforts.
GCI 2024 includes individual assessments and provides a clear status report and a roadmap of activities to make further progress on cybersecurity.
Other key findings of the GCI
Legal measures are the strongest cybersecurity pillar for most countries: 177 countries have at least one regulation on either personal data protection, privacy protection, or breach notification in force or in progress.
Computer Incident Response Teams (CIRTs) are crucial for national cybersecurity: 139 countries have active CIRTs, with various levels of sophistication, up from 109 in the 2021 index.
National Cybersecurity Strategies (NCS) are becoming more prevalent: 132 countries have a National Cybersecurity Strategy as of 2024, up from 107 in the 2021 index.
Cyber awareness campaigns are widespread: 152 countries have conducted cyber awareness initiatives targeting the general population, with some also targeting specific demographics such as vulnerable and underrepresented populations, to create a culture of cybersecurity and address potential risks.
Incentives for the cybersecurity industry continue evolving: Governments are promoting the cybersecurity industry through incentives, grants, and scholarships, aiming to enhance cybersecurity skills and foster research in the field, with 127 countries reporting some form of cybersecurity-related research and development.
Many countries cooperate on cybersecurity through existing treaties: 92% of countries (166) reported being part of an international treaty or comparable cooperation mechanism for cybersecurity capacity development, or information sharing, or both. Putting cybersecurity agreements and frameworks into practical operation remains challenging.
Capacity development and technical pillars are relatively weak in most countries. 123 countries reported having trainings for cybersecurity professionals, up from 105 in 2021. In addition, 110 countries had frameworks to implement nationally or internationally recognized cybersecurity standards, up from 103 in 2021.
Capacity development initiatives need to be reinforced: 153 countries have integrated cybersecurity into national curricula at some level, but cybersecurity trainings and awareness-raising varies widely across regions. Developing a strong domestic cybersecurity industry is essential to sustain progress.
Countries need to focus on protecting children online: 164 countries have legal measures in place for child online protection; only 94 countries reported associated strategies and initiatives, indicating a gap in implementation.
Cybersecurity assessments leading to action
As cybersecurity continues to evolve, GCI offers a clear picture of where countries are and a roadmap of activities to make progress. The report offers 11 key recommendations, from enhancing critical infrastructure to providing cybersecurity training.
GCI 2024 suggests that countries can prioritize high-impact activities, including:
- implementing legal measures applicable across all sectors;
- developing and regularly updating a comprehensive national cybersecurity strategy and a practical, concrete action plan;
- enhancing incident-response capabilities;
- delivery of capacity building and training to cybersecurity professionals, youth and vulnerable groups to strengthen cybersecurity skills;
- fostering domestic and international cooperation and collaboration on information-sharing, training opportunities, and capacity development.
ITU, the UN Agency for Digital Technologies, aims to connect the estimated 2.6 billion people who currently remain offline. Most of the globe’s offline population live in developing countries, with the widest gaps in the least developed countries.
ITU established the Global Cybersecurity Index in 2015. The report series identifies areas for improvement and encourages countries to act on strengthening cybersecurity.
Apple , opens new tab plans to spend more than $30 billion under a multi-year chip supply deal with Broadcom, bolstering its U.S. sourcing as President Donald Trump’s administration pushes to expand domestic chip manufacturing.
Broadcom shares rose more than 4%, while Apple shares were down marginally.
Apple said on Wednesday the deal, which was struck earlier this week and runs through 2031, covers FBAR filters – or radio-frequency chips used for wireless connectivity in its devices – that it had been developing with Broadcom since at least 2023.
Broadcom will invest $1.5 billion to expand its Fort Collins, Colorado, factory under the deal, which Apple said would result in the production of at least 15 billion chips and support its work with the Trump administration to source more components domestically.
“The cutting-edge components built in Fort Collins are essential to delivering the incredible performance and connectivity our customers expect, and we’re proud to deepen our investments in U.S.-based suppliers that share our commitment to excellence and innovation,” Apple CEO Tim Cook said in a statement.
“We’re grateful to the president and his administration for supporting important projects like this.”
In August 2025, Apple raised its U.S. investment commitment to $600 billion over four years, adding $100 billion to a previously announced spending plan.
China is planning to allow the country’s top AI companies to buy a limited number of Nvidia’s, opens new tab H200 chips, the Information reported on Wednesday, citing two people with direct knowledge of the matter.
Chinese officials have told Alibaba, opens new tab, ByteDance and DeepSeek in recent weeks that they may soon receive permission to buy some H200 chips, the report said.
Shares of Nvidia rose 1% after the report.
The chip giant did not immediately respond to a Reuters request for comment, nor did the U.S. commerce department, which oversees exports of advanced AI chips overseas.
China’s commerce ministry also did not immediately respond to a request for comment, while Alibaba, ByteDance and DeepSeek did not respond outside of regular business hours.
The U.S. government has allowed Nvidia to sell its advanced H200 chips to China, and licensed about 10 Chinese firms to buy the chips. However, Chinese officials, keen to nurture domestic suppliers, have withheld approval so far.
Reuters reported in March that Nvidia had won Beijing’s approval to sell the chips to China, citing sources, and around the same time, Nvidia CEO Jensen Huang also told CNBC that the company had clearance from China.
Beijing is still determining the exact number of Nvidia chips to approve, and it could amount to fewer than 200,000 in total, the Information said, adding that was less than half of what the companies requested earlier this year.
Last month, Reuters exclusively reported that Nvidia told Chinese clients its new “Vera” central processors for AI data centres could be available as soon as August and that they can begin placing orders.
Nvidia’s market share in China has effectively fallen to zero, Huang said in October, hurt by U.S. export controls and Beijing’s push for self-reliance in key technologies.
The potential shift in China’s stance underscores the growing computing capacity crunch that the country’s tech companies are facing.
A team of software testers found that Australian social media platforms did not request age proof for any of 50 accounts that declared themselves to be 16, a result that leaves the country’s world-first under-16 ban “ineffective” at the most basic screening stage, according to a study seen by Reuters.
Since December, platforms such as Instagram, Snapchat and YouTube have been required to bar people under 16 and take “reasonable steps” to verify age, with regulators recommending multiple layered checks. But the new research, conducted by those who advised the nationwide curb, shows that the initial vetting step, which estimates a user’s age from general online activity, is failing to flag young people for tougher verification.
The testers, who last year trialled age-assurance software on more than 1,000 Australians, opened 50 new accounts after the law took effect and set the age as 16. None of the platforms asked for additional proof, the researchers told Reuters. The findings highlight a flaw that has been largely overlooked while public debate has focused on photo-based age-estimation tools.
The ban’s rollout has been widely criticised after surveys indicated that most under-16s still access the platforms. The government last month doubled the maximum fine and warned of possible court action against tech giants, accusing them of setting the system up to fail. Platforms have countered that they are simply following the regulator’s guidance, which prioritises low-friction checks and prevents reliance on government ID alone due to privacy concerns.
Some advisers to the original trial said they had repeatedly warned that the testing process ignored real-world circumvention, including minors entering false birthdates. “We did want to talk about circumvention, but we kept on being told that that wasn’t part of the actual trial,” Colm Gannon of the International Centre for Missing & Exploited Children told Reuters. A youth digital rights academic involved in a longer-term study of the ban said more impressive results might emerge once platforms move to age-inference methods later in the year. The regulator maintains that the recommended layered approach, if implemented correctly, ensures no single point of failure.
Two US soccer team staff members suspended by FIFA for Belgium World Cup game
Inside the Haaland machine
‘Little disappointed in our batting unit’: Miraz rues Tigers’ ODI opener defeat against Zimbabwe
-
Bangladesh2 weeks agoData Breaches Expose Millions, Reveal Gaps in Bangladesh’s Privacy Law
-
Business2 weeks agoIMF lowers 2026 world growth forecast
-
Business2 weeks agoRyanair loses appeals against Italy’s COVID aid to airlines in EU Court
-
Bangladesh2 weeks agoBIBM study finds uneven anti-money laundering enforcement in Bangladesh
-
China2 weeks ago
China plans to let top AI firms buy limited Nvidia H200 chips, the Information reports
-
World2 weeks agoTrump says interim accord to end Iran war is ‘over’, warns of new US strikes
-
Entertainment2 weeks agoSummer eye makeup trends every Bengali woman will love
-
Business2 weeks agoNet forex reserves climb to $27.92b