All analyses
Incidents, in-depth analyses and digital policies — read in African context.
Search or filter analyses
Editorial coverage by pillar
Editorial coverage by pillar
Published analysis count, not recorded attack volume.
Cold-chain security: Africa must remove refrigeration controllers from the internet
A joint US warning describes worldwide attacks against refrigeration and temperature-monitoring systems. For African health and food systems, OT inventory, passwords and resilient alarms are now continuity priorities.
Chainalysis incident: African fintechs must treat tokens like payment keys
Chainalysis provides crypto platforms, banks and investigators with tools to analyse blockchains and screen risky transactions. The company now confirms exposure of account data, password hashes and live tokens for all users.
PHP2Shell, ten days later: African operators must now prove remediation
PHP is the software engine behind a large share of websites and online services. Two critical flaws now have public code and reported exploitation: African operators must prove that every active server is actually loading the corrected build.
DeepSeek and Chinese AI platforms in Africa: data sovereignty or technological dependency?
DeepSeek, Kimi and Baidu’s ERNIE chatbot are Chinese generative-AI platforms offering model services at low or no cost. Their rapid adoption by African governments and businesses raises questions about opaque data collection, China-based hosting and contractual control.
Binance: what the $6.3 billion theft means for African financial platforms
Binance is a global cryptocurrency exchange and custody platform. It confirms compromised online wallets and unauthorised withdrawals across several networks—an incident with direct lessons for the security of African financial services.
ACDF 2026 in Nairobi: African cyber sovereignty must now deliver operational capability
The Africa Cyber Defense Forum is a Nairobi gathering of governments, security leaders and technology providers. Its 2026 programme centred on sovereignty; the test is whether that ambition produces investigation teams, functioning security operations and usable African suppliers.
Cyber Week Africa 2026: AI-assisted threat intelligence needs verifiable cooperation
Cyber Week Africa brings public authorities and security professionals together in Nairobi. Its 2026 edition called for cross-border threat-intelligence sharing and AI-assisted defence; common rules and exercises must now turn that intent into measurable cooperation.
Safaricom Cybersecurity Summit: AI will build trust only through measurable controls
Safaricom, the Kenyan telecom operator behind M-Pesa, used its 2026 cybersecurity summit to frame security as an enabler of digital growth. For African operators, trust depends on inventory, accountability and continuous testing—not technology promises.
Ivanti Connect Secure: how African organisations should verify exposure to CVE-2026-104935
An actively exploited zero-day enables unauthenticated command execution on affected Ivanti Connect Secure versions. African organisations should inventory and investigate first, without confusing product presence with confirmed compromise.
Node.js fixes Brotli, DNS and TLS flaws: African APIs must update their runtime
Node.js 22.23.4, 24.22.1 and 26.12.1 fix several high-severity flaws, including Brotli memory corruption. African operators must replace the engine inside active images and services, not only update npm packages.
PHP fixes two critical RCEs: Africa must verify servers, not only websites
PHP has fixed two critical vulnerabilities enabling unauthenticated remote code execution. African organisations need to identify the runtime actually serving traffic, its execution mode and evidence that the corrected build is loaded.
African hospitals must bring cold-chain systems into the cyber inventory
Open-source research confirmed refrigeration equipment from a regional supplier at an African public hospital. It also shows why a real deployment is not, by itself, evidence of Internet exposure, a vulnerability or a compromise.
From supermarkets to hospitals: securing connected cooling across Africa
Hospitals, vaccine stores, data centres, ministries and official buildings use remotely managed cooling or HVAC. The French incident shows why African organisations must treat these systems as critical cyber-physical assets.
Coopérative U refrigeration hack: lessons for African retailers
The attack that disrupted refrigeration at hundreds of French supermarkets shows how connected technical equipment can become a food-safety and financial risk. African retailers should secure vendors, remote access and manual fallback now.
PDX: Africa's AI-assisted health early-warning system must also be cyber-resilient
Africa wants AI to accelerate cross-border detection of health emergencies. PDX can improve preparedness, provided its data, models and decision chain are secured from the outset.
Ghana brings AI into healthcare: data protection must enter the architecture too
Ghana, WHO and UNDP have launched an AI programme to strengthen the health system. Its promise depends on concrete controls over medical data, suppliers and automated decisions.
Nigeria's rogue base-station warning moves banking fraud into the radio layer
NCC-CSIRT has warned that rogue cellular networks can inject fake bank messages and intercept one-time passwords. The alert is preventive, but it forces telecom operators, banks and fintechs to reconsider how much trust they place in a mobile number.
UBA Zambia: an insider cyberattack stopped before data was altered
A mini PC, mobile router and suspicious commands towards Lagos led to two convictions in Zambia. The case shows how device control, network telemetry and digital evidence can stop and then prove an unfinished cyberattack.
France tax phishing in August: why tax platforms are becoming cyber targets
Refunds in July, online correction through 30 November and fake tax messages create a credible fraud window. The lesson for Africa is direct: digital revenue systems concentrate identity, bank data and public trust.
FortiBleed: why exposed firewalls and VPNs are an immediate African risk
ngCERT's 13 July 2026 alert describes a large credential-harvesting campaign targeting Fortinet FortiGate and SSL-VPN systems. For African organisations, the issue is not only patching: it is password hygiene, MFA and perimeter monitoring.
Unitel Angola cyberattack: when telecom risk becomes market risk
On 28 July 2026, Unitel said a cyberattack disrupted voice, mobile data and internet services nationwide, one day before its local stock-market listing. The incident shows why telecom cyber resilience in Africa is no longer only a technical matter.
Kenya presidency defacement: a website incident that tests trust in digital government
On 18 July 2026, Kenya's official presidency website was defaced with a Bitcoin ransom demand. Authorities said there was no evidence of sensitive-data access, but the incident shows why public portals have become trust infrastructure.
Mobile money in 2026: fraud controls are now financial infrastructure
GSMA's 2026 report puts mobile money at $2.1 trillion in 2025 transactions. After INTERPOL's Red Card 2.0 operation, the lesson for Africa is direct: fraud controls are no longer a compliance add-on, but a condition for economic continuity.
Kenya 2025-2026: ransomware, defacements and exposed identities reshape the risk
CYFIRMA's Kenya threat landscape report describes rising cyber activity between 2025 and early 2026, including ransomware listings, more than 120 defacements and AI-enhanced social engineering. For African public and financial services, the issue is now digital identity resilience, not only isolated websites.