All analyses
Incidents, in-depth analyses and digital policies — read in African context.
Search or filter analyses
Filtered view
9 results · some articles are hidden by the active filters
Editorial coverage by pillar
Editorial coverage by pillar
Published analysis count, not recorded attack volume.
Chainalysis incident: African fintechs must treat tokens like payment keys
Chainalysis provides crypto platforms, banks and investigators with tools to analyse blockchains and screen risky transactions. The company now confirms exposure of account data, password hashes and live tokens for all users.
Cold-chain security: Africa must remove refrigeration controllers from the internet
A joint US warning describes worldwide attacks against refrigeration and temperature-monitoring systems. For African health and food systems, OT inventory, passwords and resilient alarms are now continuity priorities.
PHP2Shell, ten days later: African operators must now prove remediation
PHP is the software engine behind a large share of websites and online services. Two critical flaws now have public code and reported exploitation: African operators must prove that every active server is actually loading the corrected build.
Binance: what the $6.3 billion theft means for African financial platforms
Binance is a global cryptocurrency exchange and custody platform. It confirms compromised online wallets and unauthorised withdrawals across several networks—an incident with direct lessons for the security of African financial services.
Ivanti Connect Secure: how African organisations should verify exposure to CVE-2026-104935
An actively exploited zero-day enables unauthenticated command execution on affected Ivanti Connect Secure versions. African organisations should inventory and investigate first, without confusing product presence with confirmed compromise.
Node.js fixes Brotli, DNS and TLS flaws: African APIs must update their runtime
Node.js 22.23.4, 24.22.1 and 26.12.1 fix several high-severity flaws, including Brotli memory corruption. African operators must replace the engine inside active images and services, not only update npm packages.
PHP fixes two critical RCEs: Africa must verify servers, not only websites
PHP has fixed two critical vulnerabilities enabling unauthenticated remote code execution. African organisations need to identify the runtime actually serving traffic, its execution mode and evidence that the corrected build is loaded.