All analyses
Incidents, in-depth analyses and digital policies — read in African context.
Search or filter analyses
Filtered view
20 results · some articles are hidden by the active filters
Editorial coverage by pillar
Editorial coverage by pillar
Published analysis count, not recorded attack volume.
Cold-chain security: Africa must remove refrigeration controllers from the internet
A joint US warning describes worldwide attacks against refrigeration and temperature-monitoring systems. For African health and food systems, OT inventory, passwords and resilient alarms are now continuity priorities.
PHP2Shell, ten days later: African operators must now prove remediation
PHP is the software engine behind a large share of websites and online services. Two critical flaws now have public code and reported exploitation: African operators must prove that every active server is actually loading the corrected build.
ACDF 2026 in Nairobi: African cyber sovereignty must now deliver operational capability
The Africa Cyber Defense Forum is a Nairobi gathering of governments, security leaders and technology providers. Its 2026 programme centred on sovereignty; the test is whether that ambition produces investigation teams, functioning security operations and usable African suppliers.
Cyber Week Africa 2026: AI-assisted threat intelligence needs verifiable cooperation
Cyber Week Africa brings public authorities and security professionals together in Nairobi. Its 2026 edition called for cross-border threat-intelligence sharing and AI-assisted defence; common rules and exercises must now turn that intent into measurable cooperation.
Safaricom Cybersecurity Summit: AI will build trust only through measurable controls
Safaricom, the Kenyan telecom operator behind M-Pesa, used its 2026 cybersecurity summit to frame security as an enabler of digital growth. For African operators, trust depends on inventory, accountability and continuous testing—not technology promises.
Ivanti Connect Secure: how African organisations should verify exposure to CVE-2026-104935
An actively exploited zero-day enables unauthenticated command execution on affected Ivanti Connect Secure versions. African organisations should inventory and investigate first, without confusing product presence with confirmed compromise.
Node.js fixes Brotli, DNS and TLS flaws: African APIs must update their runtime
Node.js 22.23.4, 24.22.1 and 26.12.1 fix several high-severity flaws, including Brotli memory corruption. African operators must replace the engine inside active images and services, not only update npm packages.
PHP fixes two critical RCEs: Africa must verify servers, not only websites
PHP has fixed two critical vulnerabilities enabling unauthenticated remote code execution. African organisations need to identify the runtime actually serving traffic, its execution mode and evidence that the corrected build is loaded.
France tax phishing in August: why tax platforms are becoming cyber targets
Refunds in July, online correction through 30 November and fake tax messages create a credible fraud window. The lesson for Africa is direct: digital revenue systems concentrate identity, bank data and public trust.
Kenya presidency defacement: a website incident that tests trust in digital government
On 18 July 2026, Kenya's official presidency website was defaced with a Bitcoin ransom demand. Authorities said there was no evidence of sensitive-data access, but the incident shows why public portals have become trust infrastructure.
Mobile money in 2026: fraud controls are now financial infrastructure
GSMA's 2026 report puts mobile money at $2.1 trillion in 2025 transactions. After INTERPOL's Red Card 2.0 operation, the lesson for Africa is direct: fraud controls are no longer a compliance add-on, but a condition for economic continuity.
Kenya 2025-2026: ransomware, defacements and exposed identities reshape the risk
CYFIRMA's Kenya threat landscape report describes rising cyber activity between 2025 and early 2026, including ransomware listings, more than 120 defacements and AI-enhanced social engineering. For African public and financial services, the issue is now digital identity resilience, not only isolated websites.
Why Fintech Security Matters More Than Ever in Africa
African fintech has brought hundreds of millions into the formal financial system. M-Pesa, Wave, Moniepoint, and dozens of others have transformed how a continent transacts. But the attack surface has grown faster than the security posture — and the consequences of a major breach are now systemic, not just corporate.
Cloud Sovereignty in Africa: Challenges and Opportunities
As African governments and enterprises migrate to cloud platforms, data sovereignty has moved from academic debate to strategic urgency. AWS, Azure, and Google Cloud are present but concentrated. Most African countries still route sensitive data through foreign jurisdictions. Here is what is at stake — and what a credible African response looks like.
How African Telecom Operators Are Facing Increasing Cyber Threats
MTN, Orange, Safaricom, Airtel — Africa's telecom giants carry the continent's financial flows, government communications, and digital identity infrastructure. They are also under sustained attack from SIM swap fraud, SS7 exploitation, and targeted ransomware campaigns. Here is what is happening and what must change.
The State of Cyber Infrastructure in Africa 2026
Africa's digital transformation has accelerated dramatically — but so has the attack surface. From ransomware targeting ports and hospitals to SS7 exploitation and mobile money fraud, the continent faces a cyber threat landscape that outpaces current defenses. Here is where things stand in 2026.
Kenya's eCitizen outage: when a DDoS attack blocks digital public services
In July 2023, Kenya confirmed that a DDoS attack made eCitizen unavailable, while officially reporting no access to or loss of data. The incident shows why African digital government must protect service availability as seriously as stored information.
AI phishing, deepfakes and payment fraud: African organisations must verify trust differently
INTERPOL reported in 2026 that actors operating particularly in West and Southern Africa increasingly use AI, deepfakes and automated phishing tools to commit fraud at scale. Payment and identity verification now need to be treated as core cyber defences.
Africa's Data Breach Crisis: A Silent Reality That Could Explode
Standard Bank, FlySafair, MTN — data breaches in Africa are real and multiplying. But unlike Europe, they remain largely undisclosed, rarely sanctioned, and almost never publicly analysed. Is Africa less targeted? Or is it simply not yet equipped to see, measure, and talk about the problem?