All analyses
Incidents, in-depth analyses and digital policies — read in African context.
Search or filter analyses
Filtered view · THREAT-AF
5 results · some articles are hidden by the active filters
Editorial coverage by pillar
Editorial coverage by pillar
Published analysis count, not recorded attack volume.
PHP2Shell, ten days later: African operators must now prove remediation
PHP is the software engine behind a large share of websites and online services. Two critical flaws now have public code and reported exploitation: African operators must prove that every active server is actually loading the corrected build.
Cyber Week Africa 2026: AI-assisted threat intelligence needs verifiable cooperation
Cyber Week Africa brings public authorities and security professionals together in Nairobi. Its 2026 edition called for cross-border threat-intelligence sharing and AI-assisted defence; common rules and exercises must now turn that intent into measurable cooperation.
Node.js fixes Brotli, DNS and TLS flaws: African APIs must update their runtime
Node.js 22.23.4, 24.22.1 and 26.12.1 fix several high-severity flaws, including Brotli memory corruption. African operators must replace the engine inside active images and services, not only update npm packages.
PHP fixes two critical RCEs: Africa must verify servers, not only websites
PHP has fixed two critical vulnerabilities enabling unauthenticated remote code execution. African organisations need to identify the runtime actually serving traffic, its execution mode and evidence that the corrected build is loaded.