WATCH SCHEDULED·

All analyses

Incidents, in-depth analyses and digital policies — read in African context.

Search or filter analyses
By pillarAllINFRATHREAT-AFSOVRGNFINSECAISEC
By countryAllAfrica 9Angola 1Cameroon 1Central African Republic 1Côte d'Ivoire 7Egypt 1Ethiopia 4France 3Ghana 9Kenya 19Lesotho 1Mali 1Mauritania 1Morocco 4Nigeria 20Senegal 10Sierra Leone 1South Africa 16Tanzania 1Uganda 1Union Européenne 1Zambia 2
By sectorAllBanking & fintech 11Telecoms 9Public sector 7Healthcare 4Technology & cloud 4Cross-sector 10
SortMost recentSeverityAfrica Score

Filtered view · THREAT-AF

3 results · some articles are hidden by the active filters

Show all articles
Editorial coverage by pillar

Editorial coverage by pillar

Published analysis count, not recorded attack volume.

INFRA8
THREAT-AF9
SOVRGN5
FINSEC7
AISEC5
November 2026 · 1
THREAT-AFZACross-sector7 Nov 2026

PHP2Shell, ten days later: African operators must now prove remediation

PHP is the software engine behind a large share of websites and online services. Two critical flaws now have public code and reported exploitation: African operators must prove that every active server is actually loading the corrected build.

94AFR5Read →
October 2026 · 2
THREAT-AFNGTechnology & cloud24 Oct 2026

Node.js fixes Brotli, DNS and TLS flaws: African APIs must update their runtime

Node.js 22.23.4, 24.22.1 and 26.12.1 fix several high-severity flaws, including Brotli memory corruption. African operators must replace the engine inside active images and services, not only update npm packages.

91AFR4Read →
THREAT-AFZACross-sector24 Oct 2026

PHP fixes two critical RCEs: Africa must verify servers, not only websites

PHP has fixed two critical vulnerabilities enabling unauthenticated remote code execution. African organisations need to identify the runtime actually serving traffic, its execution mode and evidence that the corrected build is loaded.

93AFR5Read →