Category Archives: Uncategorized

On Wednesday 21 October 2026, PHP developers released emergency security updates for two critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619, each rated 9.2 out of 10 on the severity scale. By Friday 23 October, South Africa’s Presidency had taken its website offline. The speed of that sequence is the story. PHP is the programming language that quietly […]

NETSCOUT’s DDoS Threat Intelligence Report for January to June 2026, released on 15 October, contains a number that demands attention from every organisation operating digital infrastructure in South Africa. 306,661 distributed denial-of-service attacks hit South African targets in the first half of this year. That is up 78% from the 171,812 recorded in the second […]

Last week, Africa’s largest retailer published its 2026 integrated report. Buried inside a statutory document that most South Africans will never read is a disclosure that every board member, audit committee chair and risk officer in the country should see. Shoprite rates cybersecurity as its number one core risk. The inherent risk is classified as […]

South Africa’s insurance sector is still dealing with the consequences of a breach that began with a single reused password. Three months on, 45 insurers are navigating unresolved regulatory obligations, one ransomware group has published the data anyway, and the Information Regulator has clarified a legal position that every responsible party in the country needs […]

The dominant narrative around South Africa’s cybersecurity crisis frames the country as vulnerable. Underprepared. Behind the curve. A passive recipient of attacks it cannot defend against. Yugan Reddy, CEO of iGuardSA and an SS-Consulting partner, offered a different, more precise frame at GovTech 2026 last week. iGuardSA was the first company SITA called when the […]

South African organisations know cyber risk is a top priority. Most cannot defend against the attack that is already beating them. PwC’s 2026 Digital Trust Insights Survey draws on responses from 3,887 executives across 72 countries, reflecting the landscape immediately preceding South Africa’s most intensive breach year on record. PwC’s analysts describe the local market […]

On the weekend of 13 September 2026, three separate South African financial services brands sent notifications to their customers about a potential data breach. Cell C Fibre notified customers on Saturday evening. EasyEquities sent its notification the same night. Bidvest Bank’s notice came out a few hours earlier. The wording across all three was almost […]

For years, the implicit assumption running through South Africa’s cybersecurity compliance conversation was straightforward. If your organisation was breached, you were the victim. You notified the Information Regulator, cooperated with the investigation, implemented remediation measures, and the regulatory process focused on ensuring you fixed what went wrong. That assumption is no longer valid. On 31 […]

That is not a hypothetical risk scenario. It is what happened between May and August 2026, and the full picture only became clear this week when the Minister of Science, Technology and Innovation, Blade Nzimande, answered questions in Parliament. The story starts with a performance dip. What Happened to Lengau On 25 May 2026, users […]

Your security controls look good on paper. The question worth asking is whether they hold up when someone who thinks like an attacker tests them. Most organisations have invested in security technology. Firewalls, endpoint detection, SIEM platforms, identity controls. The assumption built into that investment is that because the tools are in place, they are […]